Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: cwiavevStJ9af0Chq7AV+z3io2aVdxAfJHu+99yzR5s=
Subject key identifier: 53:FC:B9:BB:51:9D:CE:85:24:0D:93:42:AA:28:E1:CA:62:E9:42:D6
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 0197488C746352E7AC5F48C51592D1EAE8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0D17
Signing time: Sat 07 Jun 2025 04:00:53 +0000
Manifest this update: Sat 07 Jun 2025 04:00:53 +0000
Manifest next update: Sun 08 Jun 2025 04:00:53 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: b8KPBH8+BUs+Fta6eKiU3c/MWmpPzcC+ddXFZ8akN+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:74:63:52:e7:ac:5f:48:c5:15:92:d1:ea:e8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Jun 7 04:00:53 2025 GMT
Not After : Jun 8 04:00:53 2025 GMT
Subject: CN=53fcb9bb519dce85240d9342aa28e1ca62e942d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:75:5f:87:36:c5:61:27:3a:bc:cc:6e:01:
c5:11:da:8f:d3:a5:c0:82:99:0d:1f:68:1a:dd:01:
09:4c:72:f3:02:6f:7b:b6:dc:43:cb:b5:f1:80:89:
3b:14:b4:e9:55:df:50:21:77:52:be:d9:57:23:54:
e2:a7:25:93:4f:39:3c:2d:df:63:3a:4a:32:4f:11:
0d:65:67:0e:43:82:83:d2:f3:e0:2b:6c:47:47:4a:
94:60:0c:af:bc:16:ba:c6:81:a7:e9:89:33:2e:09:
59:5f:20:82:75:f3:3c:33:e6:d8:c1:70:39:ae:cf:
4f:f5:a8:4a:87:07:9a:77:7f:1b:d0:5b:18:d1:50:
d6:c3:5c:a5:88:57:36:25:cf:e3:2f:e4:b1:f2:39:
a8:81:ab:f2:bd:5f:aa:7b:3a:28:f2:17:a8:98:1a:
01:93:ed:d0:b6:0f:39:93:9b:74:87:79:16:5b:1a:
0f:eb:3e:55:e0:e3:16:0f:be:51:1d:5a:16:56:10:
6e:23:09:84:9c:63:2c:fd:b8:03:7b:de:12:b6:69:
a6:16:9d:25:4f:5a:c2:6e:d5:71:21:be:04:96:6e:
96:90:90:89:b5:3f:3b:1b:3f:cb:c2:aa:91:22:cf:
5a:61:8f:99:60:9a:a5:93:77:8d:fb:0d:57:ad:56:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:B9:BB:51:9D:CE:85:24:0D:93:42:AA:28:E1:CA:62:E9:42:D6
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:64:77:63:42:46:cf:5e:9d:f7:53:08:a5:36:b9:98:bb:8c:
99:9c:84:e7:f4:d4:51:18:2a:07:d8:9c:d9:d8:f0:aa:48:b3:
f0:8e:ee:60:bd:9a:42:02:0b:e6:0f:7b:a4:61:1c:05:51:01:
ce:2b:38:3a:d3:0b:d1:a2:35:4e:88:7c:9f:27:ae:b5:b3:f0:
a3:c0:6d:cb:bb:28:d7:24:4c:3b:c0:2c:9b:60:5c:24:0c:7e:
6b:ae:de:2b:c5:3e:4d:cb:7c:ad:2b:37:c1:ff:38:0a:37:df:
7f:3b:96:1a:c4:14:7d:11:f4:aa:d6:7d:d8:60:22:e2:ff:b8:
86:63:25:cb:5c:fb:9b:4d:d8:ea:a3:66:2c:91:4d:74:e6:a3:
f1:51:e5:ec:54:da:ea:b4:48:17:8e:1c:b4:73:af:78:1c:05:
e3:69:b1:a3:04:7b:f5:7f:d3:f5:9c:24:8d:e8:d2:0a:85:a2:
40:1e:87:65:ef:a7:21:57:52:3c:c6:a8:fb:5b:85:21:7c:76:
4f:f7:86:ae:b5:5c:f4:3c:3d:8c:b4:8c:cf:bf:27:f4:fa:20:
00:12:76:ce:57:c8:1d:cb:06:b1:7a:52:db:4d:55:a1:97:79:
a8:ec:d5:83:1d:f7:51:98:3a:b1:d3:02:5c:b6:d7:f6:d6:04:
f1:7e:ed:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:05 2025 by rpki-client