Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: 6dA9xRVfY1WpUTuZrHeeRsscoeSwGDtIyKRlFQE80YQ=
Subject key identifier: 54:BF:77:F2:19:55:7A:BC:3C:D1:F6:84:9E:45:DD:B8:A4:DD:06:96
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 019657260F5A9003B4A3C90D5784B22B0360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 07:00:34 +0000
Manifest this update: Mon 21 Apr 2025 07:00:34 +0000
Manifest next update: Tue 22 Apr 2025 07:00:34 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: Nc2WzEudSlRSZ/wEf9Wv9xiuA3mBI/DdtOrpVM3CIL0=)
2: f3uE1VDv54J39oNndZpR1jGOB3k.roa (hash: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:0f:5a:90:03:b4:a3:c9:0d:57:84:b2:2b:03:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Apr 21 07:00:34 2025 GMT
Not After : Apr 22 07:00:34 2025 GMT
Subject: CN=54bf77f219557abc3cd1f6849e45ddb8a4dd0696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:28:77:23:aa:ab:5f:ac:eb:b9:80:08:72:
ae:fb:13:78:cb:6d:6e:43:7d:b2:c5:22:67:ee:c9:
10:a6:4d:d1:fd:55:d1:f1:51:1b:e1:ac:53:0a:65:
33:ae:5d:de:96:91:e5:53:9f:43:73:11:19:32:76:
63:e0:05:7f:97:0c:b3:8c:c7:13:c0:a9:e9:77:6c:
70:49:be:4d:fc:0b:88:48:29:f3:c1:ab:a1:7c:20:
e1:fc:fe:69:8f:51:00:3d:ea:a9:bb:f1:de:91:3f:
6e:1d:f4:8c:c8:0e:57:e0:8d:44:db:4a:1b:12:39:
97:f6:e9:ba:56:54:0e:32:ca:f0:34:e0:31:a4:b8:
cc:33:8b:a9:9f:c1:90:23:1e:76:ff:fa:79:1c:21:
67:7d:93:12:88:4d:a1:7e:ac:9c:f2:41:01:d7:eb:
2b:72:48:d8:6b:ca:d7:9c:f0:1e:e4:ba:47:c1:36:
6a:69:64:ed:69:df:38:ce:d0:99:54:5b:c4:60:c3:
5d:2f:3b:27:30:52:89:fd:4a:00:39:c1:f4:89:7b:
fa:2c:e2:87:bf:b2:4b:e9:19:f0:62:12:5b:3b:06:
35:13:8e:5e:36:dc:0f:2c:e9:66:76:8c:70:36:67:
a8:99:b8:df:d3:39:b9:19:1f:55:c4:7b:80:8a:e2:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:77:F2:19:55:7A:BC:3C:D1:F6:84:9E:45:DD:B8:A4:DD:06:96
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8b:a2:f4:f3:c9:b6:ef:21:87:4e:f4:ae:09:b3:18:9e:0f:
99:38:aa:bc:4d:e9:79:10:65:7a:63:0a:39:ab:35:ac:e2:de:
07:37:8a:d1:28:c2:12:53:91:01:7f:e7:4f:89:85:b8:f4:cf:
c2:c3:dd:bc:06:46:01:00:2b:3d:a5:b4:3d:67:03:fa:53:3e:
54:69:ab:cc:eb:05:c7:e5:42:58:f1:18:ab:aa:d3:76:d7:f4:
0d:f9:04:5a:77:4e:c2:bc:ba:a5:af:05:d1:a0:38:75:be:d7:
2c:90:5c:13:ce:e4:58:b6:66:4a:28:8f:58:13:e2:8e:40:e4:
6d:4e:59:6b:03:8f:65:ca:e8:68:5f:12:e3:fd:4b:b9:fd:04:
2f:a8:f9:39:e2:d7:53:da:51:aa:65:de:33:6a:9b:67:27:b6:
bf:fa:89:6b:83:fe:df:01:82:96:da:9b:33:5e:3d:89:7f:1c:
62:5a:7e:33:d1:ef:55:22:18:a1:55:f6:6f:b6:c0:cf:0f:19:
07:73:4d:17:2c:77:b8:bf:f1:73:85:72:87:e0:d9:56:73:af:
61:38:ac:93:cd:e5:bc:6c:25:3b:f2:1b:4e:aa:6e:32:38:99:
d5:cc:96:7d:61:23:6a:70:46:aa:d1:6c:d1:d6:1b:57:ac:9d:
e4:38:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:02:56 2025 by rpki-client