Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier: C5cYRtggrY+drbY+Q/Ty0LC/uuNAetLyKTZiTn2c6Ps=
Subject key identifier: F8:29:82:6B:9F:B7:64:E4:B1:85:78:2A:3B:50:3F:49:FD:0C:07:B9
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 01958BF27CC1A7C9B2A4BC269B08F2D845A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 20:01:19 +0000
Manifest this update: Wed 12 Mar 2025 20:01:19 +0000
Manifest next update: Thu 13 Mar 2025 20:01:19 +0000
Files and hashes: 1: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (hash: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=)
2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: eXtL9hsccOjmyaJeScWrfMxqT58njipvsoSVym+/D6s=)
3: zaqITKpKgeaAwvYpqmoD7gvhk3k.roa (hash: RNANRJqVDcBX4aReT0CnM2M60vTk0XR3zW0I73Wa0pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:7c:c1:a7:c9:b2:a4:bc:26:9b:08:f2:d8:45:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Mar 12 20:01:19 2025 GMT
Not After : Mar 13 20:01:19 2025 GMT
Subject: CN=f829826b9fb764e4b185782a3b503f49fd0c07b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:c6:86:b8:cf:06:af:dd:8b:be:fc:07:2e:
29:19:cd:c1:32:cd:c6:62:82:b5:f8:f4:0b:b4:02:
c1:29:f5:4f:ab:a9:6d:6b:67:b6:0b:1f:5d:9c:19:
33:d3:1e:05:8d:b8:13:ec:cc:80:96:24:3b:23:50:
0e:66:c8:32:2a:cd:82:62:89:c8:fe:db:99:70:79:
79:c0:35:8e:40:24:ce:24:3c:33:7c:e7:62:7d:2f:
14:e3:81:5b:44:0d:e0:ca:fd:da:16:e3:c4:25:c3:
08:e0:21:71:5c:14:fd:25:68:d5:d3:c6:4b:3f:84:
06:df:87:95:2c:6a:5c:5e:95:75:d6:4c:7a:b7:70:
40:42:c8:fc:0d:ef:3e:fc:39:83:5c:36:eb:11:cf:
67:04:8d:2d:a2:cf:5c:18:97:87:bc:43:5c:3f:0f:
d6:c2:7b:25:12:cb:d3:72:42:f3:ac:c1:4c:17:4d:
99:54:ef:bb:58:ea:d6:2b:51:32:21:1f:ca:3a:ea:
49:c6:0d:70:62:1e:07:54:dd:f8:81:7e:82:a0:03:
20:bd:a7:20:79:65:5f:41:3d:fb:63:ba:b6:8c:25:
0e:0c:e5:98:8c:b5:fd:e7:ec:6d:41:2b:22:b5:83:
a8:02:b0:64:86:b4:a3:fe:e4:f2:5e:78:ee:38:64:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:29:82:6B:9F:B7:64:E4:B1:85:78:2A:3B:50:3F:49:FD:0C:07:B9
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:44:b0:59:61:8a:17:4a:eb:c4:bf:69:bc:d0:ec:55:5a:a1:
80:8f:3d:95:36:0e:9d:f9:92:53:0a:18:06:90:00:b5:61:14:
f7:42:bf:5c:85:5a:8e:8f:73:05:fd:bc:d3:90:32:de:40:93:
2e:a5:5d:13:69:51:0a:9f:e7:14:1d:d6:e6:c3:e5:95:b7:19:
1b:f6:5d:26:cc:df:70:db:24:74:99:cb:ae:b3:1f:c9:68:6e:
8e:57:98:3e:40:3a:d1:4d:64:29:bd:23:48:d5:d5:e3:19:d7:
49:98:70:e1:44:44:8b:fe:1f:0c:59:a0:e3:40:0b:f2:cf:0d:
a7:65:ff:8f:61:9a:9d:3c:81:19:c6:4c:f7:b2:ba:07:6a:b8:
b1:09:eb:58:bc:3e:ed:99:3f:57:74:ed:7d:92:3c:8a:75:d5:
f3:31:c1:b2:aa:b3:b6:f4:7b:7f:84:78:2a:b8:6a:5f:73:92:
89:bc:6d:b4:2f:67:0b:17:68:1a:7f:93:f7:50:a4:63:35:f1:
32:5b:8f:db:95:b1:1a:43:0e:94:87:9a:86:52:9a:29:c0:51:
7d:12:0d:41:92:8c:9d:9a:a6:a5:e0:a9:f2:de:64:fb:d0:3b:
2a:ac:cf:07:65:26:53:32:9f:6d:db:e7:87:82:6d:b1:7a:e0:
99:99:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:41 2025 by rpki-client