Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: vn43QHMC2GfXo8g1iXgPDvcrK7oR70ZgyjyfO7oY644=
Subject key identifier: DA:19:01:8D:13:31:5C:E6:65:87:6B:26:8C:CC:17:14:B2:64:6F:AC
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 01964C6B5F80398428C5D0C264DE20A06E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 10AC
Signing time: Sat 19 Apr 2025 05:00:27 +0000
Manifest this update: Sat 19 Apr 2025 05:00:27 +0000
Manifest next update: Sun 20 Apr 2025 05:00:27 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: sS4x13AguKJt+eNEP+Ks+sMW+XBEAz5xx1TYQACGlGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:5f:80:39:84:28:c5:d0:c2:64:de:20:a0:6e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Apr 19 05:00:27 2025 GMT
Not After : Apr 20 05:00:27 2025 GMT
Subject: CN=da19018d13315ce665876b268ccc1714b2646fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:61:df:fc:8d:7a:4c:da:00:83:89:7a:6b:
5f:c4:2f:a2:8b:c2:bf:ac:87:b2:33:d6:75:f8:80:
6b:b4:a5:bf:03:6c:93:e5:3c:c3:12:46:60:89:28:
26:ba:28:60:a3:57:b1:c9:8b:84:37:7f:33:97:58:
25:f2:5e:cc:ef:b0:6c:f6:cc:49:a5:43:68:b9:f0:
ce:40:92:ac:c3:87:96:b6:08:3a:63:d3:b4:a0:aa:
58:6f:f1:91:38:03:48:a6:48:2d:c8:20:51:2d:f7:
f5:3f:c1:ea:76:d8:a4:98:59:c4:98:81:79:5c:52:
58:4a:37:00:6a:94:20:03:d2:01:cb:95:ff:a3:46:
bf:a6:da:6f:76:82:4b:24:0d:63:ba:b5:ca:9b:06:
2f:ef:7c:62:bf:1c:22:0d:79:f5:85:f9:52:42:0f:
b5:91:85:2f:15:80:ce:f7:10:29:9b:94:bc:49:6a:
d4:74:84:fa:d4:b4:5c:45:53:98:4f:ec:85:94:b4:
f6:70:e3:f7:a7:9c:1a:88:46:ce:5d:ee:0a:6c:f7:
41:29:41:47:b8:1b:3e:f7:3f:83:23:4d:80:a3:cb:
4a:fd:b2:51:27:5f:fb:9b:bd:de:ed:6e:04:45:fd:
69:e1:18:0a:03:00:88:16:88:2e:54:74:1b:00:13:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:01:8D:13:31:5C:E6:65:87:6B:26:8C:CC:17:14:B2:64:6F:AC
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b4:6f:99:22:69:f1:9e:42:50:5b:cd:6e:10:ea:7d:0d:80:
f8:b9:3f:c0:66:dc:02:e2:ec:14:cd:a6:53:4f:3d:65:ab:72:
f1:5b:2e:ac:06:28:f8:14:c6:de:b5:95:bc:36:0f:e9:44:6e:
00:fc:11:28:ea:5a:58:1c:22:0f:39:00:81:dc:31:04:2d:0f:
cb:f1:e1:c4:11:d1:dc:70:e5:95:75:38:79:a5:2e:35:56:bd:
40:6d:ce:b0:7d:61:ba:d6:44:14:4c:c9:79:df:c5:e8:56:29:
c0:a4:f4:be:b9:62:65:15:c9:b6:3c:01:95:74:c6:46:51:2f:
78:23:33:36:22:36:23:d5:58:da:87:b0:aa:81:46:26:85:89:
82:e5:46:e0:96:d3:2d:2d:a3:2c:fe:d6:c8:e3:eb:16:ab:4a:
c1:f6:b1:15:61:60:93:26:fe:fb:8d:66:76:5b:58:16:6e:af:
8d:3b:a7:34:89:da:ce:e5:51:a7:bc:e2:97:87:09:e6:ff:63:
f3:8a:df:75:51:e9:0d:46:1a:bd:94:74:ca:99:f0:88:6e:a0:
9b:f3:36:f1:bb:e1:93:05:01:cf:ef:70:15:56:e8:92:b6:fc:
99:a7:c6:0a:9b:fc:9f:3f:be:a7:e5:6c:93:10:9c:e3:ef:59:
19:a9:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:37:34 2025 by rpki-client