Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File: SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier: gYZn66rXCAy71YyDrj5RwqtPGDo4wfSYzi26LWbnQ1U=
Subject key identifier: CE:6F:2C:90:47:4F:F9:F6:45:58:22:26:75:3D:AE:70:91:52:AF:17
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer: /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial: 01964DB53B9B7D5D77A682088AC735DAFFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number: 0FF5
Signing time: Sat 19 Apr 2025 11:00:44 +0000
Manifest this update: Sat 19 Apr 2025 11:00:44 +0000
Manifest next update: Sun 20 Apr 2025 11:00:44 +0000
Files and hashes: 1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: Lo/pAixzJVbsDEME1TUp/8oOU4rOIMzoYk0x8ApdG6M=)
2: W9LIimzmvADZP7RqK5-CS9hx7F8.roa (hash: 0bKnzD+/f66zg904NSAl0qUDPLAd/0RlfEWM3sOW+wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:3b:9b:7d:5d:77:a6:82:08:8a:c7:35:da:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Validity
Not Before: Apr 19 11:00:44 2025 GMT
Not After : Apr 20 11:00:44 2025 GMT
Subject: CN=ce6f2c90474ff9f645582226753dae709152af17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:b6:ad:de:53:69:cb:80:ff:ef:ab:c9:74:
3a:ff:09:c8:5e:a3:21:6f:48:a4:4f:86:b7:fa:54:
c7:34:db:b8:e2:60:bc:ef:15:c6:d4:12:2a:3b:6a:
f8:23:ae:b8:2c:65:ca:f1:8d:3c:f8:41:a3:69:4c:
62:12:36:67:56:3e:fa:38:88:fc:6c:47:23:3e:85:
ba:98:5b:73:a7:27:a5:51:d5:fa:60:9a:f8:01:be:
b2:d6:1e:58:84:88:0d:99:51:f5:8a:86:a5:b0:d2:
12:e3:ae:ce:ff:aa:e3:4a:c7:53:82:c8:58:dd:48:
98:2c:d1:09:c8:eb:27:76:08:6c:63:26:d2:8d:df:
66:67:2f:2f:5e:ff:34:05:65:4d:92:76:23:b8:0c:
a1:c4:87:7f:d8:6d:47:0a:a4:83:c8:30:f5:0b:87:
1a:cb:5c:84:95:62:d4:a6:05:f6:a7:aa:b6:e5:ea:
e9:58:02:28:a4:8a:fe:8d:a5:fe:ae:cc:8e:38:48:
aa:45:e0:24:ea:5c:89:9d:49:5a:b3:50:c9:eb:51:
ce:bb:b5:54:2d:b3:de:46:e4:22:44:85:90:ac:d8:
6f:ad:98:fc:74:0c:c7:45:7c:ac:6a:42:98:dd:1c:
9b:42:09:84:9f:d4:23:05:00:42:bb:cb:45:3c:6b:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6F:2C:90:47:4F:F9:F6:45:58:22:26:75:3D:AE:70:91:52:AF:17
X509v3 Authority Key Identifier:
keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:be:16:84:11:d2:90:ad:cb:cb:d8:91:45:20:f3:a6:f9:81:
6b:e9:e8:cc:a0:c9:cf:20:3e:7a:e8:f7:72:db:a5:85:f0:6b:
56:53:34:5d:3b:2d:71:76:28:f0:25:5c:8f:ed:dd:44:87:93:
e1:e6:d5:a7:60:62:9d:83:e0:dc:cd:ea:3b:ef:50:b9:8c:d2:
34:7a:ab:cd:56:56:19:42:f3:fa:34:13:ab:f5:1f:66:0f:80:
96:ac:fb:77:5a:05:18:17:22:6f:11:0b:43:74:77:47:88:fe:
d3:89:12:bc:de:c6:70:77:99:9f:53:7f:7a:8d:ac:43:98:9b:
37:ae:fb:44:bd:23:5c:34:79:ae:35:82:52:51:91:e3:e0:2d:
a0:b9:15:b0:fb:5c:b5:94:e2:58:fa:ca:d6:c3:f3:dc:07:95:
1e:23:a2:be:4a:67:ae:5f:fb:2f:d6:d4:f3:de:9f:b1:aa:5d:
f7:0a:d0:2f:56:6d:65:0c:bf:64:3c:57:29:bf:68:05:92:fb:
e0:17:99:fd:8d:db:b2:94:3e:90:d8:47:b6:03:bf:6d:8c:20:
c0:7d:7f:35:b1:8c:52:c6:52:69:04:f0:e5:97:16:93:10:11:
0f:bf:4c:69:fb:51:09:d7:74:52:31:b8:63:4b:4e:20:d8:1e:
18:8c:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:06 2025 by rpki-client