Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: YR3VsE7BTcm61lqQ94vaqkNuR6rsrw2nqdCyavSLhAk=
Subject key identifier: 0B:7C:F2:39:6A:B9:5B:AE:C4:1B:61:96:13:04:13:28:E0:75:70:D0
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 0196C15D56F3DAE8606E12E904FE6D07E4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0CA7
Signing time: Sun 11 May 2025 22:00:41 +0000
Manifest this update: Sun 11 May 2025 22:00:41 +0000
Manifest next update: Mon 12 May 2025 22:00:41 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: XRZtyVrjjFf0cNhHMHt3vDeRVeMk7VYPQjgQvvvz+k8=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:56:f3:da:e8:60:6e:12:e9:04:fe:6d:07:e4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: May 11 22:00:41 2025 GMT
Not After : May 12 22:00:41 2025 GMT
Subject: CN=0b7cf2396ab95baec41b619613041328e07570d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5a:0f:f4:32:5a:06:6d:53:17:6d:27:ef:90:
9d:24:3c:b6:f8:2b:4d:42:17:bf:de:a3:f8:a5:46:
56:b1:aa:a3:06:3d:a1:69:b5:0e:76:62:73:14:b1:
bf:be:c8:e2:a0:a4:22:d5:92:20:68:7e:62:80:34:
67:ea:ae:de:6b:00:48:ae:a7:3a:d4:e1:b0:be:ec:
9a:02:3a:19:be:f9:57:75:ed:a5:d1:49:e5:82:c5:
d9:cb:4c:b1:92:1c:06:12:20:db:50:46:1a:71:cd:
cb:67:c3:9e:d7:67:c9:53:7a:88:70:e9:a9:48:ea:
3d:b7:df:cd:c8:95:18:dc:7e:80:87:6a:ef:f1:a1:
41:06:17:29:07:91:9d:8d:f4:89:af:cc:44:64:ba:
f1:03:dc:74:c2:15:de:39:3e:d5:d9:ce:93:d0:86:
79:84:fc:3c:8f:2d:cc:50:3e:c2:26:cc:b4:36:ff:
99:77:23:25:75:a7:52:f1:82:12:40:eb:55:e0:35:
44:7f:68:83:f2:1a:e5:e7:2f:bc:6d:bf:51:f5:a7:
58:d9:c2:da:76:1b:f1:1e:de:93:18:8e:db:c9:61:
6d:25:c6:86:a6:18:9c:94:43:e9:15:ed:1c:67:c1:
91:bf:c2:ce:30:9e:c9:2a:2d:3f:8c:80:c7:f6:05:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:F2:39:6A:B9:5B:AE:C4:1B:61:96:13:04:13:28:E0:75:70:D0
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:86:d7:b2:c6:f4:62:af:c2:04:3f:06:4c:43:97:2b:7c:e5:
c6:02:ec:db:a3:fc:4c:90:a3:1b:23:be:96:e3:15:01:34:72:
bb:8c:07:f1:9a:7a:f5:3c:7b:08:41:ee:e3:e7:70:fd:c5:78:
28:4a:46:e3:b5:2f:4a:9c:27:14:f9:cb:80:83:4f:45:a6:4e:
b1:99:4c:f0:43:2d:8c:ae:7d:d9:b1:f7:d2:d1:93:ed:53:c0:
fb:0f:e6:12:ae:cd:c2:ac:c9:47:bd:ff:65:0c:22:63:9f:77:
78:44:c9:ee:8d:65:27:47:11:2c:d0:c0:d4:ab:78:35:32:5a:
2a:ca:95:e5:47:59:10:4b:5b:9b:bc:16:57:59:ea:c8:1f:b1:
23:aa:2f:2b:c8:a0:35:2a:1b:d0:cf:54:b7:fc:1f:a1:f1:a8:
50:f1:6b:a8:c4:f2:7c:a0:8b:db:60:f4:5f:8a:5a:c3:29:94:
26:e9:1a:a2:3f:62:4e:f2:65:d3:29:4e:05:c2:cc:15:88:49:
1f:56:e4:0a:4a:53:b4:30:61:e6:06:b0:a6:1d:7f:f9:d5:11:
a0:da:7d:ff:ff:1e:eb:f6:fe:1b:29:0d:77:67:32:67:2c:4d:
b6:78:a8:fe:00:ed:4f:57:ce:b4:dc:50:07:b1:0f:0d:e7:95:
38:24:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:35:37 2025 by rpki-client