Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: MPSGHOKi9CZQxA26AV7bpSe4r4aT+LWMMkKa6Ce3huw=
Subject key identifier: A2:E2:AC:D3:1E:D7:32:C6:37:82:DC:44:CF:AA:CF:B4:25:FE:17:54
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 0196C91743E4C7ADD4145D9BAB105452154B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0CD5
Signing time: Tue 13 May 2025 10:01:07 +0000
Manifest this update: Tue 13 May 2025 10:01:07 +0000
Manifest next update: Wed 14 May 2025 10:01:07 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: Lu2xf8oHHfN5b4L9H1/uHrC9z60087kJa0TPn6F8giY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:43:e4:c7:ad:d4:14:5d:9b:ab:10:54:52:15:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: May 13 10:01:07 2025 GMT
Not After : May 14 10:01:07 2025 GMT
Subject: CN=a2e2acd31ed732c63782dc44cfaacfb425fe1754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:24:c7:23:f7:c8:1b:e0:12:b4:b9:1b:f3:
7d:4c:b9:ad:e1:06:eb:86:0b:51:96:97:ff:ee:cf:
0d:29:50:21:5f:34:56:01:ac:00:87:37:95:61:60:
16:85:42:44:ba:21:b2:08:c7:1e:b0:5b:65:82:df:
c6:a6:04:2e:6b:ed:e9:f1:bc:ea:2c:29:59:d3:39:
d6:3e:5f:18:ea:05:8a:bf:61:dd:44:95:af:44:ef:
e6:64:d8:cf:35:94:c4:b6:2e:d8:fb:d8:1b:69:04:
b3:d8:f3:63:c6:0d:ca:55:b1:b3:c7:8a:c5:bb:35:
ac:41:77:c7:90:e6:c8:ed:fb:5b:4a:eb:44:48:60:
87:74:25:57:54:82:be:18:71:16:33:a9:b6:ae:e2:
b4:36:be:c8:3f:49:2d:02:39:77:65:4b:11:ed:f6:
20:d5:37:26:d5:79:9f:c8:8a:74:3e:c4:29:87:45:
46:d4:ab:3e:60:e6:28:27:26:9d:3e:79:c5:43:39:
07:3d:ad:1e:7c:69:37:36:7c:63:6c:36:3d:59:52:
07:b0:85:b3:87:cb:07:05:b0:5f:f7:12:b6:ed:e0:
72:b8:0d:15:c6:1f:e2:01:39:dc:06:01:24:c9:e8:
e9:6e:e5:d3:89:7e:c4:50:0d:76:76:b6:ce:12:01:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:AC:D3:1E:D7:32:C6:37:82:DC:44:CF:AA:CF:B4:25:FE:17:54
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2a:76:5e:a2:67:a9:d3:05:ba:60:9d:5f:54:8d:83:3e:25:
22:87:aa:52:82:00:ac:11:9c:66:48:e8:ea:1d:3b:e2:65:f5:
aa:6f:71:df:10:c3:c9:33:53:37:6d:22:6f:31:41:d2:87:a6:
7f:7b:b4:b5:47:09:56:43:f5:4e:00:92:56:4a:fb:01:cf:ae:
27:75:12:e6:35:66:1c:60:ff:b2:67:a2:05:cf:7b:2e:0d:72:
d3:12:b7:27:de:e7:99:20:1e:9d:16:69:d8:12:e1:1d:62:65:
1c:4e:db:4d:00:6f:1f:f4:e2:8c:cd:15:25:db:22:55:42:b6:
02:40:f5:e6:02:01:f1:4c:db:5b:71:68:92:c9:b4:41:3e:c8:
30:75:49:1c:75:9a:7a:3f:8f:8b:d3:49:d5:72:ee:9c:f2:c5:
aa:64:7e:6a:8c:94:d7:8b:9c:f1:b7:13:6b:e3:17:c9:65:e4:
62:0e:92:ad:9e:36:c5:57:95:f4:5a:5b:40:3d:ec:e6:0b:68:
07:32:77:35:84:f2:94:d4:b9:76:5b:2b:8f:10:23:70:ca:c2:
a1:fa:73:a2:34:c8:1b:7a:8c:4d:ea:03:89:32:f1:3b:e8:11:
85:b0:1c:94:a2:11:02:fa:e9:28:f5:0a:e6:0f:34:4f:56:a9:
90:07:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:24:57 2025 by rpki-client