Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: 3qZ/jaaPPKQiDbJUVZlgFLJYhIxXmn3pmetl7Kdst7A=
Subject key identifier: CA:DD:42:C3:4D:D1:9D:37:BB:B8:51:E8:97:52:A9:BB:D1:DB:A7:E4
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 01964C6B511D67C4255DCC422F2E9DADEA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 040F
Signing time: Sat 19 Apr 2025 05:00:23 +0000
Manifest this update: Sat 19 Apr 2025 05:00:23 +0000
Manifest next update: Sun 20 Apr 2025 05:00:23 +0000
Files and hashes: 1: N2y6-GMHKdnhwHw2qI2S6D9db-A.roa (hash: 3FLdtIoRp74dNi1D23oUnkHCD3n8shdafvj6sD2pzxY=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: /oi+wi24H7Srx9TgNvl0iRrHEAShCB8bTt1ZGN/ypT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:51:1d:67:c4:25:5d:cc:42:2f:2e:9d:ad:ea:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Apr 19 05:00:23 2025 GMT
Not After : Apr 20 05:00:23 2025 GMT
Subject: CN=cadd42c34dd19d37bbb851e89752a9bbd1dba7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:e1:d3:b8:6c:fb:45:9d:90:e7:fb:c8:13:
2d:23:56:f5:ee:ea:cd:be:14:ea:8e:a5:5e:1a:69:
0d:06:6d:e7:9c:48:5e:f6:f2:df:a6:4a:3e:3d:4f:
ed:2c:98:54:dd:9e:37:82:6a:84:1c:e7:dd:bc:70:
be:ac:f6:e4:de:25:d4:c0:49:ff:0f:86:4c:c2:70:
5c:ed:cc:ed:a1:b9:56:d9:a7:1a:5e:fa:7f:6a:e2:
ab:b5:16:6a:68:fd:57:5d:26:9e:ff:1b:0c:da:19:
83:11:d5:19:cd:02:f3:d0:7d:39:d0:d5:4c:14:d5:
77:b0:79:0d:a0:57:d2:d1:c1:3c:f2:16:04:7f:31:
c7:e4:2c:12:7d:90:f6:b4:bb:af:17:56:cf:2e:a1:
7a:50:65:2a:24:04:98:35:ce:44:85:e1:83:1e:4b:
30:a1:f8:7d:e5:ab:51:82:b8:92:e7:ef:97:68:d3:
b6:7c:8f:59:ae:f0:55:57:39:9a:3f:b9:11:e2:8b:
ef:08:d5:37:ec:80:5d:31:79:84:7a:be:ee:ba:fe:
ff:a4:b4:b4:c0:1d:f4:56:5c:78:09:87:7b:a5:a5:
5c:0e:1d:b1:ad:b3:5d:36:24:d9:20:94:dc:64:78:
a3:ba:d3:51:88:e0:c2:8b:27:c6:98:83:db:fa:80:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DD:42:C3:4D:D1:9D:37:BB:B8:51:E8:97:52:A9:BB:D1:DB:A7:E4
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:14:1e:dd:0d:0e:96:73:da:1c:b7:80:b9:91:b2:81:4a:47:
89:f0:ef:52:cf:e2:e0:cb:db:f8:0d:00:f7:25:45:4f:6d:79:
8d:89:11:50:bf:37:72:55:f8:0f:25:de:ce:b0:68:eb:83:45:
83:d7:31:cb:94:2e:10:c7:c1:95:40:fc:b2:b1:43:1a:e2:05:
cb:f8:98:e6:ad:e0:c9:0a:2c:d9:b3:b7:45:dc:b5:9e:63:af:
10:a2:73:95:85:ce:5e:81:ed:52:96:be:63:65:9e:c2:a8:71:
0b:af:b3:79:25:a4:ff:ed:92:e8:b1:5d:38:19:b7:f0:7c:75:
86:c5:61:ee:72:68:7b:2e:ef:a4:42:6b:c8:55:37:cb:29:8c:
12:aa:d5:de:77:18:6e:d6:11:a5:d6:60:8a:d8:b6:3c:be:3c:
25:a7:d0:8e:f0:5b:32:59:55:4a:41:14:dd:20:2d:52:22:03:
87:42:c8:9c:e1:94:ea:34:36:c3:5c:df:42:4e:bd:2f:6a:40:
b3:15:6e:f1:72:fe:87:9f:80:36:7f:a3:e1:d1:5c:45:1d:cb:
2f:62:74:fd:97:98:48:b6:9b:4c:57:08:77:91:49:58:62:e2:
39:d8:10:b3:b3:54:dc:6a:84:3f:fe:92:73:98:92:00:75:38:
9e:85:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:54:33 2025 by rpki-client