Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
File: szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json)
Hash identifier: PflkFfNNDneYMQM6isCFVogde3crfvkY3+4mSIBZ3Gw=
Subject key identifier: ED:6B:44:C6:58:51:92:21:2D:19:D4:4A:CF:62:7D:46:70:D8:A2:B2
Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
Certificate issuer: /CN=b334784aa4a199d7c36c73a265ed094b218381c3
Certificate serial: 019655A5E005EFBF86FAB45DC1EB001EB0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
Manifest number: 0CD1
Signing time: Mon 21 Apr 2025 00:00:56 +0000
Manifest this update: Mon 21 Apr 2025 00:00:56 +0000
Manifest next update: Tue 22 Apr 2025 00:00:56 +0000
Files and hashes: 1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: 0i69+DqurzseyWbHtpsjOGtMFlihErlPkq0YZC4G+SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:e0:05:ef:bf:86:fa:b4:5d:c1:eb:00:1e:b0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3
Validity
Not Before: Apr 21 00:00:56 2025 GMT
Not After : Apr 22 00:00:56 2025 GMT
Subject: CN=ed6b44c6585192212d19d44acf627d4670d8a2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:57:c2:59:ac:f0:29:bb:4f:23:8b:14:a7:
59:ce:67:f2:1c:79:29:ca:43:a0:0e:23:c5:e0:f1:
ac:b3:30:6a:87:51:a9:20:71:bb:08:32:29:57:c7:
7d:85:40:5d:80:37:ac:73:26:f0:70:92:00:35:45:
af:bd:63:b6:09:a7:d3:43:18:1d:3b:7f:59:ae:d4:
5a:d6:c5:3e:62:cb:e3:16:15:11:54:98:09:f3:f4:
d4:ae:4f:00:e4:45:42:f6:0b:8c:59:d0:7d:7d:99:
16:e9:51:34:f9:96:b2:a4:a0:8e:67:e3:4e:ec:85:
d1:c1:0d:72:b8:b4:d8:34:ae:fa:16:c4:7d:ef:53:
b4:33:60:83:0c:47:2e:a4:62:27:24:03:a1:9d:72:
35:92:84:81:09:5c:c0:79:e2:08:a2:36:79:34:68:
63:c2:fc:be:2b:25:60:67:98:24:87:1d:d9:5a:86:
f3:14:b4:b4:51:d4:a9:80:3e:3e:98:2c:83:22:ef:
b8:52:de:5e:ed:0f:49:60:5d:39:96:2e:15:9f:da:
b3:54:db:fe:30:75:06:9f:be:b3:51:16:66:ac:cd:
bd:5a:b6:4d:49:4e:a8:72:47:7e:d2:58:5a:75:8b:
cc:19:66:a5:0a:61:4b:04:7f:09:94:42:8e:fb:d9:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6B:44:C6:58:51:92:21:2D:19:D4:4A:CF:62:7D:46:70:D8:A2:B2
X509v3 Authority Key Identifier:
keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bc:1f:6f:7e:08:38:7e:55:09:86:0a:2b:f9:7f:60:ba:40:
01:53:fe:7f:af:3f:7e:38:d1:b8:85:c6:43:31:fe:c3:2f:ae:
25:ca:43:fb:3b:1e:54:0d:9f:ae:dc:17:6f:35:86:54:f5:77:
e2:bc:37:d4:e2:7d:64:0c:1e:07:ad:3e:a3:6b:5d:4f:65:88:
e3:79:dc:c4:56:48:4e:56:4b:96:a2:1d:69:3f:ea:af:14:0a:
aa:4c:8a:a2:f1:8e:53:3a:f9:dc:ed:49:14:72:fc:cf:02:eb:
5a:21:af:e7:06:a0:d3:a4:fc:04:43:49:17:ad:4c:94:35:e7:
77:ef:62:61:35:67:50:a2:5e:64:a2:2e:c5:95:5d:d1:1c:86:
f7:8c:35:dd:cd:93:61:79:1a:59:1d:6b:58:fe:39:0b:56:b9:
49:52:3c:69:8f:03:4d:8a:9f:41:70:bc:c9:04:b0:7b:72:62:
b7:58:28:db:e9:e4:50:78:34:d9:82:52:d4:86:97:06:55:63:
a3:6e:41:ef:81:93:75:1b:bd:8b:49:03:bf:34:3a:fb:90:0c:
5d:c8:a2:b8:ed:7a:9d:14:61:86:70:3d:8a:f3:46:da:1e:e9:
41:cd:87:c5:c2:dc:e3:39:63:fb:29:ea:f2:52:c1:2a:49:f9:
c2:11:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:03 2025 by rpki-client