Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: UwmfmAYlY4lKEHG1x0q8pxyuJIbopDSyqgy3eZQN/mo=
Subject key identifier: 0C:22:E9:BB:E8:F7:6A:07:54:62:57:EA:1A:1E:AB:39:0F:7A:7B:7E
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019630BDE68C220C73DA9A4AAA09B58062AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 120E
Signing time: Sun 13 Apr 2025 20:01:13 +0000
Manifest this update: Sun 13 Apr 2025 20:01:13 +0000
Manifest next update: Mon 14 Apr 2025 20:01:13 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: PvAA2k9LhRm9OxNkngMa+PBri9sEDFqj3cCIPnjg7Us=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:bd:e6:8c:22:0c:73:da:9a:4a:aa:09:b5:80:62:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Apr 13 20:01:13 2025 GMT
Not After : Apr 14 20:01:13 2025 GMT
Subject: CN=0c22e9bbe8f76a07546257ea1a1eab390f7a7b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:fb:9b:71:91:46:31:ce:81:05:b6:11:5f:
22:63:5b:40:29:c5:72:44:65:6c:c5:ea:37:2d:3e:
c0:bf:60:1f:04:c3:f2:88:8a:a9:33:2f:ed:ec:8b:
fc:f5:0d:fd:7f:01:0d:c4:ed:a3:da:e9:68:02:40:
66:fd:2d:d7:e5:e1:c3:bf:81:f1:ba:ad:7f:97:21:
d9:39:93:24:70:69:ee:27:31:36:a2:40:7b:45:00:
8c:89:2f:e6:fd:f6:fb:03:47:d6:e8:f6:05:01:a6:
58:ce:08:0d:c9:ee:aa:02:05:1f:e4:bd:84:38:e9:
10:64:7c:b2:93:d5:cc:41:3c:1c:63:d4:bc:74:c0:
ba:61:14:cf:ae:97:fd:8f:b0:cc:e4:c9:d0:8c:dd:
98:03:4b:84:bf:05:9f:dc:b1:83:6f:dd:03:e1:4d:
74:56:9b:71:06:b8:0e:c6:83:b6:e2:7f:8d:9c:71:
59:fa:10:f4:e6:c0:b6:ab:b3:e3:b1:81:c5:b2:b9:
e9:3d:0a:18:f5:fd:85:c2:a1:03:a8:bb:d2:3d:c7:
10:02:26:d5:e0:a2:1b:87:c5:f6:8a:73:d6:1c:a7:
e0:61:01:3b:59:78:56:da:13:23:d7:79:52:5b:b8:
8d:91:61:41:ee:d6:e3:b2:31:8c:2e:50:dd:a0:40:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:E9:BB:E8:F7:6A:07:54:62:57:EA:1A:1E:AB:39:0F:7A:7B:7E
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4b:70:35:a5:5d:c5:42:9e:9e:3b:9b:77:f9:d5:36:97:38:
a2:fb:f9:bd:c7:56:46:a9:d7:60:8c:86:af:9c:8c:03:02:f6:
10:c0:0e:12:6e:e4:37:3b:9d:e1:c8:a9:ef:41:9e:25:ef:30:
e9:38:fb:f2:e1:e0:44:45:b0:50:5f:6c:67:b3:3a:f5:74:18:
b9:70:de:b5:54:21:7d:1c:f9:83:13:90:18:4d:23:ec:3c:73:
de:d5:60:34:e2:81:7a:9f:64:99:fd:2d:b9:2b:24:e3:7a:77:
eb:bb:c3:21:76:48:18:51:88:30:ca:b3:6f:1a:95:7d:71:75:
86:07:9c:c6:42:35:e7:8e:9d:72:d8:cc:c4:33:2a:36:8e:13:
81:7c:e0:20:25:57:56:a9:af:e0:39:3d:d5:d2:3a:62:66:95:
e0:05:99:76:fe:c6:91:2e:89:d8:1b:fe:2c:4d:35:e5:ad:88:
08:d6:74:43:a4:05:0b:ea:cd:6b:8b:8f:cb:c7:61:2b:85:90:
37:c5:52:64:99:f1:36:f5:81:41:88:44:15:f6:01:16:44:c9:
aa:9c:3b:a0:20:b4:37:11:16:65:35:bb:e2:79:62:a2:dd:32:
46:08:8e:88:be:7a:03:e3:db:c5:2b:d2:a1:be:ee:e1:2f:d8:
ed:ad:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:46:11 2025 by rpki-client