Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: kR7xsON7CEoxOTo2wQSM1yMyrKv7sxi5UINpafR4QpI=
Subject key identifier: D1:D7:4B:DA:20:FD:FC:CD:E9:55:CF:8A:5D:08:C6:6A:E5:14:B0:DE
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 01964AB414CF3112643BBB891608437E25F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 07E7
Signing time: Fri 18 Apr 2025 21:00:37 +0000
Manifest this update: Fri 18 Apr 2025 21:00:37 +0000
Manifest next update: Sat 19 Apr 2025 21:00:37 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: NckKLry8YHpkRX55NZFgMkrbdbN0S4ugp0kQvFcDpJY=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:14:cf:31:12:64:3b:bb:89:16:08:43:7e:25:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Apr 18 21:00:37 2025 GMT
Not After : Apr 19 21:00:37 2025 GMT
Subject: CN=d1d74bda20fdfccde955cf8a5d08c66ae514b0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:40:09:e2:1f:5e:ad:1e:6f:96:71:d2:77:
63:f4:97:ee:57:65:88:32:70:7b:c5:c8:3c:ff:d5:
16:85:e3:b1:ec:d7:e7:1e:00:80:93:97:5a:ca:a2:
25:e6:7b:8a:8f:49:36:22:16:a2:b5:09:82:e4:e5:
bf:22:ea:25:7b:2e:07:80:93:fe:c7:8b:c9:56:53:
02:64:35:0b:38:cc:d5:11:e6:5c:a0:f7:f5:6c:16:
f6:e6:c0:77:58:c0:44:9c:b6:47:87:d6:44:61:50:
da:82:e9:1d:01:06:5b:c7:ec:08:5c:9b:4c:af:68:
25:b2:f1:d0:93:7c:a8:b2:22:d4:9c:de:37:c2:71:
fa:b1:20:e3:97:97:95:e6:a4:de:40:c1:f8:1d:7d:
f7:b8:62:3e:a0:44:c3:42:12:4b:fb:28:4d:63:c6:
32:e2:39:7e:7f:92:74:68:53:86:79:70:35:14:dc:
29:8b:00:e8:ea:51:db:7a:8e:39:f3:4a:8d:f2:c8:
f2:b5:8a:e8:b3:e0:a1:62:13:a0:c5:95:07:7d:1b:
06:1e:fe:50:7f:a1:06:e8:2b:01:13:b6:18:34:c7:
d4:81:2a:c6:4c:64:91:5a:3b:02:3c:df:c2:eb:a9:
a5:5f:da:4c:5d:a7:af:69:8f:f0:c2:8c:6b:73:f4:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D7:4B:DA:20:FD:FC:CD:E9:55:CF:8A:5D:08:C6:6A:E5:14:B0:DE
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:86:c9:2b:bc:2a:ba:5c:7f:4a:fd:84:88:80:d9:bb:6a:15:
b4:df:7f:f3:87:a2:6b:5b:d4:41:3d:02:90:d4:0b:fa:ce:d6:
7a:9d:30:42:44:04:5c:b5:c5:5f:4d:43:0b:b6:01:85:3c:f9:
a8:74:a0:14:de:f1:6f:be:5f:e3:9a:ec:55:9c:57:dd:0a:b2:
81:a5:47:17:6f:72:29:59:7d:9a:bd:0d:bd:46:99:d6:71:e6:
5f:68:24:6f:4a:24:62:ec:92:16:92:41:72:c9:55:d3:9d:82:
6a:d0:1c:3c:44:86:79:7a:ff:cc:33:d9:9f:75:ad:48:3d:a0:
8b:04:d2:ec:2a:fe:8f:2d:9a:94:ef:52:ec:90:90:c3:61:c8:
e4:3e:28:82:13:f1:a1:1b:34:af:c1:30:7c:94:ca:44:39:3c:
39:a5:7b:19:99:2a:c0:95:38:ad:72:0d:61:c7:60:cb:71:27:
d1:b4:3b:8b:c3:f1:37:53:71:a6:ea:b5:11:60:79:ec:1e:12:
2f:5b:bd:e6:62:7e:a4:f9:4b:2b:09:02:a4:7e:a5:78:4c:7b:
9d:4b:a9:20:3c:f2:5d:eb:19:67:20:50:cc:23:96:26:a3:df:
25:c5:02:c5:fe:b7:95:57:61:b9:8a:8e:e4:af:a0:e2:1b:12:
43:54:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:26 2025 by rpki-client