Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: v41w4Ge4hK9pcjWUtFLbmG03UO6wNEdBypKIV861mNU=
Subject key identifier: 4B:91:1F:6B:40:34:1A:90:6D:D9:8F:E9:AD:71:06:5E:BF:21:E0:2E
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 0196B8FECF73D8A51AADD6F040EACC53C7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 07:00:29 +0000
Manifest this update: Sat 10 May 2025 07:00:29 +0000
Manifest next update: Sun 11 May 2025 07:00:29 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: Gjbj2FQEMLxZBqWEANhcIM28yJjfFFU4VSTNY6QCUGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:cf:73:d8:a5:1a:ad:d6:f0:40:ea:cc:53:c7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: May 10 07:00:29 2025 GMT
Not After : May 11 07:00:29 2025 GMT
Subject: CN=4b911f6b40341a906dd98fe9ad71065ebf21e02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a8:82:3f:14:29:22:f2:45:f1:71:8c:8d:fa:
25:c3:ef:75:9e:7c:4a:54:80:fd:9e:07:46:57:0a:
12:d7:1f:09:6f:0b:1d:3a:d6:75:63:fd:6b:12:66:
ec:f4:06:a7:e1:80:ea:44:0d:73:ee:6a:48:99:51:
33:25:78:3e:81:83:08:26:72:4d:a1:4d:b1:e8:ac:
03:28:4b:14:a5:a3:77:ce:ff:49:e3:34:ca:e5:b7:
89:2a:89:d6:57:a7:e8:e8:b5:7a:ff:81:cd:1e:8d:
3a:18:a8:2d:77:cc:7e:9a:5e:8f:af:66:31:02:c6:
45:92:b0:8f:e1:df:67:3b:f4:a0:24:ce:1a:65:ba:
1b:f6:6e:c4:53:32:37:e2:c3:39:de:af:e9:6a:b3:
92:62:a4:7f:81:e8:ee:c0:e3:45:d2:38:f8:90:8c:
59:42:05:cd:bf:da:0d:a7:94:ad:a2:57:67:6b:4b:
28:eb:7c:36:ea:7e:56:3c:b2:83:af:c9:92:cf:35:
db:ab:ba:09:04:7d:ec:98:b6:94:11:f8:1d:3f:91:
e7:67:e3:a8:d2:5a:7c:66:7e:18:86:fa:b9:f4:c2:
67:f8:a9:8e:ad:02:2d:41:41:a2:6b:27:2d:d2:83:
89:7b:af:da:44:1a:51:93:3d:d0:76:85:16:08:d3:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:1F:6B:40:34:1A:90:6D:D9:8F:E9:AD:71:06:5E:BF:21:E0:2E
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:74:9a:42:c6:f4:38:eb:d4:b9:95:8c:4f:37:26:98:19:03:
6a:5c:52:76:54:e7:d9:cf:68:ee:00:f2:36:ca:6a:46:d9:c8:
dc:64:74:e4:42:42:e9:d5:1d:87:39:58:39:42:e7:05:ef:65:
b2:86:03:78:ae:29:8d:65:5c:4a:1f:81:27:02:eb:7e:91:fd:
22:d7:ad:06:c9:34:06:1f:62:3c:a6:ec:a8:f9:a2:28:0f:d3:
b5:35:5f:97:5e:7d:ef:b9:e6:33:2d:dd:dd:d3:57:cf:22:0e:
0a:c2:36:70:ea:fe:66:8d:f4:bc:a3:a8:cf:d7:d1:0e:9a:ba:
75:e1:a0:49:0f:3d:d0:7b:dc:24:e7:f8:c1:05:72:c1:6e:f9:
7d:e8:9e:c7:06:cf:44:d0:c8:9f:6d:8f:db:f1:65:84:b7:0f:
ce:f2:4d:68:97:aa:41:57:5b:0c:44:c1:5c:1e:60:a6:bc:e1:
b9:ad:bd:2d:29:10:bd:bf:6e:8f:3c:3c:e5:3b:57:da:f2:70:
fc:6b:2b:b7:9a:fd:5c:6e:02:e9:fc:95:f0:1a:22:9b:77:44:
93:79:04:97:98:1b:f7:46:d3:bc:43:21:62:33:56:7a:83:70:
23:d7:ff:ba:87:0e:89:d3:83:d7:dd:cd:59:2a:1b:af:b2:ca:
13:9a:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:12:49 2025 by rpki-client