Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: dUKf4YxaELB/xRgrD1QQzaZUmdnQba3TQjR5y/QuV1E=
Subject key identifier: 1A:1D:5C:7E:6B:07:61:6A:B2:79:BA:BE:88:1C:C4:B3:7F:07:20:A9
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 0196C5A8307B5C1BCCE7754093D5B4C9BAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 18:00:56 +0000
Manifest this update: Mon 12 May 2025 18:00:56 +0000
Manifest next update: Tue 13 May 2025 18:00:56 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: eYh8gbE+dywNFojav/5Elg4G+7b8X447vEhacRjrLb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:30:7b:5c:1b:cc:e7:75:40:93:d5:b4:c9:ba:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: May 12 18:00:56 2025 GMT
Not After : May 13 18:00:56 2025 GMT
Subject: CN=1a1d5c7e6b07616ab279babe881cc4b37f0720a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:37:ba:d9:ff:25:4d:d7:3d:6c:20:ef:94:
96:53:47:7b:b5:dc:3b:9c:65:9b:52:23:bd:f4:22:
2b:1e:0d:98:a7:3f:52:09:b1:08:e3:bf:2c:a1:6e:
fd:fc:de:b3:63:c7:95:28:7e:fa:e8:26:c0:9b:0e:
a7:71:60:a2:d3:b0:44:57:25:1f:45:ac:de:bb:05:
ec:2c:b7:84:10:84:b8:82:28:9f:1f:5f:42:b8:65:
b1:90:c5:84:3d:d0:ad:f2:0c:40:a8:87:ca:00:c9:
a6:ec:8b:81:25:23:2e:1a:99:58:a6:b7:ad:0a:64:
77:04:1a:c7:6c:c1:16:8a:55:12:5c:78:b1:92:ae:
27:36:9b:65:2d:04:6b:48:23:c7:e4:06:76:c4:e6:
88:06:83:34:ab:0e:81:2e:c3:7a:92:fb:91:43:5a:
82:d4:51:4e:e3:25:40:87:7e:77:5e:9a:7a:5b:1a:
4d:dd:57:8d:74:2c:34:25:04:d8:5b:c4:1e:90:ec:
48:a4:e5:a1:e9:af:38:da:8b:06:41:80:95:8b:1f:
e4:86:f7:d0:7c:ff:35:cc:d2:f2:7a:0d:7b:31:fd:
4b:36:16:d5:12:1a:3b:3f:73:3c:1f:1b:24:39:7f:
9e:48:84:4b:59:54:58:c9:8e:18:2f:1f:12:97:20:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1D:5C:7E:6B:07:61:6A:B2:79:BA:BE:88:1C:C4:B3:7F:07:20:A9
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6d:51:56:46:7d:ac:82:29:aa:9b:49:22:81:4c:2f:5c:46:
90:2e:4c:02:5d:6f:df:42:1c:13:b0:27:c0:ab:91:e8:84:e9:
a0:b5:74:79:9b:74:76:a4:c6:ae:4b:01:32:96:22:f3:c7:44:
c1:51:01:bf:a7:3d:a2:c9:8a:21:ea:cc:12:fc:fc:36:cd:ae:
bd:24:b5:17:1a:35:be:4e:62:f0:78:78:a2:67:ea:fc:91:59:
79:e1:25:32:01:30:7d:18:9b:5f:bc:a0:2a:34:f3:11:2a:a2:
a4:cf:5f:06:81:d9:2f:f8:95:eb:14:eb:98:a7:12:0f:e8:a3:
41:b2:cb:e8:0e:df:6e:30:87:a2:2e:ca:70:e4:77:b7:65:b5:
d4:89:4f:32:55:dc:13:06:d0:22:0c:cd:72:be:3f:cc:75:b6:
1b:15:7f:36:0d:e8:b3:6e:1c:d5:8c:0e:70:5c:ef:3b:1f:45:
52:89:37:27:a2:21:ec:17:99:05:fd:54:f1:85:fe:79:45:87:
3d:6d:7a:95:c2:ac:36:85:72:c9:ff:c2:0c:c3:7f:3c:9e:ba:
3f:d8:b0:ed:64:db:ae:28:a3:c4:95:ea:9c:b0:11:6f:40:87:
60:e3:50:36:db:e1:52:f6:ee:70:70:3b:97:af:6a:a4:7d:d7:
d6:4c:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:55:55 2025 by rpki-client