Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier: RNn+Ka+DKTCLOBrDFQXyrMHzzbFybC0e2TCyS8D3uOs=
Subject key identifier: C1:EB:8B:51:61:E0:A9:50:D7:A3:3F:FC:8E:75:7A:A2:DE:2E:0A:AB
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 01969E9A7D138C9D8E32596E1EA993290AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number: 0E2E
Signing time: Mon 05 May 2025 04:00:46 +0000
Manifest this update: Mon 05 May 2025 04:00:46 +0000
Manifest next update: Tue 06 May 2025 04:00:46 +0000
Files and hashes: 1: 349nznGmuYln7Euzs0toW3LL2Co.roa (hash: 2VcvoHu/ySd5oGJHcQApUau1Ip2UjCUmUdstoqEVP0Q=)
2: MhO0JIjv07z_oORlZPzio-JDr68.roa (hash: IGEtItNNMXdu/fJfMOFzDjAygiojo6AjHJXRHHSwZpo=)
3: cjuo7risFY0maWmiB6zw_cynUR8.roa (hash: fwEm242Ve1m7/7m7QExBWA9lRss1xiZPUH/+LoEjd/Y=)
4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: ga/Dvn2JVDdSX7qg6MvPdfrOLt4NY9aCMj0kIRW0GH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:7d:13:8c:9d:8e:32:59:6e:1e:a9:93:29:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: May 5 04:00:46 2025 GMT
Not After : May 6 04:00:46 2025 GMT
Subject: CN=c1eb8b5161e0a950d7a33ffc8e757aa2de2e0aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:66:64:b6:01:83:c2:9c:f1:14:d7:70:74:
52:61:9f:17:45:bf:de:6d:15:b8:c8:19:69:3f:f8:
0e:ab:86:73:d6:b2:77:5a:f2:6e:0c:80:4d:fc:bd:
03:6f:17:e1:a0:8b:30:5f:18:59:4d:3f:84:75:6f:
8a:1d:29:09:e5:72:43:e1:a3:0f:69:0a:87:16:cb:
41:bf:a2:1a:bd:79:b3:62:73:f8:58:2a:c3:93:95:
82:77:ce:e8:6e:bf:31:b0:2e:43:7f:c1:d2:32:75:
6f:74:b5:5b:4c:c1:fe:e4:9d:cc:b7:12:88:b0:19:
27:df:9e:9f:81:1e:24:06:73:a3:fe:89:10:35:9c:
86:78:fe:22:4b:bc:a1:72:aa:df:0f:f7:af:c0:24:
38:f8:e6:f9:9b:2e:0f:57:c6:7e:fd:c2:f3:cb:22:
f7:21:f8:06:4e:68:20:12:2f:42:20:f9:83:a5:f6:
da:be:1f:a6:40:ad:0b:ce:19:7a:14:9e:cc:23:e9:
96:93:90:94:60:9b:5e:51:6d:8e:ff:6d:af:8b:10:
15:13:18:60:77:dd:5a:2f:d0:e8:a3:a1:cd:63:09:
92:5d:af:4f:05:31:38:5f:a4:12:73:7a:36:c7:0d:
9f:c3:4c:41:ec:4c:7d:ee:89:2c:6b:c8:9b:d3:93:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:8B:51:61:E0:A9:50:D7:A3:3F:FC:8E:75:7A:A2:DE:2E:0A:AB
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e1:0f:3b:94:05:1d:51:14:88:e5:24:f7:52:80:3f:d4:3a:
ec:fb:99:ec:f4:0c:2d:9b:4d:76:46:ff:ee:84:06:12:62:d5:
c1:e5:df:42:b4:c2:72:26:02:f8:3c:a5:ab:e9:e2:9c:e9:dd:
c7:c4:86:0d:8f:2e:b7:3e:0e:0d:37:42:be:45:97:c1:9c:24:
0a:8c:c9:be:07:59:22:b3:59:de:3d:0e:b8:40:07:5a:7d:fb:
ae:16:9d:fc:af:9b:47:f1:d6:65:ee:b7:a8:95:c3:2a:54:03:
d2:08:a7:57:cf:9c:06:00:63:b8:92:85:19:59:1a:6b:40:9a:
2d:a8:ff:90:54:ae:aa:a8:5e:d9:ad:c8:eb:10:01:92:dc:49:
a4:4b:62:52:30:19:f5:50:df:71:51:78:f5:a5:9f:90:8e:06:
fb:bc:7f:25:c7:b1:9f:c7:22:51:2e:24:35:4c:cd:4d:db:7c:
80:af:62:e7:0a:d3:3a:6b:3f:81:de:e5:a2:93:83:70:3e:b4:
7d:f6:96:e7:05:70:ee:7f:09:1a:5c:d8:3d:7e:e9:69:d9:34:
f6:f6:b9:fc:eb:1f:32:57:2f:29:c7:a0:b9:83:9b:82:d0:88:
11:55:e9:da:35:0d:6b:cf:65:35:42:58:1d:07:06:d6:e5:17:
80:3b:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:38:13 2025 by rpki-client