Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File: S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier: 1DTn4eIsIgWArpQdvBagvvuMiM7MfaRHZJb5f1ZBvVw=
Subject key identifier: BB:AC:75:46:B8:C4:EA:93:06:58:25:B1:37:B0:53:B4:1F:2E:DA:CB
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial: 0196B823B22DC0FE41D5A7E1675DE0AA448F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number: 100B
Signing time: Sat 10 May 2025 03:01:09 +0000
Manifest this update: Sat 10 May 2025 03:01:09 +0000
Manifest next update: Sun 11 May 2025 03:01:09 +0000
Files and hashes: 1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: VVQzeVkoMT2smSILdWGcw1KPGU+SQ5V0v/bJChRfi4k=)
2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:b2:2d:c0:fe:41:d5:a7:e1:67:5d:e0:aa:44:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Validity
Not Before: May 10 03:01:09 2025 GMT
Not After : May 11 03:01:09 2025 GMT
Subject: CN=bbac7546b8c4ea93065825b137b053b41f2edacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:81:f9:a0:5c:7b:00:31:6b:3b:37:67:9c:
ec:dc:1c:21:4a:55:40:9b:a5:89:df:3a:c1:10:da:
91:7a:93:d5:6d:0f:5b:df:76:2a:d0:62:5d:a6:bf:
38:e5:61:13:5d:d0:9a:2c:f3:da:4a:bc:c2:7f:50:
52:96:c9:03:43:13:e4:23:88:17:96:78:bf:5f:d6:
4a:d4:15:eb:ad:f6:69:ce:8c:82:76:bc:cf:46:9d:
d3:8a:3f:63:91:ae:97:f0:c8:1e:9f:6e:3a:fb:90:
90:05:8f:5f:86:56:f7:ee:2c:01:6c:ec:6a:1f:90:
37:93:0d:0b:91:64:0f:21:4d:13:c1:06:93:a1:61:
55:ce:da:34:bc:1b:dc:1b:9c:01:48:55:13:a6:7d:
a8:3a:78:70:10:ff:11:e4:45:b5:ed:c5:40:aa:e9:
cb:17:0c:88:fd:85:43:3e:13:ed:26:86:a4:b8:da:
33:a8:92:9a:77:1b:cb:67:96:5d:28:af:6e:50:f5:
e2:c4:28:05:51:a3:5d:4b:32:24:43:d7:75:2f:38:
62:69:bc:da:6a:2c:18:30:00:64:cd:96:52:44:1f:
ee:fe:d1:00:d8:10:14:a7:44:d1:46:7e:6d:2e:e5:
c7:a5:53:77:19:41:af:cb:5c:73:b0:b8:03:eb:b9:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AC:75:46:B8:C4:EA:93:06:58:25:B1:37:B0:53:B4:1F:2E:DA:CB
X509v3 Authority Key Identifier:
keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:37:92:95:0b:28:ac:b3:e1:33:c2:8e:e9:4c:94:6b:92:6b:
ef:2b:3d:e7:45:6e:68:45:d1:78:5b:3c:0b:80:e0:a6:a8:ad:
43:e6:f7:90:b0:54:30:05:ec:68:88:29:c1:34:83:d1:f1:28:
25:d2:03:45:fc:99:66:b2:99:fb:dd:46:2e:58:37:d4:1e:66:
4b:e1:7f:33:b2:b2:eb:3c:d1:39:64:fe:6e:81:c3:c1:4c:c5:
e8:6b:1a:3a:6e:a3:68:d5:ed:a2:e4:76:54:0f:4c:80:0a:83:
5b:fe:be:c2:b2:8d:0a:39:8b:d9:bc:d4:a8:a7:d9:ec:51:5b:
e5:99:f6:52:3b:77:88:25:a6:6b:2c:07:33:34:4d:45:b4:ce:
24:43:2b:b1:b9:ef:8f:b0:0d:ea:10:35:76:0c:58:ab:66:bf:
f7:b8:75:f5:51:96:2e:24:55:df:97:52:e0:6b:17:af:b4:8f:
5a:1f:5c:a8:17:6b:d6:55:cc:b3:ea:ee:5d:d7:0c:55:30:db:
72:77:fb:d6:aa:3b:64:38:6d:85:27:fc:53:86:fe:68:ed:12:
c3:74:4f:7e:e1:01:bf:ee:42:ca:54:e4:18:44:60:f0:71:d2:
cb:52:8f:8d:a5:bf:c3:29:3d:68:6b:b6:01:6a:8d:94:94:da:
02:57:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:53:06 2025 by rpki-client