Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
File: sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft (raw, json)
Hash identifier: 78VBCi5wgwAphzNJIunTdQguv7Bnc/6nDrRJv+2mmYU=
Subject key identifier: 9E:BC:D6:31:36:87:85:88:2C:81:7E:C5:ED:C9:94:61:5F:39:EB:63
Authority key identifier: B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
Certificate issuer: /CN=b0d8f469b90711a1282bf490d00f156096597760
Certificate serial: 0196BF6F934D6F9C3199A9C1FDAFB38A4F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
Manifest number: 148F
Signing time: Sun 11 May 2025 13:01:22 +0000
Manifest this update: Sun 11 May 2025 13:01:22 +0000
Manifest next update: Mon 12 May 2025 13:01:22 +0000
Files and hashes: 1: 4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa (hash: yb1ZkdtEhTyv9DB1WP29BM5drsp9NA6SmJ1955YSoLA=)
2: sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl (hash: iIiJsMx6Z89sC0RviWBWLkIg8rRp8XGxpJ1LzW81BeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:93:4d:6f:9c:31:99:a9:c1:fd:af:b3:8a:4f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d8f469b90711a1282bf490d00f156096597760
Validity
Not Before: May 11 13:01:22 2025 GMT
Not After : May 12 13:01:22 2025 GMT
Subject: CN=9ebcd631368785882c817ec5edc994615f39eb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:29:54:b4:59:6d:6d:0d:47:c0:0f:97:b3:
6d:68:15:a0:47:14:e0:03:09:25:e9:83:00:16:ef:
cd:26:71:79:98:f8:73:ab:50:ca:50:c5:f8:ec:82:
05:7f:fc:1c:4a:fc:2a:06:8f:0c:94:f5:5e:84:7d:
0b:9a:2f:5e:09:a8:b7:cc:f8:a8:f0:cc:d6:4e:69:
26:e5:46:55:5e:4a:48:35:22:56:70:3e:9a:4d:36:
87:2b:48:d7:4c:85:2e:39:94:fd:34:31:7a:a7:cd:
89:75:68:20:9d:5d:69:da:06:94:77:9c:39:49:22:
30:7e:5f:dc:0b:90:46:3f:2f:3b:4f:9b:b7:1d:9e:
6d:9c:3e:73:dd:dc:04:3a:f3:c1:f9:93:ee:7b:16:
dc:af:ce:54:ff:61:ac:f0:f4:8b:7b:a0:5a:1c:ac:
11:e7:04:6b:c7:22:9d:31:04:30:2a:44:94:08:26:
14:7e:78:e6:ef:73:8f:d5:48:ee:13:c5:77:58:cd:
a1:e5:6c:a7:6c:88:9d:ab:a4:a0:07:7b:71:63:17:
1c:40:56:75:f9:43:85:b3:b5:f6:99:11:d3:aa:75:
9e:35:e4:79:a6:37:50:9a:45:b3:6b:15:20:d3:e9:
ad:7d:20:ab:8b:a3:5f:36:2d:80:2f:34:4e:85:db:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:D6:31:36:87:85:88:2C:81:7E:C5:ED:C9:94:61:5F:39:EB:63
X509v3 Authority Key Identifier:
keyid:B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:74:5d:62:d4:1f:f2:63:fb:ee:66:d4:83:6e:d7:42:02:c7:
9d:64:ff:6a:25:2f:b6:e9:96:15:e8:ea:8b:f0:df:5b:a6:be:
73:ac:dd:c3:a5:2c:31:2d:ff:9e:78:8d:66:5a:59:8c:e2:9c:
05:d2:0b:9d:b1:86:9f:f8:ab:d5:e2:3b:3f:4c:c3:2b:ed:5f:
1f:1a:8c:5a:42:1a:b2:6f:8d:08:53:58:48:ea:dd:df:f3:1b:
4e:83:6a:57:53:86:88:19:e0:cf:5e:4e:df:94:e9:cd:16:0e:
81:ac:0f:af:f9:84:1d:40:78:e5:c0:35:00:3e:7c:3a:c9:e5:
5d:10:7c:d0:49:36:d7:18:53:30:a1:5b:03:ba:a2:3d:70:10:
56:49:3f:04:f3:42:65:d5:06:b9:e6:99:8d:61:de:f6:bb:7a:
26:fa:7b:af:66:6d:8f:7e:73:d3:07:8c:fb:96:22:7d:f3:10:
7e:96:e9:07:de:a5:a4:f3:b5:f4:f1:9f:0e:89:d8:61:01:23:
5e:e8:68:c4:3b:7b:bd:9d:b6:43:fc:77:0f:86:e1:16:e3:01:
d5:52:d7:ad:b0:07:37:b7:f6:d9:7f:0b:a9:dc:ca:91:fb:dd:
eb:c6:18:6f:5a:bf:56:79:c2:de:2d:83:2e:5b:09:3f:a3:50:
14:22:3c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:03:40 2025 by rpki-client