Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier: 6F8wO8pyDosfcLDKE2CRbovELBJdMLjkr6HRMRkb15M=
Subject key identifier: F8:00:6B:FB:85:64:B5:7B:70:F1:C1:DF:5F:D4:64:2F:58:23:EE:15
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial: 01965537E6ACC23FF903A9E354915A7CC263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number: 0BE3
Signing time: Sun 20 Apr 2025 22:00:48 +0000
Manifest this update: Sun 20 Apr 2025 22:00:48 +0000
Manifest next update: Mon 21 Apr 2025 22:00:48 +0000
Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: s+sTKKjcSZfXPbJwd/Cwg8vMLOg4jwvE/afrgdEVLfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:e6:ac:c2:3f:f9:03:a9:e3:54:91:5a:7c:c2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
Validity
Not Before: Apr 20 22:00:48 2025 GMT
Not After : Apr 21 22:00:48 2025 GMT
Subject: CN=f8006bfb8564b57b70f1c1df5fd4642f5823ee15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:13:4f:5f:8e:ad:24:09:82:34:60:ef:54:
e6:14:4c:03:fa:91:36:e8:b2:62:87:d1:98:80:4c:
f5:47:71:a5:e6:6e:6f:4e:ac:7f:b6:d4:d4:b9:f2:
57:79:04:b7:82:62:15:ba:c8:16:5a:9c:7f:10:c7:
8a:c4:4d:25:25:f3:2f:63:7d:b2:58:57:98:a7:6f:
d8:c3:77:eb:7f:40:48:ba:b9:71:82:45:df:ff:fb:
57:00:d8:aa:0c:2c:1a:7b:a8:bb:49:54:6e:0f:55:
b5:51:ad:51:ef:e5:e0:06:5b:af:72:24:ee:0a:77:
aa:54:de:78:0b:20:61:6e:70:71:c9:a1:38:e3:af:
4f:e0:1e:d8:24:d1:67:7a:98:6f:68:cf:c8:47:81:
42:32:42:c1:b5:21:93:5a:f8:a3:e7:0f:f7:5a:4a:
8e:1e:4b:45:8d:09:4f:40:4b:e6:c2:85:e2:22:9b:
cb:5c:ea:e4:15:f4:55:f2:0e:99:a9:f1:c3:f3:56:
b6:ed:e5:3b:8e:11:2a:9a:10:40:f0:03:e8:82:05:
8d:40:6e:f0:18:81:b1:3c:01:ba:f1:8d:8e:00:05:
3d:13:b6:07:02:aa:e4:a6:19:b3:c2:13:33:95:ac:
83:2e:63:b1:28:0b:d4:15:0c:7b:19:ad:56:d0:ba:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:6B:FB:85:64:B5:7B:70:F1:C1:DF:5F:D4:64:2F:58:23:EE:15
X509v3 Authority Key Identifier:
keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:de:54:a7:34:f0:c2:1a:2d:69:97:ed:ce:c2:68:1c:2b:
e0:3c:c9:38:c4:22:c6:5f:d5:aa:39:ce:2e:2a:2d:74:37:17:
4e:7f:fd:ea:e9:f0:d0:d0:ae:19:bf:07:c6:94:ed:f6:3e:2f:
44:00:a9:9b:3f:79:7d:36:f9:ae:83:94:82:24:4d:8c:d6:d4:
7f:66:a4:9b:bc:24:83:28:36:a4:0d:e1:26:3c:78:bc:00:92:
4d:0b:b3:fe:1d:07:5e:72:b2:2b:3c:f2:1a:9b:38:51:12:fd:
2e:de:d6:77:18:94:36:fe:e4:2d:7f:3d:38:41:f8:78:6f:11:
c9:10:7e:32:1f:a6:86:37:6f:1c:17:fd:cb:c7:d9:b3:ba:bd:
ce:9e:80:23:7f:76:6f:36:d9:f8:5f:6f:ef:09:55:b5:21:6b:
7b:a0:12:96:dd:ea:25:b0:45:4c:dc:47:06:3d:0a:6f:fa:4a:
52:d6:5b:81:e9:71:bf:63:80:46:c6:55:df:71:4d:4f:81:5b:
a7:73:37:e2:26:6d:e9:9b:27:1d:a5:3f:77:cb:50:d4:39:ca:
61:a7:f2:6e:c2:7c:16:9f:0c:cf:f5:f9:f1:c0:7c:c2:f5:0e:
34:92:4f:90:8b:ad:84:9b:44:d6:7f:f6:d3:01:cc:d6:dd:34:
86:b9:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:51 2025 by rpki-client