Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier: K9ixa0iBKr7Mc+EqV5Yx3yfyHzKdWfVGmPy/1VFaqqQ=
Subject key identifier: 78:8E:14:08:1D:58:88:CC:23:2F:1C:D8:37:E1:88:E9:60:44:D2:8D
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 01969FAD2C00D6AC93601DC51AEA7AA2305C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number: 0A7F
Signing time: Mon 05 May 2025 09:00:48 +0000
Manifest this update: Mon 05 May 2025 09:00:48 +0000
Manifest next update: Tue 06 May 2025 09:00:48 +0000
Files and hashes: 1: FZ5EZpDq-K0XA4SjrzGHyd153to.roa (hash: b4KiX1j/3r//4ngjLPvb5RfQAtdM3BaY0Jf4yPv0wJk=)
2: NVd8LXx_N2OnP7Dz0qYfp0BrwyE.roa (hash: KXS5t23U3JN9IkH4G9USA7r6qnruCVWmREWySxRe2Ns=)
3: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: ZqKgugT92nma+D8SpOg6A94yXfuRCxHUVHdCGBm5/Dw=)
4: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=)
5: u7FYseYTvFuik1kkZdQXan5NUT4.roa (hash: OILWNi9mv9AwF8S+yDdOr81iUCDmwjfaxbEGwvX0caY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:2c:00:d6:ac:93:60:1d:c5:1a:ea:7a:a2:30:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: May 5 09:00:48 2025 GMT
Not After : May 6 09:00:48 2025 GMT
Subject: CN=788e14081d5888cc232f1cd837e188e96044d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:98:c7:67:09:12:f4:07:35:30:47:15:e8:
1e:a4:06:de:1c:25:5c:fa:bc:a5:0b:34:36:c0:da:
2d:1c:81:45:e1:4c:60:62:06:43:4c:a9:49:13:a0:
86:d7:ca:c9:61:77:cf:2d:6d:88:98:96:7d:2f:66:
4a:da:fc:15:32:49:c6:60:95:c6:b5:d4:df:26:09:
22:2d:0d:d0:01:f8:a6:ec:ce:f2:3e:d7:d5:15:90:
da:89:f2:7a:b7:5b:39:79:ed:47:0b:ae:0c:fe:ae:
b9:52:53:e5:ce:12:ed:da:ba:8e:4b:34:b4:04:46:
c9:41:24:0e:6e:ee:c3:27:b1:af:9b:db:31:ec:36:
5e:d8:9a:74:00:d3:33:e6:40:cb:58:d7:d1:6f:18:
1c:96:68:a0:f7:2c:07:82:dc:03:52:d6:45:8a:34:
45:ba:10:e8:1e:ff:e3:ce:a3:3c:05:53:27:18:70:
84:69:80:50:73:a6:65:59:56:22:67:6b:42:73:8b:
ce:f6:1a:10:58:55:77:88:71:e8:2f:db:6b:63:79:
8f:f2:7f:11:36:3d:da:37:6e:99:2d:84:86:e8:df:
28:c8:22:8a:84:a6:44:76:d2:ab:b3:84:3b:79:c7:
51:16:aa:68:e1:16:24:bd:d5:a6:51:2b:7f:8d:d7:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8E:14:08:1D:58:88:CC:23:2F:1C:D8:37:E1:88:E9:60:44:D2:8D
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:93:18:34:85:ef:d9:29:22:c2:af:60:6a:91:9a:6f:66:
a0:2c:11:91:bf:f4:a9:48:cb:b7:d0:81:d7:26:38:4d:ef:a7:
08:f1:bf:30:84:41:7b:b2:0a:47:18:c6:d7:89:ff:15:77:67:
72:79:72:6a:da:26:fc:2c:ce:3a:23:ac:44:c1:68:67:88:c5:
65:0e:76:59:65:57:b7:38:2b:f9:79:8f:ed:e9:a6:6a:28:c3:
8e:3e:1e:ec:17:6a:20:56:10:bf:28:f0:dc:85:c7:fd:78:b3:
56:25:dc:be:42:47:17:de:d5:4f:cb:96:10:14:fb:7f:22:85:
cd:09:b5:9d:c7:d6:9f:c2:59:43:6c:d1:19:28:cd:3d:22:8f:
b9:ab:3e:4b:38:86:5a:c8:10:fb:3f:d2:b8:e1:b9:68:01:3e:
1e:89:aa:2b:1a:7b:b0:ad:98:b2:ff:43:c7:7d:c9:7f:59:21:
38:cf:55:6c:30:22:68:96:af:40:28:72:23:6d:ba:44:47:fc:
b5:c5:d9:e3:10:05:18:3f:b9:e2:80:7e:5e:67:4b:94:5f:df:
aa:d5:78:1a:38:04:8c:e8:4f:77:83:12:02:12:ad:eb:e9:b3:
89:26:08:1d:08:00:d7:ab:96:b4:48:fd:6d:8e:79:7d:52:82:
74:7d:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:07:28 2025 by rpki-client