Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: eBgkvyswfLpvWO7b8S5jCw2F4yvrcrwgQDO4XQrzhuQ=
Subject key identifier: AB:5E:4D:3C:E2:79:07:E2:64:59:8C:63:33:2E:F1:C0:FE:C6:C4:A9
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 0196575D03BA796C311428CF9D7B1AB87DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 08:00:35 +0000
Manifest this update: Mon 21 Apr 2025 08:00:35 +0000
Manifest next update: Tue 22 Apr 2025 08:00:35 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: GkNiek3HO0Zjug8z7dJnYiR2R2ZAuXUATzOcn5O3FHU=)
2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:03:ba:79:6c:31:14:28:cf:9d:7b:1a:b8:7d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Apr 21 08:00:35 2025 GMT
Not After : Apr 22 08:00:35 2025 GMT
Subject: CN=ab5e4d3ce27907e264598c63332ef1c0fec6c4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:65:a0:1a:b8:ca:9b:28:13:73:16:f3:6a:
0e:f5:fe:66:d3:12:f2:b3:c6:75:60:20:6f:c0:7f:
89:b1:72:55:f4:fa:bd:65:ae:88:29:4e:76:4f:6a:
46:fb:33:7f:36:da:bf:bc:a7:6f:10:0e:46:19:34:
f2:db:d2:91:1c:6d:e6:6a:01:30:6c:b7:e6:08:9e:
9b:96:29:ea:ea:00:dd:c1:ef:f9:ed:43:03:b3:c0:
f1:02:3b:8c:27:74:ae:b1:d8:6d:32:d4:1e:02:69:
63:70:8c:65:f2:fa:df:a7:33:b8:74:e3:08:32:8c:
9a:b1:b8:6c:78:04:1a:7e:2c:33:41:30:a1:f6:0d:
eb:5d:90:26:4a:85:08:ca:f4:96:a0:50:e1:d3:cc:
9f:bb:f4:16:a8:9e:62:10:e5:e7:a1:11:ce:75:70:
34:e2:ac:01:7b:bb:a9:e7:a7:0e:56:af:df:f2:7f:
87:e2:34:47:3e:8b:14:f2:97:94:e6:e6:73:46:6c:
f0:38:4b:18:d9:72:60:c7:08:13:ec:df:c0:0f:8d:
23:2c:15:3f:93:be:2f:d9:80:b7:ed:bf:c3:74:81:
ba:c6:72:cc:09:3c:5c:09:54:09:9a:07:3b:c1:65:
23:2c:01:41:85:c5:79:d5:cd:a9:d6:72:32:de:f6:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5E:4D:3C:E2:79:07:E2:64:59:8C:63:33:2E:F1:C0:FE:C6:C4:A9
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:0f:91:20:9e:e5:5d:60:13:30:e4:36:b1:a7:56:fd:f6:
35:60:53:03:6e:b6:99:94:8d:bb:6e:52:30:82:2e:78:24:e4:
f3:71:dd:6e:45:36:35:1a:42:97:38:ff:d3:61:c3:7f:3f:52:
00:84:3c:9a:a5:de:d2:fb:a2:c8:b2:b3:95:7e:f9:4c:c8:e1:
94:6e:91:94:b0:48:06:33:4a:b4:93:c2:d0:63:c8:62:cd:cb:
ca:75:ff:6e:ab:e0:7f:a3:be:57:76:b5:49:37:29:53:f6:fd:
3a:5d:0d:03:6c:b4:01:af:b1:cf:42:61:97:76:4f:ab:70:c0:
c0:36:b4:58:93:9e:58:40:df:bf:fd:f1:af:66:ea:96:96:50:
4e:f3:cb:a4:f0:56:9a:3f:14:13:af:d8:43:d2:60:4d:87:04:
4f:5d:d5:7e:98:66:44:ca:c0:41:c0:ff:61:9c:ee:68:a4:6b:
1b:71:cf:ea:5a:ff:01:ab:48:92:0a:11:89:b1:b9:c0:ed:77:
4f:87:1d:11:67:41:de:92:94:3d:a8:ad:4a:1b:72:e7:8e:5d:
70:08:3c:a8:92:a8:48:b7:42:62:73:56:c7:e5:26:47:de:73:
c4:5e:5a:13:bc:00:01:35:75:eb:52:ff:99:43:cc:1b:a1:08:
ff:cf:35:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:19:30 2025 by rpki-client