Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: JdvauzhRR6Fz66E0x19BXitoOmAVHZM/gXmchNI3VGU=
Subject key identifier: 39:A9:E8:AE:46:C3:9C:4D:E4:45:F0:94:97:A4:5F:DD:C7:5E:A4:A0
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 01969FE412AAC8EB11CD1799D283C0E05ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 10:00:46 +0000
Manifest this update: Mon 05 May 2025 10:00:46 +0000
Manifest next update: Tue 06 May 2025 10:00:46 +0000
Files and hashes: 1: Rdx8XfheQK9SaYz_CldryphH9T8.roa (hash: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=)
2: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: 24uEPwmih3NPvSur8/C907+oapbFbvCu1lvSAVdPEhw=)
3: fUKc1eWdHmKeTh30S5pWd_dRf4M.roa (hash: GDoe187PYSy+m1pOUWwfwziOM1L2+4EiEEfpzL06VQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:12:aa:c8:eb:11:cd:17:99:d2:83:c0:e0:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: May 5 10:00:46 2025 GMT
Not After : May 6 10:00:46 2025 GMT
Subject: CN=39a9e8ae46c39c4de445f09497a45fddc75ea4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:df:a5:2b:7f:5b:78:50:d2:c3:19:d9:6c:
f6:67:9f:65:52:f5:19:64:c0:cd:2d:06:08:59:57:
a9:d7:25:fc:1c:6c:a0:70:99:71:a6:0f:33:cf:c9:
04:f9:f6:00:ee:59:ca:d4:55:16:3a:3a:5d:ed:3f:
3c:bc:4f:c8:5c:b2:7a:ea:13:7a:b9:d5:21:2d:91:
20:f5:74:04:aa:d4:ad:b7:18:c1:8b:b7:68:cf:c5:
8d:4b:b3:fd:64:61:e2:c0:1b:0d:a9:47:a6:8f:1b:
7b:e9:53:64:05:a3:38:0f:6c:3c:d0:ea:cf:17:6f:
9e:bf:29:fb:32:65:0d:db:bb:e0:63:65:31:e0:9b:
6a:fc:27:87:92:0a:7d:3b:28:1f:d6:e6:a0:41:2e:
01:af:ec:49:4c:86:60:3a:2d:e1:ea:e6:8f:61:3e:
37:6a:17:f5:50:26:5d:53:3c:98:b8:3e:b3:eb:8f:
fb:53:1b:d6:50:b9:3a:73:9d:10:ba:f1:32:02:9f:
07:a3:5e:14:85:fd:bd:3a:06:51:65:c9:99:09:cc:
c8:ba:d8:66:96:72:99:34:dd:03:e0:38:14:f1:1c:
b3:63:a1:71:b8:d5:5d:b3:ac:69:1a:a3:c6:09:51:
43:0c:87:47:91:b4:f8:06:5f:e5:94:4d:df:ad:6e:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:E8:AE:46:C3:9C:4D:E4:45:F0:94:97:A4:5F:DD:C7:5E:A4:A0
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:1d:1c:9a:26:33:ae:a6:22:d1:c6:2b:2c:c2:df:9f:e6:
58:9e:9c:40:c7:9b:a1:3c:a3:57:ab:d8:cb:cf:90:e4:45:c0:
e5:3f:6f:a0:6e:3e:0b:fe:99:11:b3:8a:db:50:06:90:cc:12:
a9:aa:b2:17:ff:c9:52:6d:92:5b:3a:05:2b:a8:3b:65:af:3e:
4a:40:5c:07:ef:40:28:88:65:12:8f:3f:1e:99:04:90:e8:62:
3a:46:c1:36:9b:89:ab:2b:83:a0:1a:39:db:92:29:87:51:3c:
03:79:39:00:7b:b2:ce:9d:4b:5e:62:90:39:f2:2b:91:b8:b2:
f9:b3:25:2e:83:9d:da:ff:7b:36:19:3a:76:35:fc:06:68:63:
e4:03:90:d7:c1:5a:60:d6:80:03:7d:c2:81:5f:5b:6b:00:58:
83:21:d2:f9:ba:8a:fb:7a:06:cb:e2:f6:3e:86:5c:fb:11:4c:
4f:b9:ad:af:e0:3a:8a:22:91:e0:fb:40:f8:a1:af:3e:92:9a:
a9:2b:fd:36:aa:a0:bb:7b:4b:cd:08:34:72:31:e6:b8:e8:fc:
86:47:4c:bb:6e:19:a4:4c:df:5e:9c:c4:a5:50:19:73:85:60:
40:d4:a6:d1:e5:87:ab:03:89:09:f8:b7:45:bb:b2:84:b1:ae:
21:99:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:25:59 2025 by rpki-client