Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File: SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier: O2Cw1OZsoivSo7iiuc3CB8QozqU2coMdAiITd2+mHTU=
Subject key identifier: EE:A9:61:80:51:9F:B0:9D:CD:3D:7D:32:7B:F0:1E:15:E0:E3:A6:00
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer: /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial: 0196BC6E3367A07D030C47BB3C6506317D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 23:01:00 +0000
Manifest this update: Sat 10 May 2025 23:01:00 +0000
Manifest next update: Sun 11 May 2025 23:01:00 +0000
Files and hashes: 1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: NjX4iw2S6QK1jJQNiqrwXad+dTh50GZ981uR9Gk1Q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:33:67:a0:7d:03:0c:47:bb:3c:65:06:31:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Validity
Not Before: May 10 23:01:00 2025 GMT
Not After : May 11 23:01:00 2025 GMT
Subject: CN=eea96180519fb09dcd3d7d327bf01e15e0e3a600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:e9:0d:59:3a:a4:e4:77:52:00:db:a4:3f:
17:e4:ee:18:fa:81:89:03:d4:b6:07:3b:95:0c:57:
7d:d9:f6:72:9a:09:60:4a:4a:d6:32:9a:1c:8d:57:
0d:40:f0:81:52:09:75:f3:57:1d:54:2d:30:2d:6c:
71:c0:04:ce:6c:82:ac:7a:45:87:38:f0:50:8a:ee:
12:79:f0:c5:30:71:eb:c7:14:b9:e0:03:b3:f9:38:
2c:86:d9:47:48:38:52:41:fa:5e:45:99:a8:bb:38:
0e:f7:68:ca:b5:c6:36:a9:a7:7b:f3:c9:07:5c:52:
67:fb:5d:15:6e:8e:78:a1:74:56:20:69:9f:5a:64:
20:b6:77:b4:88:a7:33:8c:12:b9:f3:59:cf:75:88:
e6:fe:19:ec:95:1d:75:e8:b5:a8:dd:cb:34:ac:95:
79:05:1a:1a:b6:98:97:45:80:e1:4f:a0:d6:25:ad:
3a:73:aa:b5:6f:71:38:6f:c1:b5:59:62:fb:c4:57:
4d:c1:af:63:5c:39:bc:2b:f7:a9:75:90:27:4c:4c:
05:b0:ed:eb:37:2e:d1:55:b3:3a:56:cb:a8:82:dd:
fe:29:de:96:eb:a6:53:f4:e4:bd:f1:3a:3b:71:dd:
60:40:2a:a3:ad:c3:63:07:59:c0:3b:b8:26:3f:70:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:61:80:51:9F:B0:9D:CD:3D:7D:32:7B:F0:1E:15:E0:E3:A6:00
X509v3 Authority Key Identifier:
keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9e:4d:2d:f6:93:75:8e:20:8d:17:a0:be:d3:d4:97:3d:51:
de:21:01:97:d8:ab:a2:8d:b6:e2:69:bd:7d:36:d6:bb:c9:1c:
fc:5b:16:b6:7e:08:8d:ac:dc:71:67:aa:b4:ad:94:b3:37:53:
bd:17:3d:50:d1:fc:ed:87:e8:c4:00:6e:b3:15:dd:ae:9f:4c:
13:fb:8c:89:4e:68:52:fb:9b:55:ea:9d:5a:b9:32:c5:7e:47:
f9:5e:b6:56:55:b5:fb:e4:6b:3b:a7:8e:50:8e:25:53:60:54:
fe:75:2e:3d:cf:97:df:9c:6d:b9:30:36:62:07:bf:d3:4a:5c:
c5:5e:6e:3f:a0:e8:71:05:7d:81:d6:9f:d1:69:7f:fa:82:9f:
7d:56:39:7b:af:2f:b2:5c:f2:b9:6e:76:c9:7a:c5:0c:c3:e4:
92:89:d5:45:dd:51:cc:fc:3a:f4:d1:40:dc:52:bc:06:c9:3e:
5f:81:7f:09:32:08:a2:b4:91:46:55:bc:a6:3d:a2:63:ed:a2:
43:1b:fd:c3:80:b7:6a:3c:8e:5f:78:10:e2:e8:2b:34:2b:9e:
36:d5:5e:68:90:34:00:7b:94:6d:f2:90:01:0c:f5:9b:cc:f0:
45:d0:54:4f:66:b6:6d:e7:7d:8c:ab:2f:47:2d:0e:7d:77:52:
14:99:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:12:54 2025 by rpki-client