Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: h/LZczSkc5GiiVz0vamuvrsjVYDXSEBUzVI4ZRoxi5g=
Subject key identifier: 2D:0A:1E:E8:44:A0:4C:BF:32:D6:6A:AE:46:0A:A1:BD:49:CE:D7:82
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 019659828C47AEEBB2CB5CCC3E54CCC3D461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: DD
Signing time: Mon 21 Apr 2025 18:00:49 +0000
Manifest this update: Mon 21 Apr 2025 18:00:49 +0000
Manifest next update: Tue 22 Apr 2025 18:00:49 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: xRLNEwQfos+mbZnCx8I5eUg+kSz+OzfoRgygM+iVGIs=)
2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:8c:47:ae:eb:b2:cb:5c:cc:3e:54:cc:c3:d4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Apr 21 18:00:49 2025 GMT
Not After : Apr 22 18:00:49 2025 GMT
Subject: CN=2d0a1ee844a04cbf32d66aae460aa1bd49ced782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:30:de:ac:72:9c:6e:b7:5d:09:3f:3a:87:
f0:8f:a0:4a:32:9c:d8:b0:3c:67:cd:c9:3b:9c:a3:
f9:84:fc:87:ad:c5:7c:49:81:d7:71:b8:a5:c8:64:
5b:dc:9a:14:a1:14:4a:33:3a:8e:83:f5:e3:78:72:
73:0d:d1:6e:e1:26:4c:3a:98:b0:b2:8b:d2:55:f3:
cf:fe:b1:21:32:1c:c8:d0:bf:ab:cf:6e:2d:87:6d:
a2:45:c3:23:13:f8:b1:42:01:7f:d8:7c:d3:9f:55:
30:13:16:40:29:46:02:cd:6b:35:d5:0b:35:af:1b:
92:21:2d:d9:e7:1b:56:7a:fd:4b:db:92:cf:e9:50:
63:55:d4:07:80:47:ff:8e:98:06:08:86:42:b7:e5:
f0:c2:f1:c4:1e:5a:22:ca:e1:e4:aa:78:30:2e:56:
06:80:bb:10:8b:44:f1:6b:7e:1e:61:7d:fa:4f:90:
fc:a1:ab:b0:80:a3:58:e5:05:e7:1b:6e:08:20:a4:
2e:6b:24:f6:54:da:a5:1d:ac:b8:87:f7:e8:39:b9:
d0:56:fc:0d:66:40:0e:4a:39:07:94:0b:e5:21:7f:
a9:44:83:44:08:e5:f8:5a:ee:7a:d3:fa:79:a7:69:
65:eb:9c:2e:67:c6:cd:10:69:0c:7a:1d:c0:a1:7f:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0A:1E:E8:44:A0:4C:BF:32:D6:6A:AE:46:0A:A1:BD:49:CE:D7:82
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:66:82:74:3e:1c:9f:a5:b1:ef:75:a2:59:5d:c6:33:28:7b:
47:8e:51:30:ba:7a:91:8d:67:e9:37:61:20:43:76:c2:73:7b:
e6:1e:0b:51:ff:32:2d:3f:c7:32:c6:72:00:9c:fa:31:65:cd:
c4:dc:8f:bb:40:83:50:bc:ca:90:c1:58:21:7d:e0:e7:20:b3:
d2:97:87:d4:f7:db:2d:94:bc:7a:41:00:b1:d7:40:97:46:33:
a3:38:bd:4c:4f:b2:2c:f9:0b:0a:24:1d:02:5d:ac:f2:0c:f4:
c3:6f:08:06:a9:99:a2:a1:6b:b0:97:f2:61:40:f7:2a:17:a7:
7c:3a:98:c5:38:58:6b:fe:6e:e3:04:d1:7f:ce:91:8a:db:0f:
70:54:bd:a5:88:ad:8c:0b:6d:35:c2:10:4a:6a:4f:c0:8a:b7:
e0:9d:1a:96:d9:22:d2:a8:66:f3:80:a7:1a:41:ab:90:72:ce:
5c:c5:7e:96:7a:77:c6:17:c6:49:11:3c:29:83:40:36:61:8f:
2a:b4:85:77:b2:eb:92:41:e3:48:83:20:88:13:40:06:0a:de:
d7:b5:30:88:62:43:91:75:ae:2e:03:a2:0b:a3:b4:52:6a:32:
69:d8:c4:de:06:8d:96:d6:f0:52:1c:05:37:ad:aa:a2:a5:23:
3d:e5:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:28 2025 by rpki-client