
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: vEERJAxRZ4UD1xgL+KMiuv17kZNhzpUzeKirxsMIG6U=
Subject key identifier: 6F:1E:13:22:C1:C9:16:F6:6D:F6:EF:A8:80:EB:37:0D:A5:E9:D9:C8
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 01964B224F0ED98887BC8E66A29F64102AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 13D8
Signing time: Fri 18 Apr 2025 23:01:01 +0000
Manifest this update: Fri 18 Apr 2025 23:01:01 +0000
Manifest next update: Sat 19 Apr 2025 23:01:01 +0000
Files and hashes: 1: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (hash: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=)
2: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: U/OGJxusQcVSxLavyYmrL30TqYCjHBRR5iKjfOucTt4=)
3: rP00SjYOc7kI37LHeR0akx0WLbw.roa (hash: HwxnGSpBCBewjdHMOMeKuWHUwmAgwVnpqM4EW67Q304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:4f:0e:d9:88:87:bc:8e:66:a2:9f:64:10:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Apr 18 23:01:01 2025 GMT
Not After : Apr 19 23:01:01 2025 GMT
Subject: CN=6f1e1322c1c916f66df6efa880eb370da5e9d9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:55:bf:96:09:45:c7:fb:a6:f2:18:a1:ca:
55:30:3a:89:70:be:cb:ca:bc:89:ee:42:c9:e2:b6:
8b:d0:31:27:ce:18:5f:de:fb:61:b6:d2:29:75:a6:
2a:3b:a0:36:b5:1c:40:98:a8:c1:74:e5:1e:c9:a6:
d6:a1:c9:7e:50:3c:90:9a:f6:95:5e:e4:97:be:3c:
3b:88:e7:19:b2:da:c1:d7:87:90:99:da:5b:93:91:
7b:1e:e3:3d:66:1a:bf:50:c1:c6:b7:d9:8f:ae:66:
52:f5:46:45:35:78:12:50:af:31:5c:bf:29:b7:cb:
db:7f:97:e9:a3:2b:52:88:1f:0a:8a:8d:f5:03:a2:
c6:55:4d:a8:ad:a2:f7:29:4e:ca:d2:3f:fe:50:b0:
ea:d5:5a:e3:1b:27:f9:87:51:4a:92:06:3b:91:28:
46:07:d2:d1:93:f8:f8:6a:01:b4:f9:90:57:65:9f:
16:7b:f2:a9:bc:ba:1a:69:ff:26:48:f6:00:e0:71:
44:73:a1:f1:b7:d6:0e:15:76:96:5a:3a:cb:28:d0:
09:7c:bd:1d:45:a4:25:f1:d7:2f:d5:4a:f8:db:c6:
82:97:51:00:e4:e5:bc:11:c8:6b:88:b6:2c:1a:03:
59:e5:ea:8e:26:7c:ef:03:9b:ce:c2:ca:53:0d:f8:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1E:13:22:C1:C9:16:F6:6D:F6:EF:A8:80:EB:37:0D:A5:E9:D9:C8
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:08:6f:91:80:de:9e:20:db:d9:72:75:1e:19:42:f7:f0:db:
20:72:49:d9:4f:6a:28:fd:54:4a:dc:1f:db:d1:90:5a:24:bd:
de:9d:db:dc:e7:1f:c4:75:9d:c9:08:c9:37:2c:fe:1e:83:d4:
60:64:96:b5:c8:45:45:7f:aa:1f:85:d0:48:7d:cf:87:e9:2f:
f3:8b:7c:a0:28:38:8f:c9:a3:c2:30:e8:cb:4e:03:3b:c6:98:
72:11:e7:d2:70:f3:10:7a:2b:a0:9f:d3:b5:fa:71:10:c5:5b:
9c:aa:c8:1c:89:da:b8:db:5c:9f:65:4c:49:e7:7d:d7:ad:f2:
09:30:2d:09:f5:73:a4:12:4e:6f:81:4d:94:6b:f0:26:45:15:
e9:2b:c3:fb:62:f1:bb:34:44:dd:4b:a4:49:bf:19:48:2e:ff:
a5:32:f9:b9:5c:a4:a7:74:bd:47:d5:d2:5a:37:9a:4c:74:0b:
8d:1b:10:ad:90:79:cf:b8:8d:11:45:47:e8:93:26:32:64:c2:
d4:07:eb:91:bd:72:9b:b1:49:5f:af:83:48:c2:4c:a4:99:45:
62:d9:de:13:da:23:ae:1e:88:79:91:a8:62:39:63:32:27:24:
8a:68:e1:69:41:05:8b:39:19:a0:96:fa:70:b3:3b:e2:0e:d2:
43:75:c0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:47:05 2025 by rpki-client