Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: qi2vF94/Zd4/cvKOiqLHm8pbKQL5rkcIeWOs7br+u84=
Subject key identifier: 80:45:F2:32:A2:FA:E6:78:1D:8B:FB:5A:2B:B0:7D:77:5C:13:3B:C5
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 0196BCDB59FDAA439411ABA71DC7595149E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 14C3
Signing time: Sun 11 May 2025 01:00:13 +0000
Manifest this update: Sun 11 May 2025 01:00:13 +0000
Manifest next update: Mon 12 May 2025 01:00:13 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: e/iSW5iSh3TIQNoxbiwWUs3KGEqs83z4MwcnU4E4kio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:59:fd:aa:43:94:11:ab:a7:1d:c7:59:51:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: May 11 01:00:13 2025 GMT
Not After : May 12 01:00:13 2025 GMT
Subject: CN=8045f232a2fae6781d8bfb5a2bb07d775c133bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:4b:b2:1f:11:90:82:60:5b:3f:d1:a8:20:
fb:45:f1:95:fc:ec:4d:4d:0e:c5:0a:f8:a6:8b:f6:
52:0b:8b:40:57:9f:79:bb:d3:d6:87:64:63:1e:1d:
24:6c:24:42:6d:63:b3:2d:57:d9:c3:b6:b4:17:06:
a3:24:f3:b3:fa:37:ac:8a:92:88:0f:44:3c:15:9b:
22:1a:a8:ec:27:05:33:1b:3d:38:a4:8c:17:e5:6a:
06:4b:53:57:1b:65:b9:bb:75:76:eb:86:a6:84:6e:
d0:1f:54:72:55:42:d2:e5:b8:a4:de:82:e0:70:86:
75:74:e9:e7:4e:18:08:62:1c:17:de:83:35:21:74:
ae:4b:6e:45:5a:d2:8f:39:b5:81:e9:8f:6f:7d:4e:
b4:74:d5:75:b9:18:f9:60:9a:ec:b3:11:d4:32:d9:
d1:02:e8:17:25:60:c8:f3:c9:92:43:e2:c3:49:53:
b5:d7:76:b5:cd:0b:a9:dc:b9:ed:5d:de:3e:01:d8:
24:cf:65:c4:07:9c:45:36:fe:df:65:23:72:47:a9:
9b:9e:20:13:74:37:84:6b:6c:04:71:ef:90:8b:98:
2e:88:25:8e:69:f5:3f:e1:9c:07:fc:06:b3:9c:15:
09:cb:c6:e3:3d:64:c6:fd:28:0d:46:d0:bb:48:c4:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:45:F2:32:A2:FA:E6:78:1D:8B:FB:5A:2B:B0:7D:77:5C:13:3B:C5
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6b:3d:58:aa:37:a3:4b:06:42:7f:59:b0:ed:1c:d8:c7:0f:
15:3b:14:31:8c:d1:21:84:cc:c0:50:4d:00:b8:e7:30:69:07:
0d:04:7f:c3:e7:39:d3:e6:42:5b:65:2a:32:76:b3:48:0b:7a:
01:f2:52:a2:df:52:83:73:48:fe:18:bb:56:1f:f6:d7:bd:fc:
46:88:45:f5:74:25:22:c5:ac:22:e2:24:a8:f2:e9:77:e9:c1:
de:c3:bf:db:b6:f1:a2:db:e4:33:81:cf:05:4c:39:46:7f:e0:
db:d6:5c:9e:38:39:34:91:5f:70:b6:48:bb:29:9d:2d:b7:54:
fc:62:fd:ec:7e:67:dd:8c:06:0f:82:c3:68:26:dd:8d:8f:1e:
b7:3e:56:f1:12:65:0b:9a:0d:53:d5:21:b9:00:bb:09:df:0b:
e2:05:00:5c:e4:a1:16:32:89:bd:5d:25:5e:82:50:81:c2:12:
10:32:e2:8e:39:00:73:d7:bc:cd:e7:0d:51:30:e9:d3:a1:c4:
55:1b:3d:2d:70:38:de:a3:ef:7d:40:16:29:ab:f2:75:36:a3:
b4:43:15:8d:24:ac:e2:af:2b:3d:1b:b0:9d:e4:d7:15:1e:b7:
5e:40:aa:f9:f6:3b:17:c2:89:8b:21:ba:f1:87:72:af:59:46:
61:0d:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:40:04 2025 by rpki-client