Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: +FQ8r6ui+XAvDlZ0iwY04e0z6yD9fLU5M3jzpypCrOI=
Subject key identifier: 14:3F:32:9A:CE:87:DE:3D:80:4B:1F:A0:DE:AD:00:81:27:36:55:D2
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 019612EA5E885D667AB1B72B896C7D51660F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 146B
Signing time: Tue 08 Apr 2025 01:01:11 +0000
Manifest this update: Tue 08 Apr 2025 01:01:11 +0000
Manifest next update: Wed 09 Apr 2025 01:01:11 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: VbgOk7KILz/ReMnaIW8PRxtebeCiCZcLlT4seLwxvvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:5e:88:5d:66:7a:b1:b7:2b:89:6c:7d:51:66:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Apr 8 01:01:11 2025 GMT
Not After : Apr 9 01:01:11 2025 GMT
Subject: CN=143f329ace87de3d804b1fa0dead0081273655d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:71:d8:d3:8e:be:0c:4c:f7:ff:5c:21:20:
ff:25:a2:03:10:cb:2e:f8:ed:cc:d8:23:0a:c1:b9:
f0:61:cf:e4:96:4c:c0:65:40:c7:ee:77:72:4b:63:
f9:08:7c:43:29:51:f0:1d:4f:a8:76:0c:23:eb:35:
83:2a:9c:20:73:94:d2:4b:1f:80:fe:38:26:62:e1:
dc:2d:30:40:67:e6:c4:36:59:44:d6:aa:42:ef:97:
a0:e1:69:37:8e:cc:35:da:2d:e9:7b:78:46:75:4c:
70:6b:ac:6f:22:90:77:65:32:c1:a1:f2:68:ee:de:
d2:08:48:2c:9e:bc:44:af:29:93:30:c7:26:37:91:
20:80:5d:19:10:a2:eb:c4:01:7b:3e:8b:db:9d:51:
1b:cc:d3:47:e0:46:f1:a5:dc:ce:3e:58:98:eb:68:
8e:63:20:04:58:02:47:85:2c:71:fa:74:f6:94:dc:
28:37:fd:a3:f7:eb:dc:6e:ce:c7:74:46:fa:f7:17:
77:dc:15:62:c8:5a:78:94:eb:05:95:a3:3d:61:7a:
46:a2:c5:67:11:55:0e:d7:2e:47:c8:c6:7d:ae:4e:
1f:ec:ab:24:c3:92:ff:60:53:fe:ca:6b:8a:e7:33:
7e:58:48:6c:58:15:c8:b9:dc:68:e5:d3:3f:3d:ef:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:32:9A:CE:87:DE:3D:80:4B:1F:A0:DE:AD:00:81:27:36:55:D2
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9d:9e:90:c4:e7:34:c4:4c:82:f9:02:1d:df:43:00:e7:96:
a8:28:aa:03:4c:a9:11:72:11:88:e6:49:88:ce:f5:cf:6b:64:
7c:ec:f0:83:d7:d7:6f:13:37:45:60:26:61:66:5c:d4:dd:a6:
da:69:e5:c4:e6:4f:0b:51:03:08:78:d4:53:7a:30:16:19:12:
b3:37:69:b4:6e:98:88:2a:04:9e:da:ec:a9:79:e9:f4:d9:b6:
83:c9:1d:5b:bc:1a:d4:9e:2e:50:dd:68:ca:0a:89:b6:e7:41:
22:de:85:e1:dc:d6:f3:bb:b9:fe:7f:48:98:87:d8:b9:1b:bb:
f8:86:8f:5b:1b:d7:b0:f2:26:28:27:9d:72:b6:d7:9d:48:b2:
98:f8:93:c4:6e:22:c9:c6:dc:7d:50:22:37:f4:31:5e:ac:cc:
d6:bb:0e:67:60:9e:78:37:13:b5:01:84:7d:c8:c7:46:5d:22:
b8:9b:4e:7d:95:8f:79:a1:60:ef:d6:bd:97:ff:70:4e:f0:c3:
28:0d:1b:ec:5d:8b:bd:34:f0:bf:a7:dd:8f:e0:41:e1:44:87:
2a:64:21:4e:f7:32:a0:e6:6f:80:5a:05:b4:26:b4:55:c9:57:
0e:c8:ab:e2:d1:67:9b:2d:49:15:ae:37:19:51:0e:00:ce:5e:
f4:06:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:16 2025 by rpki-client