Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
File: sVKsjTaZEe8sE_k_mZumY8GOETM.mft (raw, json)
Hash identifier: fhJ7LaJbha7g37dbQ94u9wJC8aukx9vMSo9TRilK99A=
Subject key identifier: A1:13:06:E8:37:AB:9C:02:DE:CF:5D:39:4A:34:7A:98:FE:54:57:53
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial: 01964D7E080D6B42C3F9AB1488749E200DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
Manifest number: 1001
Signing time: Sat 19 Apr 2025 10:00:27 +0000
Manifest this update: Sat 19 Apr 2025 10:00:27 +0000
Manifest next update: Sun 20 Apr 2025 10:00:27 +0000
Files and hashes: 1: sVKsjTaZEe8sE_k_mZumY8GOETM.crl (hash: 6Xb+D6PBRf4h0/5+kP8vkyMTLumVzfgbqWQQGvFID0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:08:0d:6b:42:c3:f9:ab:14:88:74:9e:20:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Validity
Not Before: Apr 19 10:00:27 2025 GMT
Not After : Apr 20 10:00:27 2025 GMT
Subject: CN=a11306e837ab9c02decf5d394a347a98fe545753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:5b:6b:8a:46:80:23:38:18:c5:cc:6c:1f:
62:be:c4:63:59:95:39:81:f4:ed:bd:e3:2b:61:31:
69:09:db:53:9e:6e:13:30:c1:b0:02:ba:c6:7c:dc:
77:9c:ae:bb:38:d7:cc:53:26:74:cb:58:42:d8:de:
e5:89:bb:7c:88:78:90:9c:ba:22:65:ee:2a:7f:d6:
6d:ce:f1:7d:82:2a:66:e6:7c:80:33:12:16:d5:d3:
4d:14:fd:8e:ad:c9:de:80:96:26:74:67:ee:dc:78:
12:bd:a2:3f:fc:c5:20:5a:f9:d4:48:26:d3:7f:eb:
6a:df:47:31:c9:58:a7:65:6b:95:54:6f:d3:31:bd:
10:89:a4:1e:21:0b:ed:3f:75:17:b6:e8:2c:e9:73:
ad:e9:40:71:1b:c0:41:a4:e4:84:a9:dd:ac:4c:32:
24:10:65:70:28:88:ee:a2:39:f3:39:50:b6:9e:99:
4f:dc:8d:e8:ac:65:14:d3:71:a4:c1:06:e2:37:85:
45:8a:61:98:d1:f6:9d:ea:46:8e:2c:77:1d:d2:19:
8f:d3:b0:ef:0c:b2:40:e7:64:bc:ab:07:76:fd:ca:
c7:33:c6:1e:67:23:23:56:9b:8e:02:38:ff:e8:88:
87:6d:87:02:b6:cf:2c:cb:32:15:4c:f3:34:27:5f:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:13:06:E8:37:AB:9C:02:DE:CF:5D:39:4A:34:7A:98:FE:54:57:53
X509v3 Authority Key Identifier:
keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b5:d7:9a:d9:42:05:54:de:67:68:e1:c7:d1:e7:37:9c:da:
11:88:c9:e8:69:ef:b7:b9:94:ac:4b:36:3a:89:82:8f:f8:b2:
45:ac:01:64:5e:2f:58:14:c1:e5:15:8c:7d:7e:1f:7a:78:91:
ce:1f:c3:02:59:7d:e5:35:2d:58:39:fd:f8:87:b6:09:7c:f2:
8c:12:f7:5b:1f:48:02:0e:6d:b4:24:19:36:fa:88:6f:ab:9d:
fa:d4:f2:cc:15:a7:1e:31:c3:fd:e8:8a:d1:e2:13:10:36:62:
34:44:cd:76:ef:3a:35:a5:01:03:78:87:a5:d4:53:1f:7d:ae:
99:1c:ec:4d:6a:39:ea:cb:10:d9:ec:20:70:30:1c:dc:4d:4f:
e5:66:cf:3d:96:79:03:0c:bb:89:90:c1:e4:20:b3:68:44:5c:
69:55:ad:8b:1c:90:d8:e6:34:39:80:61:6e:46:d4:5c:30:b7:
1b:6a:85:2c:3b:e6:c5:13:50:e5:52:2c:93:85:a4:70:ca:05:
27:d9:ae:11:4c:9c:e9:f2:43:2e:a1:5c:8c:c0:db:26:13:40:
67:f1:a9:db:cb:b3:05:ee:34:af:7b:de:24:31:68:53:1f:68:
63:a7:49:a4:bc:4b:39:15:b4:99:d1:4e:ae:8b:3a:32:d2:14:
f0:db:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:17 2025 by rpki-client