Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: NWsixMh/sw5d7arzNOhCxk3GSrRFK0yJHG4/IqjdIlk=
Subject key identifier: 1E:0C:15:25:FD:C3:D1:67:DE:F1:C3:C4:BC:DA:43:B1:E2:70:5E:8D
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 0196BCA48F29A6783C5D0BD9A5F3C312B0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 00:00:23 +0000
Manifest this update: Sun 11 May 2025 00:00:23 +0000
Manifest next update: Mon 12 May 2025 00:00:23 +0000
Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
3: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: bCZF9ccCMiFJlA4xDCd85ttR9lcavZMLLdhdlWV0sC8=)
4: tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (hash: V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=)
5: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:8f:29:a6:78:3c:5d:0b:d9:a5:f3:c3:12:b0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: May 11 00:00:23 2025 GMT
Not After : May 12 00:00:23 2025 GMT
Subject: CN=1e0c1525fdc3d167def1c3c4bcda43b1e2705e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:f7:26:e6:cc:56:74:40:42:1f:5b:a1:00:
21:10:74:d2:d8:f2:29:c4:1d:eb:57:27:62:c6:a4:
71:ef:ac:0a:49:6c:1e:4f:fa:a9:07:f4:07:df:f3:
3d:f4:38:c4:28:0b:f9:a6:6c:db:ca:28:d2:41:4d:
a3:cf:57:c0:2b:a0:70:c4:be:60:d5:fb:2a:35:d7:
23:ec:fe:5f:d8:60:d4:f0:b8:d8:0b:5f:c3:3f:7c:
32:11:3c:8d:4b:6e:29:0f:c4:1a:24:f4:00:ab:38:
cb:14:35:c4:6a:f7:5e:f4:7b:28:5e:88:b2:b9:7c:
8a:02:41:81:50:14:e3:e7:38:84:f2:2f:9d:21:37:
c6:ac:f3:b9:e5:2b:80:f4:4f:e1:c2:e2:51:8a:49:
28:37:79:fa:16:80:5e:b2:53:af:e5:ba:aa:0f:fe:
3e:ee:5d:e9:e1:85:39:00:8e:d5:71:99:a7:97:e1:
02:44:82:c0:67:f3:59:cb:fb:31:3a:a9:4b:a8:ed:
72:a0:02:9b:4f:ca:e7:b7:4b:21:d4:36:c0:3e:30:
e3:02:b4:31:2a:0a:f1:4c:65:65:95:56:48:70:3f:
65:cd:7f:20:a1:0f:4b:c4:dc:4b:d1:e3:b9:8c:9e:
fe:ff:e6:d5:45:8e:dc:e0:44:0e:59:a5:99:ea:d1:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0C:15:25:FD:C3:D1:67:DE:F1:C3:C4:BC:DA:43:B1:E2:70:5E:8D
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fd:29:64:77:ba:8f:6d:ee:a3:14:b7:1b:95:74:5d:43:00:
09:3e:20:a8:ce:8f:56:56:9d:5f:cb:79:4f:38:5a:cf:4a:14:
9e:ed:ad:7d:b0:e5:37:6d:2e:c0:1a:f0:9b:ac:dd:28:5d:a5:
c1:ca:78:56:ab:36:82:fc:80:36:1e:f8:27:95:ef:08:34:55:
2c:42:3f:a1:5b:65:c9:b2:14:b9:1b:69:88:ff:ed:65:f5:fd:
51:9e:ca:5c:7b:0f:e4:e5:d6:0f:56:25:00:57:5b:1d:f8:fe:
bf:d7:e7:3c:15:e3:b0:83:f1:3a:82:c9:2d:04:ec:ac:f6:7e:
d9:cc:9a:8a:d1:82:81:6c:82:d4:19:21:e4:9e:52:91:28:aa:
dd:a8:05:61:6a:ae:23:f5:7a:e9:03:0c:a6:9d:8e:0a:b4:76:
27:43:a1:32:82:e5:a5:7d:6e:c2:61:9f:df:ae:f4:dd:47:d5:
36:13:f4:53:be:89:3c:88:ce:d2:01:85:f3:77:24:26:7b:d5:
a6:f2:25:0a:14:10:d3:e2:63:a2:4e:4d:ef:74:da:99:71:f6:
f9:e1:a3:f0:21:97:3c:92:15:74:69:bd:8b:2a:b4:82:dd:63:
d0:41:dd:3c:7e:e4:ff:b7:a5:d5:35:5a:75:22:0a:8d:e7:12:
a6:7f:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:07:28 2025 by rpki-client