Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: 5ZpUHt4LwN7qK+Vjjwgm4be9+3wQT8gvUYTF+JTbdp8=
Subject key identifier: 15:DE:30:23:C5:87:9E:54:D6:17:EE:4B:4D:C9:3B:BE:F1:15:72:1C
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 0196B7EC998880102AFCA9A33A5E10F0BFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 02:00:58 +0000
Manifest this update: Sat 10 May 2025 02:00:58 +0000
Manifest next update: Sun 11 May 2025 02:00:58 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: Vsa9dX9wScXVMQ2cqPurnAWeXIfcoCtsGn2p7w14dB0=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:99:88:80:10:2a:fc:a9:a3:3a:5e:10:f0:bf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: May 10 02:00:58 2025 GMT
Not After : May 11 02:00:58 2025 GMT
Subject: CN=15de3023c5879e54d617ee4b4dc93bbef115721c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:e6:d8:67:2e:d1:12:a4:99:4a:e1:af:ce:
aa:9f:94:77:27:00:a9:38:17:a6:61:f7:61:f4:51:
73:e2:a9:fa:23:53:66:c5:c4:aa:dd:a7:4e:c2:f6:
2b:ae:35:e1:99:ff:b0:d9:60:f1:d2:50:39:f5:0a:
90:09:61:9a:8c:48:23:9f:ef:23:00:af:5f:38:e4:
4c:03:ac:bf:af:ab:2e:9f:1c:81:32:c8:40:36:05:
ac:95:c2:27:fc:d8:f2:0b:62:b3:d4:21:c5:d1:b0:
a0:da:fe:06:f1:97:dd:fd:a7:92:e9:3d:34:0d:8d:
a1:19:86:2f:d0:30:46:a4:f2:e6:8f:fc:81:5f:19:
79:66:18:39:19:b0:94:7f:49:e6:36:26:6e:1a:cf:
39:cd:68:d8:8a:14:3e:ad:1b:a5:a9:18:bd:63:ff:
55:9c:b4:b6:bd:df:ef:58:04:da:50:dc:13:3c:df:
86:af:c5:df:8f:69:5f:8a:10:ac:0e:6f:cd:2d:a1:
c4:33:3c:39:20:b8:43:45:64:45:ec:19:f4:95:dd:
8e:c1:17:86:85:53:36:59:40:7e:f8:fb:66:87:75:
1a:77:bb:8c:fd:c6:fa:76:ed:7a:d1:a6:20:01:6a:
06:f6:9b:d3:8e:49:21:b9:0c:71:9f:77:0e:00:79:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:30:23:C5:87:9E:54:D6:17:EE:4B:4D:C9:3B:BE:F1:15:72:1C
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:b6:88:ef:0b:4d:64:2f:82:84:8c:0f:51:dc:69:d2:e4:
46:56:d6:9d:5f:68:43:c2:8f:c4:02:e5:b1:c8:39:ac:c6:d6:
14:e9:8e:49:32:e2:13:94:a3:88:7b:0d:db:a0:a8:a7:af:39:
c8:dc:d6:c1:61:8e:37:f2:68:f2:86:9e:73:6f:cd:ea:8c:05:
0e:40:25:e9:73:96:5e:09:38:89:1d:7b:e1:7e:8d:8d:02:71:
56:f1:54:3c:71:5c:f8:d2:9f:1d:b6:b0:b8:bc:0d:07:5d:73:
49:c3:2c:cd:83:9c:60:93:b9:a2:69:10:33:cc:64:12:05:fd:
80:4e:5d:83:f2:23:77:89:a0:48:2e:63:b6:aa:41:e6:1a:f2:
c6:eb:6c:1b:21:c4:80:4d:30:8d:ab:89:ee:40:72:d2:c8:51:
53:19:7e:ec:91:fb:cf:5d:0f:94:27:a5:20:17:3f:c6:d4:03:
1c:ae:55:8b:28:03:1a:33:40:b7:b7:97:00:60:3d:b5:ff:28:
9b:cc:bd:5b:5d:1b:d3:b3:18:74:1a:69:38:ed:34:c9:bd:1e:
4d:c0:76:79:11:30:59:84:d7:46:7e:c0:03:3a:89:cb:f6:fc:
c2:1b:03:d7:a5:c0:26:b5:f9:e3:8d:cb:d4:db:9c:16:04:66:
81:b2:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:49:24 2025 by rpki-client