Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: p3ZiCPZqOfWcy7WklN1s45+S/sbKC80/oBckghHYauU=
Subject key identifier: 56:05:3F:DD:32:B1:6A:16:D8:E8:D4:0A:72:ED:B2:88:2C:9C:7C:11
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 01962ABD0039075D4D2F3CFC9641F9F8A4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: AD
Signing time: Sat 12 Apr 2025 16:02:31 +0000
Manifest this update: Sat 12 Apr 2025 16:02:31 +0000
Manifest next update: Sun 13 Apr 2025 16:02:31 +0000
Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: a69tKDRvd/lmK0sXfmgWTh9FpCUGCpix7tKf0wx2VgA=)
2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bd:00:39:07:5d:4d:2f:3c:fc:96:41:f9:f8:a4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Apr 12 16:02:31 2025 GMT
Not After : Apr 13 16:02:31 2025 GMT
Subject: CN=56053fdd32b16a16d8e8d40a72edb2882c9c7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:08:24:f7:d8:79:e4:26:c7:36:a2:88:66:
78:79:8c:5f:ee:4d:42:cd:ec:45:57:df:0f:c5:e8:
f4:81:fd:fd:1e:56:fb:d3:b9:02:e1:91:33:97:c4:
86:9c:4b:35:aa:c8:7c:ce:00:29:db:76:d8:76:d9:
a4:3a:97:36:53:f2:bf:a8:d0:cc:0b:06:30:7f:b5:
3f:66:39:ec:73:a3:bf:39:5d:79:d1:e0:a3:6a:3e:
b7:d1:29:49:0b:e1:18:b6:2c:d9:74:2f:cf:f6:4a:
e1:97:5a:96:8f:48:3e:4a:93:66:2c:06:35:d8:c1:
88:aa:42:68:86:62:ff:56:fd:f8:9c:7b:ff:75:de:
00:4b:57:23:a8:37:a9:44:70:f6:6a:1d:d1:3b:c7:
f2:9b:bd:18:de:32:f4:ca:5c:bc:f0:43:de:03:7e:
24:d9:52:5a:57:f1:e7:5e:e2:fc:b7:eb:3a:bf:ff:
2d:21:6f:ed:a8:84:22:ec:e0:99:b2:cb:71:c5:18:
4e:fc:f6:0d:d7:f6:36:58:e1:e3:5c:cd:79:eb:2a:
ca:ec:8e:48:a9:51:87:9a:78:f8:75:25:a0:99:fe:
ca:e2:7e:a0:8d:dd:5b:60:b8:5e:f4:0d:d0:d7:c6:
e2:66:2e:e8:54:b4:e3:a1:66:d7:05:f0:fa:f3:81:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:3F:DD:32:B1:6A:16:D8:E8:D4:0A:72:ED:B2:88:2C:9C:7C:11
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a7:6a:da:f7:30:c2:0a:0b:58:85:9c:42:e0:ff:64:b9:d6:
f6:ea:b2:5e:50:33:c0:1e:fe:f4:c9:77:af:57:44:ab:15:7c:
3f:00:4b:93:7e:e0:70:ee:ca:a6:0b:af:ea:36:34:35:cd:ec:
6e:4d:60:7c:b2:ca:98:ec:f7:87:e8:0b:b7:af:61:54:a9:be:
7f:0c:2b:5a:38:2c:ca:d9:14:cf:ed:e6:34:12:07:d8:88:3f:
2d:ad:36:6a:d9:e8:bc:5b:d1:9d:94:59:6d:65:2c:2b:5d:39:
55:0a:69:1f:82:fa:fb:d6:45:69:8b:a5:e7:3e:f2:4d:6d:9a:
e7:ae:1f:9c:9b:81:55:d2:d1:30:cb:31:af:c5:70:83:fd:69:
95:1b:e1:e2:ad:50:07:ce:cb:5a:57:54:2f:fd:9a:f7:32:f1:
d2:4e:ce:25:0f:21:00:dc:24:51:ed:a5:62:d1:cb:ea:1f:56:
ae:1b:1b:5d:9b:0e:3f:c4:b0:70:e2:d8:75:26:6d:b8:b8:b9:
36:16:cd:56:ea:af:f7:31:50:26:33:fd:fe:18:0d:e6:a1:54:
f9:23:37:89:55:01:1f:26:6e:dd:3d:7e:bd:8f:d3:c8:4d:34:
6b:ea:59:06:0e:15:32:86:08:e1:80:3e:d8:c5:06:fa:c3:38:
a1:d2:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:56:43 2025 by rpki-client