Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: 2juK1isiyEQ/qpT+Y43KRDNgwiUde1/1wrgamOdfDfc=
Subject key identifier: 53:78:81:B8:5E:B9:A6:36:02:68:6B:E3:53:52:30:66:CB:9C:31:43
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 01969FE4059BF1BA2F3B67E0411BF7D5627B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 10:00:43 +0000
Manifest this update: Mon 05 May 2025 10:00:43 +0000
Manifest next update: Tue 06 May 2025 10:00:43 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: xIexSAz7wNLylPOsyFLPa9brGsHwcJC7UB5pS7ZPjxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:05:9b:f1:ba:2f:3b:67:e0:41:1b:f7:d5:62:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: May 5 10:00:43 2025 GMT
Not After : May 6 10:00:43 2025 GMT
Subject: CN=537881b85eb9a63602686be353523066cb9c3143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:ab:59:f5:8d:2f:e2:7f:a0:7f:40:b6:33:
9b:82:7b:62:02:21:29:df:09:fa:c6:04:c2:d6:45:
81:cb:f8:7b:e6:6d:15:3b:db:52:e7:bc:b4:89:65:
48:c3:65:da:62:73:ed:bc:bf:f4:64:42:20:f2:1b:
c4:8c:32:36:c2:3f:d3:f4:6c:ba:4d:f3:f7:27:d7:
92:1e:a3:67:4e:c3:31:9f:7f:b4:d4:25:e6:3a:d0:
2f:fc:8e:7d:6b:dc:df:2a:15:3b:d1:3f:2a:00:c6:
34:2c:28:31:9c:71:fa:46:fa:dc:b3:f6:36:b2:b2:
1e:a2:3b:cc:5b:4b:33:02:2b:74:96:1c:5a:d9:d5:
46:43:00:bd:4a:74:f5:df:76:39:0e:dc:18:b1:e1:
1e:49:79:84:e4:7a:34:e1:3f:11:dd:e7:c4:b0:28:
3d:7d:d7:d2:b1:59:f8:d3:ea:8a:df:32:c0:90:32:
38:a1:69:8a:f4:d6:75:80:75:9e:d5:de:fc:30:fe:
12:5e:9c:c0:d0:44:a9:95:4e:b9:01:18:d2:ff:b3:
6b:c4:85:4c:71:2e:bb:89:c2:a0:a0:2d:de:6d:90:
3b:00:73:59:47:95:68:9b:9b:b3:b6:4e:f0:04:41:
c6:0f:c1:c1:a1:41:57:98:e8:78:29:22:83:10:6b:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:81:B8:5E:B9:A6:36:02:68:6B:E3:53:52:30:66:CB:9C:31:43
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d0:6e:24:a6:d0:8d:4a:9f:9a:c2:fd:fc:c6:84:cb:16:65:
ef:dd:f1:a9:6e:ff:66:b7:30:a4:3a:5d:23:b0:2b:34:99:0e:
71:be:03:3e:31:e5:2e:72:2b:da:4c:be:12:8d:c7:73:26:6f:
d9:1d:60:cf:a5:4e:08:73:13:56:41:e9:a1:1a:2d:6e:32:da:
46:42:3f:09:80:85:27:bd:44:ec:48:b2:7e:2f:31:ca:98:76:
b0:b7:f1:6a:6e:a0:f6:3b:75:af:91:78:15:bc:41:2a:7f:0f:
39:7b:5a:e2:7f:ec:11:16:12:15:c5:14:00:ea:50:76:50:fd:
ec:a8:b1:1d:77:94:a4:5d:99:56:31:7b:cf:0c:6d:65:12:21:
91:69:4c:ab:79:82:85:4f:11:ed:db:35:1f:dd:f4:2e:37:48:
fe:10:1d:64:43:41:8f:00:1d:81:b0:49:e3:83:d0:bf:bd:fc:
37:32:82:97:ab:79:a2:f0:82:ab:98:76:27:cf:e7:81:38:ac:
ee:e6:a8:9b:65:fc:0c:ca:94:03:7f:e1:6d:84:ba:db:ca:36:
a8:dc:ac:d6:6d:f5:94:d0:36:ff:6a:35:4c:cf:4a:a7:32:70:
cf:71:a4:1a:7d:a0:ef:03:84:15:db:fd:11:66:35:2c:a6:b7:
13:37:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:09:23 2025 by rpki-client