Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier: U48D1BHcOwgpmbiiLnIycycziSgCMU/QZ+zC2mT9D6Q=
Subject key identifier: 38:22:AA:0D:83:5D:02:AE:FD:EC:BE:DC:39:55:82:AA:9B:AC:14:DE
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 019655A5C8161E78A32E21ECB7B66F59D04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number: 1256
Signing time: Mon 21 Apr 2025 00:00:50 +0000
Manifest this update: Mon 21 Apr 2025 00:00:50 +0000
Manifest next update: Tue 22 Apr 2025 00:00:50 +0000
Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: SiuCGwh7DJXE6T7+xHCSfbvPYVMJFDAn5fwqxoPNfJw=)
2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:c8:16:1e:78:a3:2e:21:ec:b7:b6:6f:59:d0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: Apr 21 00:00:50 2025 GMT
Not After : Apr 22 00:00:50 2025 GMT
Subject: CN=3822aa0d835d02aefdecbedc395582aa9bac14de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:dd:75:b5:21:5f:c5:06:bb:af:22:2d:90:
89:41:a6:8d:38:3b:57:f2:d9:22:3d:f0:15:88:b7:
92:fc:e9:1a:e4:ae:40:6f:9c:2a:f4:23:72:6f:15:
28:4e:a7:72:89:bb:ac:f9:43:e1:5a:f4:30:0e:cc:
47:6a:37:36:1a:d9:81:d4:8e:d4:46:3f:9d:ee:9f:
bc:45:fa:1e:05:24:74:70:ad:82:ca:01:8d:ef:8d:
75:01:f9:bc:6e:be:d3:61:fc:70:52:fb:f6:15:60:
cf:5a:5e:f7:83:bd:4f:4d:57:39:df:6f:83:fc:5a:
10:9a:b5:c5:7f:5c:e5:e1:08:60:25:e4:df:c6:e2:
56:24:8a:e0:27:21:22:fd:e1:84:cd:74:0b:19:c1:
fb:44:a3:bb:2b:43:6a:e0:46:49:00:bd:8a:ab:d7:
0a:0f:95:66:ba:3b:65:6e:81:6f:91:57:87:5a:1e:
11:7b:e7:14:dc:ef:b5:08:b2:1b:9f:64:76:f3:9b:
ea:82:17:8b:81:bb:3c:25:66:55:b5:8d:e2:71:cc:
ea:29:4a:41:da:3c:22:a7:28:6f:6d:1d:3a:dc:2f:
51:d3:a8:be:f5:a7:1a:a0:55:0b:2f:87:57:e8:4d:
61:47:5d:76:d5:83:8d:ac:33:06:43:b0:b0:fc:31:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:AA:0D:83:5D:02:AE:FD:EC:BE:DC:39:55:82:AA:9B:AC:14:DE
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e6:53:04:50:86:4d:3a:38:4e:81:a6:fc:c6:fd:07:3d:36:
f9:ac:5a:9c:c2:59:bb:94:92:2f:a3:f4:80:67:db:13:49:69:
7b:8e:28:8d:8b:8b:c4:85:a4:a6:a1:ef:06:f4:25:25:cd:57:
e2:17:35:a6:af:6c:9e:9d:87:e3:de:c2:fa:4f:64:00:33:a2:
d6:3e:c9:31:82:44:bf:be:0a:6c:97:8c:35:83:de:af:f1:a8:
b0:7b:b4:41:49:6c:a3:b4:a2:bd:5a:b0:a4:cb:98:6d:79:4c:
a3:07:61:77:7e:90:82:32:fc:e9:90:22:ae:b4:ef:52:15:84:
02:00:f1:86:07:db:d6:88:2a:bd:11:6d:eb:87:a5:8a:81:5a:
f8:67:22:18:92:86:a2:59:be:db:df:06:dd:c4:00:bf:d9:c1:
5c:18:bc:09:50:36:d4:31:05:46:bf:db:5e:44:ac:3f:3e:e0:
40:90:22:48:51:d0:0c:60:14:c9:e0:df:4d:19:19:fc:05:e7:
db:12:34:ac:c6:e8:d3:30:68:aa:6a:ae:94:07:69:c3:a9:6a:
e3:91:e3:63:2e:28:08:0f:a7:01:b3:6c:49:a0:97:ce:d8:c6:
bb:1d:95:e8:18:c1:b2:4a:4e:69:a2:f5:c4:01:3f:dd:e4:ae:
38:a7:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:49 2025 by rpki-client