Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: LtUXvR53hG4o9xH63kwbcQkgtKF6dB1AnUJP0+tRLYc=
Subject key identifier: C0:B0:CC:FC:1A:E3:EB:AC:74:87:FC:45:72:9C:4B:72:55:1B:6C:C9
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 01969ED12BA7452844B68FACBDA20B200048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 05:00:30 +0000
Manifest this update: Mon 05 May 2025 05:00:30 +0000
Manifest next update: Tue 06 May 2025 05:00:30 +0000
Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=)
2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=)
3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: B441f6/zUupTtYsI/nUOsJoCQ50KKGLcchoodeRwO4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:2b:a7:45:28:44:b6:8f:ac:bd:a2:0b:20:00:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: May 5 05:00:30 2025 GMT
Not After : May 6 05:00:30 2025 GMT
Subject: CN=c0b0ccfc1ae3ebac7487fc45729c4b72551b6cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:63:99:1f:f1:8a:5f:cf:d3:36:d0:a9:a3:
e8:7d:31:73:0a:1e:91:d4:b2:8a:58:db:34:7d:c6:
e4:31:0b:31:68:83:1e:1f:b8:3f:ac:aa:3c:72:c2:
84:42:5e:23:8a:df:3e:e1:8a:9a:b0:9a:4d:e0:b1:
bb:99:d9:6a:57:01:df:f0:39:fa:89:73:4d:4d:0d:
ab:e3:b6:29:50:27:9a:97:83:f8:09:9b:d3:8b:c9:
7b:45:63:bf:4f:55:e7:e6:f5:e1:37:de:96:ca:f7:
41:ee:84:75:ca:cb:6a:ce:69:ca:12:b7:40:b7:98:
04:42:4f:10:42:af:3e:3e:3b:1d:9a:fa:d0:27:11:
57:2c:14:79:ab:db:b7:a0:d4:7c:06:46:52:0e:55:
af:16:6a:d9:19:2a:47:f4:73:81:26:ca:98:1a:4d:
ee:c3:2a:b1:ac:91:84:2e:d7:e8:6e:a2:53:bf:34:
9c:ed:0c:c9:b4:b6:d3:e1:42:6d:75:b4:46:fd:4a:
6a:0e:6f:75:12:c7:8e:07:01:dd:49:1d:00:31:90:
b9:4e:36:cf:88:98:db:6d:77:00:eb:f2:59:e5:08:
52:a2:b8:08:4c:bd:99:82:79:79:f9:fa:77:20:e0:
ca:df:2c:ac:52:13:40:25:75:50:61:24:9c:98:6f:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B0:CC:FC:1A:E3:EB:AC:74:87:FC:45:72:9C:4B:72:55:1B:6C:C9
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cf:e3:d7:ec:77:c6:b9:02:cc:a1:7f:0c:75:93:84:38:32:
a5:48:81:a3:fc:f7:34:44:bf:7d:6c:50:46:6b:1b:85:e2:53:
24:d3:07:85:43:f0:90:df:a6:6b:94:04:8f:b2:bd:9a:b7:58:
8a:6f:56:e9:c5:3a:17:7e:50:b8:1a:f7:0e:d2:b4:82:1f:9d:
d3:e7:ae:60:c1:b6:e0:a6:c4:0c:c0:63:7c:12:22:a1:31:14:
75:2c:7a:5d:d9:c8:dd:2e:7a:7a:77:9c:ac:c6:f0:aa:56:eb:
ea:71:92:54:02:f4:a3:68:eb:bb:0e:e0:53:d1:86:86:3d:6c:
c8:05:ce:a3:4f:c5:e6:b9:82:f4:46:65:8a:09:85:46:11:eb:
66:a4:16:81:7a:86:15:bb:54:f7:1e:d0:5f:0a:9b:a4:5b:a5:
bd:a4:c2:b4:65:bc:7d:ed:7f:53:42:e0:20:86:0c:4d:0f:0a:
b4:8b:9b:dc:0d:21:88:04:d5:6d:34:64:21:a8:ef:0b:c8:ac:
77:55:99:e8:e7:75:10:73:5a:69:1f:82:b3:46:4d:66:bc:5a:
1e:65:c3:a2:e5:e5:fe:9b:db:58:d6:c2:87:17:be:1c:41:16:
3f:54:a8:e7:4c:84:2a:71:d5:c7:62:8e:98:3b:a4:71:b5:00:
de:2a:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:41 2025 by rpki-client