Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: YuzlIvwBGl1cjA77nxvhl4GHrDaxvIidGhvhcleR8U8=
Subject key identifier: 4C:A2:1C:B0:AE:73:62:5E:0C:B3:C0:FB:7C:88:05:A9:FD:10:0C:6C
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0196556ED90F935242159D748D0AD51CEF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1506
Signing time: Sun 20 Apr 2025 23:00:49 +0000
Manifest this update: Sun 20 Apr 2025 23:00:49 +0000
Manifest next update: Mon 21 Apr 2025 23:00:49 +0000
Files and hashes: 1: dAqvCdWWWLaD7DpKhHjyPMUKxD8.roa (hash: ICjqowyJZl+tnm/tFML81YM05+devBA5jkzQG68wsIM=)
2: dbJBjLM2R4FbaLJEfe8c2Ly6uHw.roa (hash: o/lQtGpkSVzG47k87VZdN/0Njrn+Bde7V/YioG6J7q8=)
3: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: 7CH1ssEjgedbUuzLNZgR9qmXADEDYcwbWgaYHZrMYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:d9:0f:93:52:42:15:9d:74:8d:0a:d5:1c:ef:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Apr 20 23:00:49 2025 GMT
Not After : Apr 21 23:00:49 2025 GMT
Subject: CN=4ca21cb0ae73625e0cb3c0fb7c8805a9fd100c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:e8:08:e7:c6:ef:e3:45:84:85:98:e9:0b:
1d:e4:13:0a:1f:82:70:a5:aa:24:86:06:e6:03:79:
0b:b9:e3:c9:f4:74:1b:ff:36:4a:ce:3b:85:f4:c5:
53:89:36:84:35:ab:ba:e9:0f:72:cc:59:d6:b4:49:
19:1c:13:88:ff:d6:c2:c5:9c:bf:ba:0c:23:69:ee:
10:57:c3:e6:d1:7c:75:a0:a0:4c:15:3b:d3:ed:f2:
38:9a:de:69:8f:ec:70:6f:ff:8b:1c:2b:50:61:d5:
ce:3f:e5:c5:c2:d3:27:9c:fd:8c:31:75:d0:47:52:
60:6d:b1:75:f1:46:69:ee:0a:07:90:d1:73:66:48:
47:fd:2e:04:e5:88:bf:a9:98:8e:64:9e:a9:a3:72:
f6:80:98:7c:90:94:40:db:12:5d:4a:1b:8f:d9:47:
68:48:44:0d:7f:a3:74:e4:48:29:51:ee:41:fb:9c:
78:0e:3c:fb:f5:4a:53:77:76:e6:a9:82:58:e8:fb:
96:71:7a:25:33:2e:7f:e0:2f:d3:ed:4a:24:6f:f5:
41:7c:07:c2:1e:f2:ee:9f:0d:2d:94:57:ad:a6:c9:
65:31:ab:96:40:2b:74:a4:b0:43:8d:d7:2e:67:00:
69:15:e5:f3:71:97:7e:38:8a:ed:1c:7b:79:61:2e:
5f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:1C:B0:AE:73:62:5E:0C:B3:C0:FB:7C:88:05:A9:FD:10:0C:6C
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:95:dd:dc:45:ec:56:82:81:ca:bc:fa:35:4a:93:3f:76:c1:
1d:8b:02:b5:19:f7:51:33:19:2c:9d:fd:f0:68:5b:1d:ff:c6:
ca:ac:59:17:6d:c5:ed:f5:20:f4:2d:00:7f:56:d4:af:db:f3:
32:bb:cd:a0:4b:57:7b:27:53:e9:3f:9d:a2:e4:2f:0d:15:9a:
29:f0:6d:bc:c2:10:9e:f8:43:c3:a9:15:73:ef:39:00:05:ef:
b0:f4:0d:64:8b:43:50:f9:a1:ec:0f:6e:2f:ce:18:a9:d9:ee:
5f:47:52:97:7f:22:75:7f:dd:dd:d0:9c:3d:5f:66:38:71:4b:
6f:5b:3f:ac:99:e9:d4:af:e1:15:77:82:97:31:8d:62:6f:0b:
f0:c7:3e:cd:52:c4:34:21:d3:d3:39:74:8e:62:a7:fb:17:e0:
7f:50:7c:d1:4a:1e:30:03:a2:4a:ef:b2:09:74:7f:3a:44:7b:
32:4f:9f:28:66:62:b7:f0:cc:81:a1:26:ad:74:81:82:6b:07:
c9:18:c4:5e:f1:4b:d3:3b:fe:07:ab:6f:57:84:5b:55:6f:c0:
df:a2:dc:fc:e5:ff:ba:c7:9b:59:f2:2e:2b:f6:ef:1f:6d:54:
2f:2e:6a:22:0d:21:f3:ea:7e:5c:0b:86:67:cc:bf:01:15:70:
04:c1:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:52 2025 by rpki-client