Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier: Is4bGLmzO9AC++jfF578pTaDGs9u0Ct+LbRXvuzm5YA=
Subject key identifier: 22:9E:16:90:F7:51:70:15:B5:83:6C:38:6B:F5:AB:EA:FC:38:2B:D4
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 0197531032E3BC450161F77AD3E68DB64D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number: 144B
Signing time: Mon 09 Jun 2025 05:00:59 +0000
Manifest this update: Mon 09 Jun 2025 05:00:59 +0000
Manifest next update: Tue 10 Jun 2025 05:00:59 +0000
Files and hashes: 1: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: 3TIVl8wr8jIDbXCwpeGcgOrNX/rkHVUDkG9pMrqxeUg=)
2: u4XkgPABKlmzAjFlFb35_bSOoZM.roa (hash: 5OhzujGDvwa+oBk89U1CXUeSGEyZAhhsIH31ZmjrM8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:32:e3:bc:45:01:61:f7:7a:d3:e6:8d:b6:4d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: Jun 9 05:00:59 2025 GMT
Not After : Jun 10 05:00:59 2025 GMT
Subject: CN=229e1690f7517015b5836c386bf5abeafc382bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:35:22:f4:a4:8d:51:a3:a5:54:b7:8f:85:
20:d9:d1:30:77:ac:72:63:a0:34:4b:fb:c8:e7:c3:
df:07:32:29:12:4a:e4:ce:2b:fd:32:aa:3e:3d:08:
94:6d:c2:03:09:1d:11:80:24:03:58:7b:21:02:70:
3f:52:50:27:66:24:fc:c5:63:c6:d6:fa:56:b8:66:
09:6f:5c:a4:29:74:22:91:f5:a7:e7:b9:0d:c1:74:
fa:59:7c:f0:0a:28:59:45:5e:7c:cc:37:1a:64:a2:
6f:21:c4:74:ed:0d:14:47:ce:3d:44:1b:eb:cb:2c:
cb:91:0b:0d:a5:83:ad:dc:3f:0e:b9:77:b7:65:38:
b8:12:91:fb:9b:2f:07:1e:36:55:5d:91:21:6b:1f:
60:59:e9:f8:53:ed:d5:cc:8d:4a:d4:a9:d2:6a:41:
db:ad:33:ce:2a:34:94:e6:97:78:33:af:ca:a8:56:
97:f4:78:90:d3:f2:e9:46:26:cb:c0:da:fb:30:f5:
bc:b0:e3:c5:84:1d:07:61:2b:8c:c6:8c:85:e6:1e:
5f:e9:d4:38:65:10:f4:9b:68:4e:9e:e9:96:11:9f:
b1:28:92:8b:54:88:6c:da:18:21:15:5f:2d:e4:72:
fa:59:bf:90:33:42:41:bf:a2:da:50:b9:51:a6:c2:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:16:90:F7:51:70:15:B5:83:6C:38:6B:F5:AB:EA:FC:38:2B:D4
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:43:07:2d:a2:41:37:8b:cb:96:50:e8:08:72:8a:43:24:71:
c5:69:e1:06:e3:32:7a:ba:48:8a:92:66:2a:4a:50:81:24:4a:
45:f0:38:21:bb:b2:fd:74:71:1f:da:65:8c:31:a9:bd:50:82:
13:53:91:cb:23:25:a4:05:3f:c4:d5:d8:cc:bf:5a:ff:05:51:
fc:99:97:6e:e4:1f:c8:61:43:8f:0c:47:e5:16:57:31:8a:01:
68:04:2f:ef:49:0d:15:84:cc:17:c1:c5:e5:23:f2:ee:5e:51:
c7:40:b5:7f:c8:81:47:db:9a:4d:3f:df:7b:db:13:64:43:34:
c8:aa:09:b0:93:28:d2:3b:8a:a7:1f:61:c7:69:bd:da:84:a4:
14:a7:8f:9b:55:ad:d9:c2:18:07:4f:cd:5e:da:51:39:f0:08:
c0:88:cc:e1:df:d4:1f:8b:8d:a2:a6:87:c1:71:21:b8:d5:47:
cc:14:28:12:b4:6f:d9:1e:2e:c2:91:19:94:35:3e:1e:f5:f1:
a9:82:23:1e:0f:ab:68:d1:5f:a2:f5:41:79:35:99:03:f2:d7:
9f:97:fe:50:bf:3b:a4:b6:f1:cf:1e:34:39:03:3a:1e:1e:6d:
ea:ed:fe:55:c0:84:80:80:b1:0e:e9:79:38:ec:7f:fb:a6:c9:
19:1c:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:11:21 2025 by rpki-client