Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: CjgJTDysEQ0iDsvdDN6ZVnAFKn5dzJOWm5ZT2YXhXRw=
Subject key identifier: 10:8F:65:28:3C:F7:83:10:A6:BA:A6:0D:56:A5:3B:38:CA:66:86:7F
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 0196BE5C38773F0202C4EFCF556580CB818F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 08:00:36 +0000
Manifest this update: Sun 11 May 2025 08:00:36 +0000
Manifest next update: Mon 12 May 2025 08:00:36 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: s5Xp8dcrZVWngRFUVQiyy7FxsmGz/KcEwYegRVewq/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:38:77:3f:02:02:c4:ef:cf:55:65:80:cb:81:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: May 11 08:00:36 2025 GMT
Not After : May 12 08:00:36 2025 GMT
Subject: CN=108f65283cf78310a6baa60d56a53b38ca66867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:75:bb:e6:fb:83:d5:74:bc:ab:18:32:9f:
ef:73:26:3f:87:e4:05:38:56:ee:ae:df:d6:8c:c6:
3d:27:c6:e5:41:6c:2c:bf:14:ad:75:c7:b0:45:9b:
8c:68:33:fe:f8:0d:ea:9b:ec:a1:25:1b:22:c6:24:
cf:be:f4:24:57:77:a0:1b:c7:82:05:67:31:d4:bf:
80:9a:05:e8:af:15:1f:2c:2c:c9:ab:5b:28:6b:8e:
79:d3:10:4f:99:20:a9:83:47:72:db:e0:6d:e0:26:
f3:79:16:85:80:d8:53:c3:e6:95:f8:f9:1a:58:3b:
4f:27:a7:35:b4:17:32:b8:7d:ce:e1:3b:4d:cb:fd:
96:1e:e5:37:10:8f:41:92:e7:1b:5d:ef:70:94:55:
e2:9e:6b:82:b5:90:6f:3d:69:9f:c0:a1:d1:33:d9:
ed:46:b5:84:ab:b4:6a:0b:ef:cb:b9:ca:01:56:64:
df:aa:db:04:72:ce:67:b7:e9:00:4e:95:94:a0:f8:
1c:2d:10:b4:83:69:9f:14:7a:26:9d:12:68:89:2b:
51:2b:1d:a0:d3:23:37:cd:b9:06:12:8d:9e:43:6b:
bb:fc:07:5d:3d:9d:98:fe:7e:48:6f:9d:14:a7:63:
76:9e:8f:7f:2b:cf:91:25:5b:b0:64:f0:12:d1:d0:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:65:28:3C:F7:83:10:A6:BA:A6:0D:56:A5:3B:38:CA:66:86:7F
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ec:a0:02:fa:80:dd:41:bb:d0:12:5a:3a:f7:6c:42:dd:67:
ed:f7:cf:7f:8c:e2:19:d5:e6:56:f4:37:30:db:15:c9:59:ab:
03:46:2b:55:5e:34:67:c6:ae:32:d1:9c:f5:a0:53:55:b8:ca:
5b:06:67:3d:e7:8b:5f:94:87:d1:09:dc:db:17:eb:b3:f2:79:
20:fe:b6:56:58:7d:0c:f3:6f:36:af:0c:d4:f4:8f:43:14:fe:
9d:44:1f:4e:9e:a5:05:54:51:4f:03:15:f2:52:73:2e:70:f9:
ba:9c:f9:91:1e:f6:df:56:47:2e:a9:cd:7d:6d:47:79:0a:c6:
0b:12:17:59:ce:cf:a0:68:ce:bb:ad:89:44:f4:da:34:17:22:
8f:02:20:f9:85:c7:92:42:7a:00:5a:79:59:f1:d7:6d:01:5c:
2c:77:ef:db:e6:63:5c:54:08:97:e1:b6:20:0c:fa:b7:01:24:
f4:fe:e7:7c:50:49:7c:24:d6:c4:ae:90:13:6f:0f:66:14:66:
d1:e4:03:e8:34:0b:10:46:a9:67:b7:8c:b9:f5:29:f0:ca:d1:
3c:d1:42:9f:ee:e2:56:14:a7:db:e1:38:7c:5a:af:6f:e3:e1:
e4:60:d2:0d:0e:b6:95:99:4d:12:f6:c9:f0:28:4b:d6:81:51:
df:a7:2a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:34:21 2025 by rpki-client