Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: tmJVVKbdTdln0ss84486IJSVCihhgFeUiQpXIqb2S7s=
Subject key identifier: A0:C3:7C:0C:60:AC:0F:A6:A4:A0:1D:0D:79:A3:2C:C5:4B:C1:6E:BE
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 01974BC42C52876A3E45E3A2A0C667072009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 19:00:36 +0000
Manifest this update: Sat 07 Jun 2025 19:00:36 +0000
Manifest next update: Sun 08 Jun 2025 19:00:36 +0000
Files and hashes: 1: BFmKhRFnCi2AJyutOk-Yxml708c.roa (hash: 30fgE+QkDlz/nOmXI9WzL3BXCW8rLDMyhnps4H9jCSs=)
2: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: zPp7faC33MMFUOuvwhURXB5BqnIj4Bt++V/3Htrlris=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:2c:52:87:6a:3e:45:e3:a2:a0:c6:67:07:20:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Jun 7 19:00:36 2025 GMT
Not After : Jun 8 19:00:36 2025 GMT
Subject: CN=a0c37c0c60ac0fa6a4a01d0d79a32cc54bc16ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:41:8f:a1:7e:eb:6f:e3:ce:a1:7f:ca:53:
58:95:2f:8a:92:4b:a6:08:89:17:de:ea:20:48:f9:
e4:07:f9:eb:a7:89:d0:28:cd:b4:1f:22:22:1d:28:
71:70:76:d8:3a:f8:dc:d9:92:c9:78:23:78:81:07:
71:db:f3:53:c8:02:3a:bf:95:e8:d6:a4:49:9c:d8:
a2:cc:a5:b8:3f:f0:b7:ab:62:c6:04:5d:63:dc:90:
e6:b9:6c:5d:af:00:1c:52:4e:64:32:9a:62:b1:c2:
d3:f1:cf:41:9d:ec:a5:4b:ec:16:7d:4d:79:07:d4:
b2:96:b7:23:f8:b8:88:1c:c8:ed:ad:a2:ae:6d:3b:
ab:a0:44:76:11:e4:2e:da:10:98:fd:20:dd:ad:a2:
8d:da:fa:f9:78:a5:98:d2:c7:78:07:87:75:62:6c:
67:e4:c9:63:d8:25:f0:1c:19:3d:a2:6c:f8:61:81:
7d:36:57:88:d0:52:fc:c1:8f:66:49:88:2a:d8:3f:
c8:e4:19:6f:ee:05:d2:8d:1e:75:7b:53:7f:97:bb:
69:d8:de:a8:f5:7c:75:52:a3:4e:9f:45:19:d6:72:
3f:20:d6:21:e9:ef:7b:ca:7c:d0:30:ec:83:3b:7e:
45:a9:46:da:17:9c:06:64:1a:59:eb:f7:99:80:53:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C3:7C:0C:60:AC:0F:A6:A4:A0:1D:0D:79:A3:2C:C5:4B:C1:6E:BE
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1c:71:86:1c:f6:fa:2c:7c:3b:93:e0:8f:81:63:39:63:9d:
a2:61:6f:e0:03:04:e7:bd:6d:9e:8b:5b:3d:a0:6f:73:c9:46:
ab:20:36:4a:cf:09:c0:99:44:15:85:12:2c:0e:b7:fe:ba:df:
94:81:ac:c8:46:54:bd:fd:ee:c7:40:3f:2d:81:1f:f4:4a:a6:
ca:6f:bc:13:59:ca:3a:ee:6a:7c:fe:81:b6:7d:a9:5f:28:a2:
6b:dc:92:a2:a3:f9:0c:c5:b2:bd:36:ce:19:6a:26:96:71:77:
ae:99:c9:c7:46:f4:05:e4:09:73:49:66:a8:50:6c:1b:76:be:
0f:68:83:af:32:6a:ef:ce:99:a3:10:69:fe:22:d3:26:38:49:
e6:e8:ee:df:0f:c7:72:ba:a0:98:e8:98:11:29:d1:0d:cd:3d:
2e:e1:53:1a:95:73:96:07:68:19:37:33:e3:48:86:15:68:79:
a5:18:ad:8c:c5:dc:a4:1f:ba:9a:96:ed:ab:67:6c:e3:92:80:
e0:cd:b7:fa:bd:47:0e:a8:70:e9:f8:54:ea:55:42:6f:88:38:
05:2a:5f:d9:0f:ee:05:14:ed:67:64:11:b0:5e:02:2d:52:69:
cc:c5:df:24:69:09:6f:1f:6b:a1:16:97:b4:1d:fa:f5:dc:5e:
15:50:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:04 2025 by rpki-client