Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: 7l1jtVz90Fmi8hE3UcJwMetsjFBN66bcenoNBri5uJM=
Subject key identifier: 95:CC:D3:94:AE:1F:2B:87:7C:47:DE:2B:32:7E:80:5D:F7:B4:16:65
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019659143EEB720CAB4E6456946C51939922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 131D
Signing time: Mon 21 Apr 2025 16:00:20 +0000
Manifest this update: Mon 21 Apr 2025 16:00:20 +0000
Manifest next update: Tue 22 Apr 2025 16:00:20 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: y9zlcQ4mHbPiXS/jVJmuSeEvZOYSQvriQA0yxBumBpY=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:3e:eb:72:0c:ab:4e:64:56:94:6c:51:93:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Apr 21 16:00:20 2025 GMT
Not After : Apr 22 16:00:20 2025 GMT
Subject: CN=95ccd394ae1f2b877c47de2b327e805df7b41665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:24:7b:97:b2:01:59:23:94:97:b0:c0:eb:
87:3f:53:21:77:63:99:17:12:56:8b:8f:0b:01:7f:
94:d2:ec:07:a9:a5:a6:9a:cb:91:59:56:9a:f3:67:
9d:b1:78:0c:fd:f3:00:ca:74:b8:2e:76:5c:b7:7b:
b1:d2:81:0e:48:f8:c9:5d:c2:b1:c9:33:fe:5f:3e:
96:73:9f:96:7b:08:7a:67:8d:10:af:26:2b:28:1e:
06:8a:56:5d:dc:a5:36:6e:b9:19:37:08:39:3b:fd:
3c:4c:12:c9:a2:bb:9e:e1:d1:29:2a:f1:da:fc:80:
b8:4d:16:d7:67:93:40:9e:fc:8f:62:4a:fb:ab:fe:
81:21:96:eb:06:69:ac:21:9b:38:97:69:e0:4c:5d:
c3:a8:13:0e:1a:e7:1d:97:83:86:2c:b9:fa:65:9e:
3e:fb:be:bc:a9:d7:bb:a3:14:2d:c9:f7:38:2f:48:
1b:47:6d:15:aa:40:43:a7:5a:46:7f:6a:8c:f1:63:
97:dc:ca:be:3d:31:b7:90:10:5d:f0:ed:6e:f8:d5:
ab:c5:ff:d9:aa:28:15:79:16:84:16:3f:d7:cb:31:
1d:9a:7c:65:fa:6a:22:55:22:1f:66:f8:d5:b2:42:
7d:a1:39:4c:68:d2:88:64:3d:bf:79:c6:0e:90:eb:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:D3:94:AE:1F:2B:87:7C:47:DE:2B:32:7E:80:5D:F7:B4:16:65
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:94:9c:24:60:4a:1c:57:ea:47:a0:79:be:a1:8e:63:1e:c7:
06:8e:09:1b:0f:c5:78:9d:84:24:ab:04:e3:20:c0:d5:f3:0b:
83:2e:bd:b8:2b:9b:48:c4:17:f4:5e:0a:af:cd:3c:49:2d:d7:
05:59:8b:09:dd:43:4e:ec:e2:90:81:fa:a3:57:bf:f1:b9:aa:
fe:14:73:c1:a9:c0:f8:1b:60:03:99:87:25:c6:24:ba:6a:c9:
53:b5:54:a2:40:f0:d1:a1:f6:43:fa:3b:ec:76:cb:b3:89:51:
15:65:e3:50:bb:34:db:ae:29:15:01:5f:ef:c3:95:67:55:04:
d6:23:50:0c:13:51:e4:5b:4c:48:b3:2c:b8:4b:d7:cf:d5:4d:
6a:60:41:7a:1f:b6:a1:4c:fd:4e:b1:69:b5:09:be:5f:f5:18:
cf:6e:35:1f:40:af:b5:d3:07:92:56:d9:b2:69:28:31:7b:9c:
9b:2e:93:63:2d:fa:c4:29:fa:7e:ad:0c:93:61:34:79:ac:e4:
c5:b2:2f:bb:a9:51:42:e4:0a:ad:a6:6d:ad:0b:6d:40:9e:21:
22:be:72:64:ca:ab:b9:db:29:3b:a1:19:0a:1a:a6:9b:07:44:
35:90:30:3c:61:61:20:df:f0:02:fd:ba:d7:77:a6:b1:37:0b:
47:44:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:26 2025 by rpki-client