Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: ZGZGLSyEE2SxBcCWY0Dloc8mTVYxQ5++g5F4iQ+FHzo=
Subject key identifier: 04:BA:97:7D:B8:B4:01:08:E0:35:12:AB:F1:8E:42:BB:1E:59:9D:AD
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 01974C9FD97608EFF370FD8FD539E1182FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 12A1
Signing time: Sat 07 Jun 2025 23:00:33 +0000
Manifest this update: Sat 07 Jun 2025 23:00:33 +0000
Manifest next update: Sun 08 Jun 2025 23:00:33 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: i8vj04u2MC8RX3bqjzhR9qCtoZxjDZAHVhwLd9NAPnc=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:d9:76:08:ef:f3:70:fd:8f:d5:39:e1:18:2f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jun 7 23:00:33 2025 GMT
Not After : Jun 8 23:00:33 2025 GMT
Subject: CN=04ba977db8b40108e03512abf18e42bb1e599dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:f6:6d:9a:f1:4b:cc:99:91:30:9b:1b:f7:
bc:ad:4f:07:07:e8:be:0d:01:f8:d9:5a:57:18:10:
13:dd:e5:40:61:4c:3f:1a:6a:41:46:61:75:9c:01:
45:f8:40:28:ac:70:51:7b:ea:d0:4c:75:ad:eb:43:
e3:cd:c2:f2:7d:4e:0e:14:30:b0:75:c8:77:0c:b6:
a3:fd:e2:9a:d1:31:cb:53:d7:18:95:a9:f7:2f:34:
db:40:c9:06:ea:c2:c1:b3:19:30:ad:60:04:ed:7a:
65:1c:5b:e0:73:ae:f1:28:d8:2e:36:f4:98:48:97:
29:67:c0:32:5e:e0:df:12:01:26:7c:eb:ba:78:8d:
d3:5c:1c:ea:b8:b6:a4:45:88:f8:e4:fa:b9:d8:6b:
d9:51:5c:19:02:3d:71:3b:58:99:70:fd:56:2e:a9:
4a:df:e1:f0:43:fb:c3:7f:98:0b:59:1b:29:08:2b:
99:d8:89:47:e6:8b:97:34:44:fd:41:36:08:c9:5a:
6d:1c:fc:8d:a9:2f:44:00:c9:8c:3f:18:eb:3b:a0:
55:b6:d6:c4:ff:fb:55:d2:8a:f5:59:b3:ff:80:97:
4f:0e:ae:8e:3d:61:9b:e2:4a:9c:64:6a:f6:59:68:
ee:2d:ce:1c:36:79:8c:35:5b:3e:e9:9d:99:41:bf:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BA:97:7D:B8:B4:01:08:E0:35:12:AB:F1:8E:42:BB:1E:59:9D:AD
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c4:d7:ce:51:9d:65:3f:53:68:e9:c4:20:06:75:b4:d3:f6:
81:9d:94:14:d8:16:9c:16:56:c6:da:7e:42:f5:a6:3f:99:61:
36:98:e3:b3:b1:83:fb:bf:0a:28:c8:66:20:2e:f5:0c:c5:47:
4f:a9:21:4f:67:55:fb:47:32:17:b3:c5:3d:1d:d3:18:9a:82:
4b:d0:ee:77:33:c5:84:36:fa:7b:f2:2b:52:52:4f:99:c5:14:
36:82:69:87:8f:e7:07:ad:18:a6:9d:fd:e8:98:bb:37:45:22:
a7:03:a5:44:18:1e:59:39:2b:a0:0d:cc:1b:3d:c0:74:8b:2a:
65:26:6e:ea:5c:5c:60:a5:42:dc:2e:ed:bc:27:53:e8:bb:43:
23:eb:5e:4d:ab:0a:d8:60:e8:12:7b:c3:d6:9a:8e:3e:a1:e6:
44:4a:0f:31:86:af:bd:a2:75:db:c3:d9:a2:71:a4:38:de:0d:
dc:d2:21:a5:0b:49:1e:80:41:d8:29:f1:af:24:0c:0d:c3:f3:
04:a5:3c:61:72:0b:8c:b2:98:21:17:46:6f:16:49:1a:2c:70:
2b:47:55:53:a9:a6:56:2c:d7:c1:68:8d:0e:22:d3:60:24:12:
82:86:12:90:b2:44:26:0c:fa:55:40:91:43:7b:ae:c5:4c:af:
d0:73:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:18 2025 by rpki-client