Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: 9vYCaK70/pGPfOagz6+CEuDp1pddKoFpPYkcaQ40hzg=
Subject key identifier: F3:43:BE:12:D4:6C:96:B0:80:B7:AA:37:66:45:35:DD:FA:C8:B5:43
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 019642C36890543AF75A4FC753341F0C0DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 08:00:24 +0000
Manifest this update: Thu 17 Apr 2025 08:00:24 +0000
Manifest next update: Fri 18 Apr 2025 08:00:24 +0000
Files and hashes: 1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: 4nbTPqhSQGPQqkWb00UJJ3LwYnu2ItMEIHSuSRIRPD4=)
2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:c3:68:90:54:3a:f7:5a:4f:c7:53:34:1f:0c:0d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Apr 17 08:00:24 2025 GMT
Not After : Apr 18 08:00:24 2025 GMT
Subject: CN=f343be12d46c96b080b7aa37664535ddfac8b543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:fb:f8:88:af:99:56:72:cc:d3:5c:ac:11:
77:18:2e:4f:7c:76:38:a0:42:4a:c5:b2:ec:d6:8b:
db:68:7a:6a:ee:16:1f:89:d6:cb:91:9b:e8:c0:ae:
99:3d:10:7c:b7:e8:a4:4d:cb:95:a2:e3:98:59:c6:
39:e2:99:8f:6a:88:99:08:96:15:9f:4e:93:f3:af:
b4:28:84:a4:fe:12:da:2c:a7:69:78:8c:40:e8:16:
0d:63:db:a4:57:2f:2e:f4:33:03:52:85:3d:a0:05:
63:35:8f:81:7a:67:9d:68:09:24:de:0a:97:3c:be:
2d:8d:de:90:e8:91:f2:a9:d5:79:32:4f:b5:7c:35:
2e:4d:65:b1:c9:9c:ab:24:88:d1:bf:3e:7f:02:56:
8d:64:78:dd:ff:eb:be:cc:fa:51:ec:e0:10:dd:8a:
ec:2d:3c:d7:03:bc:56:fe:94:b9:4c:93:c0:c4:ab:
61:c4:58:83:55:91:8e:2d:33:1f:83:1e:86:a6:bb:
fe:58:62:a2:63:54:3e:83:4e:8b:4c:33:c7:72:44:
f9:eb:e0:0a:3b:7c:b8:82:51:a6:fd:1b:a4:56:de:
0d:30:33:f0:19:74:de:2f:4a:de:9a:c8:8a:57:50:
81:95:c0:c1:92:b7:33:5a:26:2e:f9:72:55:a6:e8:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:43:BE:12:D4:6C:96:B0:80:B7:AA:37:66:45:35:DD:FA:C8:B5:43
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5a:18:c9:6b:42:19:ea:03:be:14:75:2c:91:41:a3:a7:a7:
6c:29:64:63:0c:81:50:cc:cc:5e:24:62:ce:ab:43:e7:d3:76:
dd:b6:26:53:91:8a:6d:97:41:01:8e:09:09:89:76:e4:fd:ca:
d1:40:7c:90:3e:3a:7b:d1:35:9e:67:d4:13:c9:a8:4f:6b:f9:
02:d6:8a:07:d5:31:b4:c7:1f:a1:df:89:f2:78:58:d9:c7:e4:
b6:26:d8:83:3c:57:9b:63:29:16:d8:7a:2e:76:e0:2c:89:25:
30:78:f4:9e:ff:63:70:13:c0:ba:d8:40:30:05:88:44:a4:77:
6c:91:c8:62:84:57:c6:b1:f2:cf:69:3c:e2:9c:b4:f0:bd:72:
ab:c1:16:8d:aa:78:d4:6f:4f:67:10:2d:fb:ca:1c:2b:82:2d:
63:26:81:20:a7:97:2d:9d:b4:9c:61:78:a9:97:86:0f:8f:05:
55:6a:86:bb:a1:7e:23:48:ac:66:b9:6b:71:f8:b3:de:22:ac:
66:ba:d9:8a:79:18:6c:b9:fb:da:24:d5:75:f8:18:38:91:7f:
52:2d:1c:94:f7:fc:b2:8a:18:77:ef:3d:7e:67:79:c3:1a:5b:
fa:14:c6:6e:fc:90:ca:14:17:07:70:f5:b6:79:46:6d:90:19:
ad:c3:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:45:47 2025 by rpki-client