Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier: KThsrhn9Xj3GXoB01KWZrPeDuhz7HLHPKxYYHaPJGbM=
Subject key identifier: AE:90:A4:6A:8A:18:87:CA:10:78:49:91:10:01:C0:69:95:17:DE:F3
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 0196C683533238BAA2ED00811E58FFB03F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number: 0A91
Signing time: Mon 12 May 2025 22:00:17 +0000
Manifest this update: Mon 12 May 2025 22:00:17 +0000
Manifest next update: Tue 13 May 2025 22:00:17 +0000
Files and hashes: 1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=)
2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: KQatwEpQ8BezGkUJ7miki41qBKgKMFUy8Gn8mk7+NDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:53:32:38:ba:a2:ed:00:81:1e:58:ff:b0:3f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: May 12 22:00:17 2025 GMT
Not After : May 13 22:00:17 2025 GMT
Subject: CN=ae90a46a8a1887ca107849911001c0699517def3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:df:52:15:b3:c1:b0:61:0f:bc:9e:09:3e:
0c:f6:10:a8:a4:4c:eb:de:52:0d:8b:4f:33:e2:07:
83:1d:5a:d8:6a:d3:9c:43:78:92:68:12:6f:30:cb:
0b:5b:df:96:6a:8d:24:8d:ef:45:f4:50:58:80:5e:
10:dd:40:8d:ec:8b:74:98:30:63:5d:74:9f:9d:83:
ba:9c:ad:bd:a2:50:b0:70:49:8b:56:47:4c:35:87:
8f:84:ba:24:c7:9c:cb:8a:ea:2c:d8:74:c3:4d:2d:
45:27:c1:f0:6f:2d:74:af:4c:85:5e:da:be:d5:86:
bb:2d:1a:73:b2:a7:bc:55:c5:51:20:25:3a:23:00:
cf:6a:d3:e6:41:79:c1:eb:38:10:4c:60:05:97:f1:
04:e2:b0:84:12:53:f4:fa:83:8e:d6:45:31:02:b3:
2e:70:97:07:84:d2:eb:de:63:3f:ab:4f:a6:7f:a1:
0e:4f:bb:12:0d:6b:7f:c5:43:79:35:cd:94:11:26:
f4:33:ef:8d:46:9a:6d:a0:2a:06:3c:9a:2d:34:1b:
0c:5a:49:19:b4:e7:32:3a:6e:7c:5f:49:37:87:8c:
de:04:5b:57:a0:a1:9c:a6:e5:d9:55:32:fe:15:fa:
a9:14:3c:88:d2:8f:8b:60:c0:bb:db:1b:c6:d6:39:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:A4:6A:8A:18:87:CA:10:78:49:91:10:01:C0:69:95:17:DE:F3
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e0:e2:31:7a:3e:41:25:18:35:e6:68:ab:de:d5:de:b3:05:
5e:dc:d7:bf:b1:49:3f:df:75:e6:71:65:46:a1:4b:8d:ed:ba:
e2:c3:05:bb:45:8d:25:93:33:0f:c8:aa:d3:a3:10:32:4d:ec:
eb:9c:40:44:74:6c:29:ad:c6:cd:18:c5:43:e4:d7:b0:4b:9f:
ec:ca:36:cc:d7:5b:20:69:16:9c:0c:50:76:ea:d1:2b:3f:d9:
3a:5d:b5:aa:df:c9:a3:5e:90:e5:8f:8b:f7:b5:e4:36:22:e3:
06:26:5d:b6:ae:ff:5a:1c:86:a0:c4:6a:8a:a6:a9:37:f7:d9:
de:6b:5a:6a:f3:fb:f0:3f:8e:e5:b3:10:19:a1:bb:f7:1e:2e:
10:1a:54:14:06:cd:36:f7:09:52:d9:8a:41:d3:59:99:5e:9d:
fc:b1:58:a5:a6:7d:c6:6c:ba:10:4e:41:2d:b0:64:15:37:0f:
2f:58:49:a3:e0:72:fd:7c:05:c9:b0:36:7e:81:5a:d3:d4:90:
6a:ab:d3:29:9f:5f:30:12:29:c9:00:d7:01:3b:1a:bb:29:ce:
f4:56:0f:bd:25:77:62:ae:c7:77:d8:30:27:1b:71:bb:50:2f:
cf:ac:da:5c:c9:e8:b3:a0:af:bf:d9:e4:2e:b0:0d:f2:16:64:
a1:7b:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:02:50 2025 by rpki-client