Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: sziWMfmTTDmD1TOswfZIGntO9mSdZkDP4sSbCNwU4l0=
Subject key identifier: 59:78:26:C4:8A:0F:EC:A5:E5:89:B3:F3:E3:20:8E:19:63:A3:3E:00
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019653B6E113044F1BA53742A00DAD9FED35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:00:16 +0000
Manifest this update: Sun 20 Apr 2025 15:00:16 +0000
Manifest next update: Mon 21 Apr 2025 15:00:16 +0000
Files and hashes: 1: K-sDSYwSfmtvdGGKmz0K_s1-fbk.roa (hash: nTXDVmXDwxaVenEMyiJUZtNKTRSoq/vUuS1ln5SDlUo=)
2: MobINerBVuQmP-SIz5bmUV8BPPo.roa (hash: 6a2BmmDaX86zgOFsxT/j31kuD+dJU0v6H6ycoDKtjU0=)
3: UShqGyi6RZRV0Ph4_yVYYleIO40.roa (hash: ugrz3hjzhhiYzWWbWxwCGvT2Anh3/HoqFXI/J0yrilg=)
4: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
5: jfhQ8qxqYX2y_c95n4BoqN_WfWo.roa (hash: zTJaslFTlA280BuQpjcGlBIpfzZ8r2vvsWV2BclBmps=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: jJS4ZRiEuuGNEWHYeD3vqhK59Otnm4MnwS5rpj19Yso=)
7: yJhIC_8JjNW0W6ROa-IL4XOkSek.roa (hash: iFeNdkxy875ayHL7GIsn4nPYfS0obttarf5urh9pLUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:e1:13:04:4f:1b:a5:37:42:a0:0d:ad:9f:ed:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 20 15:00:16 2025 GMT
Not After : Apr 21 15:00:16 2025 GMT
Subject: CN=597826c48a0feca5e589b3f3e3208e1963a33e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:1c:ae:df:71:0c:8e:8e:aa:bd:ec:3c:86:
8e:75:62:1d:3c:13:86:cc:b5:7a:cd:b5:4d:ba:d6:
d2:7d:1e:3a:cf:64:59:83:ce:fe:57:43:6f:31:b8:
44:b8:71:30:2a:7a:a7:e5:30:99:f8:8b:d3:e5:37:
80:d0:63:e8:9e:cd:25:13:42:12:bb:d4:2e:2c:49:
c4:29:7d:a5:68:b4:a9:60:7c:80:5b:0c:70:b7:d4:
a1:80:2b:46:3d:61:99:bf:bf:2b:c0:5a:49:80:1a:
e2:7b:b2:1f:2e:ba:44:db:3c:2f:91:6d:e9:40:e7:
6a:b5:be:3e:5f:5a:d1:92:5d:e6:f4:05:4f:6d:9b:
cd:71:c5:ac:fc:2e:c0:04:3b:87:b8:b3:7f:28:0e:
81:31:7b:8c:bc:d4:4b:c8:5d:ab:b9:fa:15:6d:a3:
de:fc:8c:ce:70:d5:f4:e4:d6:bb:00:73:bf:62:bc:
81:48:10:ee:c1:06:b8:b0:59:85:e4:6f:71:ad:47:
dd:fd:96:e8:d7:9c:90:8e:be:f4:86:af:cb:4d:b9:
67:16:b4:70:53:5a:c8:2d:d6:39:d7:13:cd:eb:dc:
58:c1:37:ed:2c:6c:41:aa:1d:3f:16:cb:73:06:6d:
7f:ea:b4:a3:d8:9e:96:0f:f6:2e:21:38:84:70:dc:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:78:26:C4:8A:0F:EC:A5:E5:89:B3:F3:E3:20:8E:19:63:A3:3E:00
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:03:da:c7:e3:b0:73:7e:b1:03:0c:e8:ac:c5:17:2b:b4:
fb:a7:12:71:7d:a0:b7:38:46:d2:f1:00:12:ac:97:b3:9a:e2:
09:19:2b:b7:b2:ea:dd:e2:22:d4:1c:d2:a4:db:70:7e:9d:f0:
75:6b:df:b5:26:e6:e2:ec:33:d9:3e:43:60:61:e6:98:20:bc:
84:0d:0e:c7:49:58:f3:28:53:cf:3b:01:8f:10:4c:19:24:64:
a7:90:3e:d5:fa:02:b8:a1:73:e6:4d:88:90:a1:4c:b7:01:5f:
23:c0:2f:d0:b7:21:53:6e:d6:73:b7:08:5a:96:00:ac:81:ea:
ee:63:9b:15:16:87:5e:53:c9:08:7b:b7:cc:96:22:d0:80:e9:
5b:65:be:8c:28:4c:46:17:5e:d1:3e:78:8f:27:b3:ec:5f:7c:
76:f6:5e:bb:66:74:76:a7:98:5a:b7:99:4a:e4:a3:7f:1c:03:
7f:50:74:2f:7f:25:a1:0a:ab:86:81:24:10:36:00:83:94:98:
1f:63:da:86:da:19:8b:f7:2a:98:91:46:1d:be:83:e8:a5:66:
62:be:88:c9:e7:9c:8a:75:e7:23:6d:3a:2f:91:53:e7:17:54:
b7:f3:e8:86:99:ab:e6:9b:5a:c4:20:05:2c:15:2d:6a:ce:c9:
95:14:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:21:16 2025 by rpki-client