Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: 2ZOkzHr1StHHgAHwLNj9nC8YoLKM0pgCV188bm3Qhmo=
Subject key identifier: A2:97:65:D6:43:A9:A5:9D:86:2B:14:F4:29:45:8F:CC:CE:86:46:60
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 019656EF2A0FCAAA86565DBDC2D50E6F7A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: 018B
Signing time: Mon 21 Apr 2025 06:00:36 +0000
Manifest this update: Mon 21 Apr 2025 06:00:36 +0000
Manifest next update: Tue 22 Apr 2025 06:00:36 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: KvIzdTu1xpPCGTzcqkvSgqSRdlpmQ7XYd2DHlmGY8UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:2a:0f:ca:aa:86:56:5d:bd:c2:d5:0e:6f:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: Apr 21 06:00:36 2025 GMT
Not After : Apr 22 06:00:36 2025 GMT
Subject: CN=a29765d643a9a59d862b14f429458fccce864660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:0e:f6:be:e7:ba:cc:8e:48:85:62:19:a9:
8a:41:33:ae:25:5f:9a:e4:81:52:7c:53:50:4b:20:
f4:5c:50:25:53:e4:20:e7:12:2b:dc:da:70:75:1e:
c4:9c:a3:13:41:84:62:bb:4f:88:2d:46:cd:e5:0c:
6b:40:8d:81:2c:f8:f8:ed:73:da:9b:5c:be:ea:f5:
67:71:1d:04:fe:87:2c:52:68:6c:9a:c8:59:fc:c2:
96:87:0f:a2:12:88:17:a4:a5:58:2e:d6:b2:1e:c5:
fa:72:23:9a:72:ef:47:e7:7c:32:97:42:e5:9c:49:
57:af:42:f0:f2:d6:db:a1:55:43:7a:ab:a4:57:36:
38:7a:c6:a3:1c:20:d1:30:c9:bc:21:c1:57:61:f3:
86:85:06:26:ee:e9:da:7d:ea:c4:5a:e0:b0:69:81:
3c:f8:e7:4b:25:d9:db:86:13:ff:21:0a:e1:83:6b:
26:d9:c1:7b:99:9c:bc:b0:50:15:1c:88:71:b6:b2:
0b:7c:eb:5e:47:8e:00:4a:94:67:50:ee:34:01:b4:
f2:d1:bf:35:9c:55:f4:cb:f1:05:bd:d9:08:95:21:
df:e7:51:60:7e:d8:f0:d3:78:2a:ac:fa:6c:92:2b:
ae:f5:39:7f:fd:61:fe:bc:83:8e:26:12:5f:ea:f6:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:97:65:D6:43:A9:A5:9D:86:2B:14:F4:29:45:8F:CC:CE:86:46:60
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:28:6a:54:8f:05:4c:43:3c:28:9e:a0:25:46:50:0e:ef:1c:
18:9f:44:6f:f5:28:57:ef:66:43:b2:7f:aa:71:04:12:aa:c6:
27:1e:fa:c1:f9:2b:fa:73:3c:b8:72:34:78:e6:71:40:e9:f9:
cc:c8:37:9a:a3:88:f9:3a:76:70:be:e4:a9:4d:1a:9e:1a:8a:
aa:1a:ff:5c:11:80:72:26:5e:e4:3e:db:b5:be:b2:30:f5:21:
22:ad:33:a7:5f:bf:fe:97:ef:b0:33:7a:53:c2:be:64:a6:bf:
68:7e:30:2c:62:a4:0f:7b:24:5b:9b:9d:51:f7:93:43:21:7a:
2f:36:40:71:0f:c4:15:bf:d0:c6:66:4d:bd:a3:81:42:a3:32:
c8:e8:17:5a:65:a2:27:8f:a4:67:d6:54:5b:69:81:cc:d5:d2:
d5:9c:6b:53:d3:1a:58:27:74:67:60:9f:9e:62:3e:0f:29:e1:
56:11:93:79:90:3b:6d:81:f2:94:77:ff:36:e5:30:b0:6a:bc:
8b:35:44:f7:b7:c1:b4:90:2e:11:96:be:c7:5d:4b:d8:bb:b8:
c1:6b:12:33:f8:f3:5e:28:c3:07:01:76:5a:c8:ac:0c:87:40:
a7:23:e1:bd:d2:4e:88:e2:93:e1:70:96:c4:08:b3:90:29:80:
b3:c8:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:42 2025 by rpki-client