Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier: XezVWMSmk3zmf31Cd6MLdcip+tkmOWVXxNjv5KTgpRg=
Subject key identifier: 04:CB:E1:77:21:06:C1:67:1F:B3:BE:B3:24:9E:3F:32:91:DC:88:40
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 0196C53A807DADD555087B6BE89C18C929E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 16:01:07 +0000
Manifest this update: Mon 12 May 2025 16:01:07 +0000
Manifest next update: Tue 13 May 2025 16:01:07 +0000
Files and hashes: 1: 3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa (hash: Qs6GoxmPBIC7HGNuig2kfn3Fl73wnKTFpil8h4rBNO4=)
2: 7NbESzXRMNmvEomT-Mf8me7h-5o.roa (hash: sP5JFPjYHopQ7eTPfJ05mH6EJsqFFPFigu0p8AF8Ees=)
3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: 2hK4iZaHLTK9SdtLGR9/bcyShm0IYDeUCh/qiMDdhB4=)
4: _8kwQM-X6Z8iQPUFtkn5eqJVuxI.roa (hash: euBW9IpgTvtCum/UZd3emtTuwK2uZ78wnCtDCEVJf2A=)
5: c4bLrKnAkTRBkWnGAk0rUMNmNi0.roa (hash: MeURMVUFI1PNljAcbfvTNPtm4Rnq7dMhBu12jSOQpgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:80:7d:ad:d5:55:08:7b:6b:e8:9c:18:c9:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: May 12 16:01:07 2025 GMT
Not After : May 13 16:01:07 2025 GMT
Subject: CN=04cbe1772106c1671fb3beb3249e3f3291dc8840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:ca:57:1f:31:b0:73:2d:97:87:44:4f:25:
04:6c:82:17:5d:36:4a:8a:6d:06:22:83:fb:12:95:
90:d4:9f:12:a0:fe:72:bb:9b:f1:3f:20:b4:7f:94:
cd:91:2f:d6:cd:e0:d6:95:82:76:df:f3:d6:f0:58:
21:62:0b:98:3f:7f:d0:99:cc:83:63:45:91:ac:ac:
3c:7d:09:2f:2f:f8:4a:66:ee:ed:c1:e5:97:90:29:
2f:b2:fc:16:5f:ee:d3:38:8c:0e:14:e8:93:a0:d9:
0a:b3:4a:de:5f:ef:6b:a5:df:95:c5:f8:d7:86:fe:
5c:8f:ed:81:85:ce:21:ef:89:c7:d3:fb:15:1e:6e:
32:98:c0:b0:75:72:24:20:87:d4:90:1c:70:17:22:
c3:4e:e9:02:6e:b7:7a:97:9f:bd:5a:d6:b7:16:98:
c8:20:61:6f:89:92:83:d3:8e:f6:34:19:1d:29:9b:
be:3f:0b:7e:5a:af:0f:b3:41:da:c7:21:0b:1d:c6:
0b:ee:32:fd:c0:aa:63:1d:09:d1:7c:ff:5f:79:cb:
3b:36:d8:dd:cf:c2:45:0b:08:05:2f:c4:48:54:2a:
fc:93:b6:b4:bb:58:5f:9b:69:f7:e0:e5:e1:ba:e1:
26:ca:a4:fb:da:09:39:8c:f2:e7:e3:f1:5b:87:b2:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:E1:77:21:06:C1:67:1F:B3:BE:B3:24:9E:3F:32:91:DC:88:40
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:06:77:29:ae:11:de:13:bd:c9:54:f7:5d:e1:04:3b:16:
ad:7d:55:80:f9:d7:66:20:a6:a7:b9:dd:32:4d:8e:7e:59:8d:
e8:3e:83:3d:9e:30:8d:bf:d9:ae:56:df:0e:ea:ae:cf:a9:3c:
5c:c3:da:8a:6d:b2:6e:a1:72:92:f4:ad:ad:1a:9d:5b:2b:08:
50:ba:47:58:f8:b8:51:0a:8c:2f:5e:f8:5e:6d:3c:6e:15:f7:
55:93:8a:44:55:9d:f0:1e:3e:84:93:e0:47:f1:7b:fb:ab:75:
e4:6c:00:d0:58:64:ec:14:b8:bb:a3:d9:e6:cb:19:d0:25:dc:
fe:b7:26:50:25:81:b1:88:cc:6b:bf:b4:3d:b2:61:d3:9c:a3:
4f:71:80:9f:31:5d:b8:61:f0:9e:87:e3:4c:20:6c:af:75:64:
99:ae:90:6e:18:ee:b8:7f:de:92:fb:73:97:ce:4d:13:a4:b3:
fc:05:e6:76:dd:8b:72:11:1f:92:3f:78:cb:cf:78:7d:6f:3a:
ce:48:0f:de:87:d1:05:09:4b:c0:aa:9c:15:04:05:d3:0b:02:
be:ad:8f:2a:e5:30:5b:91:1f:3f:b4:37:73:d8:ec:7b:1e:8c:
1e:a6:a5:a7:ec:cb:07:a0:94:01:51:28:d5:95:bf:63:f4:0d:
b4:2f:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:17:38 2025 by rpki-client