Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: XW5ceikVtkcXRtkVlirN13GcS4gAdNjlPCCpDxS6U8Y=
Subject key identifier: 7F:72:15:86:E5:B7:86:93:99:D8:78:D3:6D:FB:9A:9E:50:C4:93:D6
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 019659155F6ACE2DAD2069B4AD86642F374D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0891
Signing time: Mon 21 Apr 2025 16:01:34 +0000
Manifest this update: Mon 21 Apr 2025 16:01:34 +0000
Manifest next update: Tue 22 Apr 2025 16:01:34 +0000
Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: VGYN4LsLDsZeX9xt5ywiGigL4R1jmhTdWGw8F9tFBFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:5f:6a:ce:2d:ad:20:69:b4:ad:86:64:2f:37:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Apr 21 16:01:34 2025 GMT
Not After : Apr 22 16:01:34 2025 GMT
Subject: CN=7f721586e5b7869399d878d36dfb9a9e50c493d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:2f:ea:5b:a4:40:98:a7:5e:af:7b:8a:7f:
34:d4:03:dc:a5:ae:9c:0f:6d:f1:f9:4a:ec:a6:01:
84:72:f6:55:eb:35:cc:d4:89:6e:e8:3a:4b:10:81:
fc:09:07:32:03:f6:6c:70:3a:76:9f:dd:ca:09:75:
0f:a0:94:b4:46:cc:8a:af:e4:4c:58:64:ed:65:6e:
ec:0f:b2:98:1a:2e:04:b0:3f:da:0e:0d:2e:52:9a:
51:0d:7e:5e:a8:6a:5c:f5:70:bf:0a:d7:a7:e8:b5:
8a:8d:6c:c0:47:e4:f4:1d:99:00:8c:e2:61:3e:fa:
62:2c:ac:d6:19:50:7f:54:98:e3:e0:2b:7f:66:09:
29:f4:c2:ca:37:c6:89:17:6f:7c:0f:4a:96:a0:e0:
f4:7f:bc:0e:cd:c8:76:90:45:f2:46:74:96:a5:03:
56:07:91:19:5f:8f:18:c2:1f:10:27:c4:ac:10:79:
15:3b:0b:a7:0b:ae:54:b4:92:26:27:ab:79:d3:10:
40:c0:c4:93:2a:9b:6c:d3:58:0f:19:6b:21:d5:ba:
d6:a9:9b:64:0c:e2:61:c2:c9:63:ea:2d:4d:17:b2:
2b:93:af:00:f7:66:bb:b9:6d:a9:2a:33:3d:38:6e:
b5:67:fc:25:33:59:46:57:14:a2:49:7d:f5:66:4d:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:15:86:E5:B7:86:93:99:D8:78:D3:6D:FB:9A:9E:50:C4:93:D6
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:be:0e:c8:6a:4d:4c:d1:be:a7:15:1d:d0:03:21:50:d1:ed:
15:5d:79:ab:0b:ad:fa:81:3f:f1:ab:a5:5d:99:5f:23:dc:e6:
d5:79:e9:24:ce:87:35:c0:3e:ba:c6:13:9c:a6:e3:a8:3e:b4:
d2:fe:9d:1b:95:c5:28:d5:18:7d:31:86:d2:23:d5:7f:dd:bc:
bc:76:be:71:48:af:0c:31:81:73:5a:5c:29:8c:a8:53:6d:ae:
b2:fb:51:41:10:33:c1:f1:f4:16:47:85:c3:e8:4b:41:5b:0b:
ae:f1:dc:d1:98:87:f7:fa:0d:1d:45:ff:93:5e:f7:f6:0b:3f:
4b:92:08:93:41:f7:78:93:f3:bf:94:03:01:54:58:c0:4d:55:
0f:86:64:b0:99:ef:ee:9f:58:c9:c1:23:0b:3f:38:09:1e:28:
df:1c:9f:a5:b1:91:f3:15:92:7a:38:28:0d:85:54:67:c7:a5:
7b:48:14:1b:ee:7c:3c:1b:74:11:c3:6e:69:09:b4:c3:71:aa:
e1:0d:15:54:c4:4c:ef:5b:bc:78:26:b4:1f:2b:63:7f:4b:23:
be:18:8c:d8:5a:e5:b8:7c:91:f7:3c:16:66:bc:4b:25:a1:60:
6b:1e:24:4e:7e:97:80:89:da:3b:ec:d6:c1:9a:52:19:62:c3:
f8:36:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:18:54 2025 by rpki-client