Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: OQPMRhiGOmRdL89zTeoZHg9R7tMkCUbVY+fOc7xPcJ0=
Subject key identifier: 46:11:00:F7:18:10:AD:3B:A5:E0:1B:C1:E8:91:9D:94:2E:D1:F8:4E
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 0196A2E4E2B2CC009928E9616B1CCF54E025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 1532
Signing time: Tue 06 May 2025 00:00:31 +0000
Manifest this update: Tue 06 May 2025 00:00:31 +0000
Manifest next update: Wed 07 May 2025 00:00:31 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: aAA7HISe5R7Wj1a3aocAJkX3Ps+xvcsxTHdxGlc9xIQ=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:e2:b2:cc:00:99:28:e9:61:6b:1c:cf:54:e0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: May 6 00:00:31 2025 GMT
Not After : May 7 00:00:31 2025 GMT
Subject: CN=461100f71810ad3ba5e01bc1e8919d942ed1f84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:d0:bb:e3:67:0b:0b:d8:29:e9:48:d3:5f:
89:cb:13:6c:d8:8e:6b:7e:08:cd:86:53:23:30:0e:
62:85:25:a6:8c:0f:06:d5:44:6a:75:79:86:b1:2e:
78:f1:7e:8e:7f:c6:a0:66:58:34:1b:ad:88:d4:06:
62:88:a3:f7:26:46:d4:4a:97:7b:47:87:b7:c7:c9:
0e:49:ca:6e:0c:4a:dd:58:94:fa:73:d8:1f:60:10:
88:eb:ad:e9:81:63:6a:aa:75:a1:ca:40:bf:fc:14:
6c:7d:65:c6:59:43:0b:60:73:b3:97:03:e8:00:e3:
3a:3e:02:08:51:fc:81:aa:d9:ee:a1:8f:f6:0c:de:
7f:f9:85:40:d4:2a:f3:94:c8:0a:97:e1:9a:90:50:
8a:de:f6:52:b5:89:84:02:36:51:fe:86:0b:dd:34:
c2:11:b1:e5:80:4d:f6:fc:d8:6f:de:94:74:bb:55:
f2:e7:3e:2c:a2:ee:a0:28:dd:08:3c:12:2f:72:d4:
a1:a6:ad:a0:bc:c4:8a:85:9e:54:80:a3:13:04:1c:
37:46:b4:3b:0f:c3:e5:92:2d:b7:c5:4a:dc:18:ae:
76:70:08:41:a8:3d:51:83:a8:05:55:d2:b1:05:15:
33:5f:b7:0d:75:ff:08:75:29:aa:4f:1b:e0:95:98:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:00:F7:18:10:AD:3B:A5:E0:1B:C1:E8:91:9D:94:2E:D1:F8:4E
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9b:9b:6e:08:bb:91:0d:49:55:46:6f:9b:8e:2b:50:ed:e0:
3d:92:50:41:39:ac:09:13:e8:58:ee:e4:70:43:b4:bb:cb:1e:
f9:40:9d:ae:e8:82:0c:24:20:4e:bc:bb:d7:9b:b3:06:49:b9:
61:75:6f:82:84:93:23:3f:cb:01:35:72:49:3a:c9:64:1b:d5:
5e:dd:81:bd:d5:76:c6:b7:1e:4e:ed:6d:80:ab:3e:ab:a6:0b:
e9:a7:85:81:cf:2d:0d:33:ae:d4:b7:94:f0:6f:78:f7:ee:81:
68:50:fb:4d:3c:e4:f6:f5:f6:1f:43:83:54:fa:2c:ff:74:e0:
89:29:51:90:d3:3f:b4:db:97:8f:e9:b2:87:59:8f:22:37:44:
5d:dc:04:95:6a:7f:ba:c6:dd:67:c7:02:a1:09:5b:28:70:6d:
4b:7e:5f:4e:bf:c3:0c:3b:70:e4:45:7d:a0:9a:d1:9f:f3:33:
6d:7f:42:4a:30:13:da:d2:2b:c6:ea:92:f3:22:6e:2f:23:d3:
6d:a3:be:77:24:8e:a6:bf:7f:f7:c0:17:d3:c5:b2:44:25:5a:
ec:69:62:0e:08:ab:e7:cd:a6:ba:40:09:7a:93:ae:80:85:2d:
de:33:03:53:05:dc:4e:2f:86:66:68:23:63:58:0d:08:41:bf:
f0:85:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:47:18 2025 by rpki-client