Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: EnpmL4otRaytxARJxTKxEqD+dR2zo/SI/GRF8NEheqI=
Subject key identifier: E1:78:92:C6:21:0A:37:52:DC:18:70:0D:D9:F6:95:E4:09:3D:B3:E1
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 0196B220B74519934D5A8CA76F5AB3A8A183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 153B
Signing time: Thu 08 May 2025 23:00:10 +0000
Manifest this update: Thu 08 May 2025 23:00:10 +0000
Manifest next update: Fri 09 May 2025 23:00:10 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: 5rxPusqCBDf6q4ZdP/wgL6TeTySwrov9UprlCtJdD2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:20:b7:45:19:93:4d:5a:8c:a7:6f:5a:b3:a8:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: May 8 23:00:10 2025 GMT
Not After : May 9 23:00:10 2025 GMT
Subject: CN=e17892c6210a3752dc18700dd9f695e4093db3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:59:02:d2:90:b6:e3:c6:f3:b2:70:d8:18:
5a:57:61:87:c1:ff:bc:3c:f7:bf:5d:d9:d2:b9:e7:
a1:6b:cb:d2:3d:88:eb:11:4b:48:0a:00:89:15:10:
01:6f:02:ba:ce:12:45:8f:df:ef:60:1b:b4:b6:a3:
19:b6:5c:59:2a:9b:8a:09:1e:68:11:bf:ae:72:e1:
4d:4e:1f:90:bc:b5:a9:27:6a:7b:26:01:7e:e7:1b:
bc:d0:8e:43:7f:eb:14:8e:96:d6:00:4e:3f:d4:6b:
7d:38:28:56:f9:56:c3:17:7d:43:2d:1e:49:61:35:
fc:61:5b:af:95:72:de:30:06:b3:e5:a1:9e:ce:3a:
b0:a3:10:8b:70:1f:d3:1d:e5:72:65:58:4f:13:3f:
62:83:9c:f0:1b:8f:c5:df:e0:82:54:17:f6:6a:69:
27:f6:cb:d4:04:28:02:ee:35:f4:79:0e:66:41:86:
78:24:3e:a3:4d:b3:70:54:73:3e:57:5c:af:b9:3d:
97:a3:af:a4:b9:f9:8f:7a:0a:a7:62:29:3c:91:92:
87:6c:9e:da:8b:7f:ec:b1:35:e8:25:5f:3e:ea:f4:
75:a7:4b:e7:6f:6c:cd:7f:d2:15:06:de:c5:d5:41:
a8:25:4b:3c:cb:90:3a:a3:a4:cb:34:1a:57:34:42:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:92:C6:21:0A:37:52:DC:18:70:0D:D9:F6:95:E4:09:3D:B3:E1
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a8:58:51:30:04:9b:28:ef:1e:25:40:d1:7f:b6:79:f0:58:
41:b4:8c:f1:0f:82:56:35:b2:b7:3c:97:ae:bd:44:ee:71:b7:
50:38:ba:94:34:a2:fe:ec:1b:80:14:32:64:b7:b0:1c:d3:46:
6d:68:3f:b0:fe:ae:32:0c:c1:b0:d6:18:67:48:9c:a7:03:bf:
18:04:ed:42:e3:98:88:0b:91:d1:36:6c:13:78:05:86:a8:f5:
fe:06:69:f5:bb:3c:93:4f:85:ac:78:ef:c6:e7:ad:84:20:bb:
37:93:bf:2c:b9:e2:ba:63:67:b6:a5:0d:5f:6f:ba:d6:61:e8:
c2:24:0d:40:f5:b5:57:ac:e2:49:c1:34:f3:2a:ac:1d:bc:f1:
52:83:31:fe:d6:49:43:c9:7a:eb:21:39:b2:70:60:86:89:22:
4b:11:61:4b:dc:51:da:51:54:36:f4:d8:9b:2b:b4:dd:c8:e9:
10:e6:be:e4:64:52:c6:d1:ce:ed:c6:32:5a:8c:6f:10:74:37:
76:92:74:2b:47:15:0b:3f:fd:46:5a:c5:ab:e3:9c:9e:c3:33:
f9:51:a8:2b:74:44:13:7b:84:b6:5a:62:4a:8a:03:d6:5a:83:
cc:0e:37:21:9d:d3:62:25:c5:82:e8:e8:29:70:a1:74:aa:9c:
71:20:3e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:09:53 2025 by rpki-client