Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
File: SMdByd9bLkiZO5GDt5_zRrQxk4E.mft (raw, json)
Hash identifier: yq9f7HJX3XuH85cwj2rHgRllWPjwfHfpcc3LvbNVZDY=
Subject key identifier: 39:66:F7:0A:6F:EE:99:8F:16:1B:1D:4C:0A:7C:43:56:F0:80:D4:9D
Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
Certificate issuer: /CN=48c741c9df5b2e48993b9183b79ff346b4319381
Certificate serial: 019655A53579941C28C0C6CDE244765F1C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 00:00:12 +0000
Manifest this update: Mon 21 Apr 2025 00:00:12 +0000
Manifest next update: Tue 22 Apr 2025 00:00:12 +0000
Files and hashes: 1: SMdByd9bLkiZO5GDt5_zRrQxk4E.crl (hash: iKFCMl9VQkp+69vl0eiOi53Hf44ZCmbz8fQ5RVvgyXc=)
2: joaFEW-NdPhZyszfRS8lbScgqm0.roa (hash: 0utj+sPXgGZYWSm41u/aEZLOVRC1lSd5e6cU8LiAr60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:35:79:94:1c:28:c0:c6:cd:e2:44:76:5f:1c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381
Validity
Not Before: Apr 21 00:00:12 2025 GMT
Not After : Apr 22 00:00:12 2025 GMT
Subject: CN=3966f70a6fee998f161b1d4c0a7c4356f080d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:b4:f3:7e:3a:17:dc:25:f8:e2:8f:2d:4e:
b1:a0:6a:2e:58:5a:e3:d9:92:f7:06:30:21:4a:92:
6a:2f:3b:e9:b9:3e:1d:0c:7a:9e:94:35:45:59:4e:
d5:cd:01:bb:46:9b:16:91:49:1d:f2:f4:1b:db:37:
c7:b2:eb:4d:27:30:31:75:6f:3f:ca:27:1f:68:a4:
ef:94:27:15:c8:87:47:7a:9b:ad:b2:0b:06:ea:fd:
69:5f:a9:7a:3a:d6:81:e9:de:fd:10:dc:de:65:e8:
32:33:13:5d:00:cf:a1:f8:89:ef:31:cf:92:fd:25:
9b:1a:63:bf:d8:3c:a0:07:ec:87:8f:c1:6f:14:e5:
18:4a:cd:cc:8a:1c:82:94:31:a9:f1:77:e1:26:a0:
50:92:cf:86:77:df:bb:5d:3a:c3:9f:80:95:62:b0:
b5:82:86:2c:c5:3d:78:4e:1b:2d:9a:66:e5:f8:39:
9b:b0:ab:b1:98:f5:52:b4:b5:c5:f2:3e:e2:d8:e7:
65:c3:45:5f:dd:9b:69:fd:9c:81:b4:15:cc:52:19:
d8:ff:c9:42:1f:7c:45:8a:c9:23:ff:22:33:44:3f:
d2:32:f3:88:b9:e5:91:9d:3d:ec:7e:5e:83:1e:8e:
b6:87:48:84:4a:cf:51:bf:56:d3:7a:4d:38:f6:d9:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:66:F7:0A:6F:EE:99:8F:16:1B:1D:4C:0A:7C:43:56:F0:80:D4:9D
X509v3 Authority Key Identifier:
keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2f:04:32:91:48:3e:52:46:5e:01:6a:3e:99:38:ce:ee:32:
d2:f0:18:9d:54:3e:9c:4f:c5:79:62:ee:ad:47:58:6a:6c:5a:
f0:72:8e:2f:8a:f8:81:b3:f8:19:a8:1c:59:6f:b6:1a:59:b0:
45:12:35:48:75:a3:d6:34:0b:92:0f:32:64:4f:a3:8f:c0:77:
58:e7:d0:51:38:f9:91:59:34:5a:55:a6:59:61:59:4c:5b:71:
d3:a4:88:9b:b6:7f:45:58:45:09:cc:41:43:b6:1f:85:d2:9b:
87:22:2a:3d:1c:4b:e5:53:e5:db:ed:4b:f2:ca:9a:e9:7c:21:
63:07:6d:0d:9c:62:67:d4:17:b4:87:b1:e2:77:79:b3:32:fc:
06:00:58:95:da:4d:9a:d1:72:cb:c2:17:4d:46:ee:20:72:e6:
8e:95:1e:b0:fb:8e:84:e2:b5:c3:40:3d:63:6c:26:8b:8a:1a:
52:cb:f0:5b:47:cc:aa:97:1f:92:89:e3:69:05:9f:e2:3b:aa:
4b:94:60:71:a3:b8:05:03:36:b8:63:b7:23:80:00:39:50:9e:
6c:92:bf:69:d0:1a:c9:6f:78:a7:16:5e:92:b6:39:c9:37:b1:
4e:dd:3f:d6:4c:4f:74:28:67:59:2e:85:14:39:d7:ce:69:53:
da:c5:d4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:07 2025 by rpki-client