Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: 7QyRK0P4lqlPJ3zV+8bmQMKVD+u8Dxr4KnVFYlcbl00=
Subject key identifier: 25:4B:02:90:68:F0:42:BA:9D:68:AA:4E:E7:5D:B0:06:7E:18:DD:E7
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 01963C53F961A4F16878C7CB6D30A42E5984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 0E57
Signing time: Wed 16 Apr 2025 02:00:58 +0000
Manifest this update: Wed 16 Apr 2025 02:00:58 +0000
Manifest next update: Thu 17 Apr 2025 02:00:58 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: MdiFYuUASkcVfywjQe17eir7jbygUpRyTEbtN7LgQT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:f9:61:a4:f1:68:78:c7:cb:6d:30:a4:2e:59:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Apr 16 02:00:58 2025 GMT
Not After : Apr 17 02:00:58 2025 GMT
Subject: CN=254b029068f042ba9d68aa4ee75db0067e18dde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:ea:e1:06:3c:eb:6c:60:5e:a4:20:db:31:
d5:2b:26:e7:ad:5c:c1:5a:f9:46:fa:66:a9:14:2c:
46:c9:79:56:a5:ec:c5:d0:69:0a:93:df:04:8a:ea:
2c:bd:fe:ee:ed:d8:4b:43:68:24:77:77:b1:af:b7:
d2:ed:91:c7:e5:d7:a2:93:93:d5:d0:3f:ce:22:7c:
f7:5a:fd:75:f6:89:32:c1:2c:66:97:a5:cb:3e:4a:
a4:a4:e8:01:59:fb:48:ed:4b:13:9d:76:17:c8:92:
01:d5:ae:14:7f:77:52:59:3b:45:3f:6e:3e:ba:15:
3a:cc:58:47:dc:38:74:d6:b1:fc:35:fd:0e:82:77:
30:0b:51:97:b6:a9:32:09:04:71:e9:26:3c:d7:c0:
a8:1b:57:e1:d7:08:b0:f7:d8:e9:8e:61:2e:f8:2e:
5a:26:65:45:69:1d:f4:33:56:cd:47:74:68:b0:69:
29:e9:8d:97:45:79:ae:d6:77:75:93:ae:54:ce:c7:
49:f0:2e:97:14:aa:9e:cf:75:7b:4a:a1:17:3b:7d:
3b:e6:2a:e9:55:df:29:36:b4:84:89:e1:11:bd:fb:
74:66:dc:d7:95:75:69:15:d1:8f:1b:76:62:1c:e2:
4f:09:0c:d8:8a:ee:a5:02:c5:7a:80:65:9c:c3:04:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:02:90:68:F0:42:BA:9D:68:AA:4E:E7:5D:B0:06:7E:18:DD:E7
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:df:d7:7e:01:49:e1:68:99:68:a6:fe:96:1f:72:84:a8:01:
32:d6:ec:a5:1e:55:d1:3c:98:62:c1:81:b1:f8:a7:d3:7b:a6:
f0:8f:aa:10:fe:c2:83:36:6f:6f:7d:30:9f:c1:7c:32:8b:e8:
f1:fd:59:91:1b:55:11:3c:5e:96:51:b8:9b:8f:6e:be:78:f1:
c1:b9:20:4c:97:00:07:60:12:84:7d:3c:a4:51:0c:4e:d9:85:
11:dc:cb:4e:08:81:ff:bd:39:d6:e2:96:d4:7d:93:7d:e2:55:
f1:e7:e2:cf:6a:fa:06:79:24:be:79:24:31:05:12:be:bb:4d:
05:b2:ce:cd:99:4a:cd:f9:1c:6a:4f:a9:12:ed:f2:99:d6:c4:
6a:9b:07:ed:67:be:e4:0e:2a:4b:1f:30:13:a2:d4:e2:9b:07:
5a:37:79:46:51:77:35:ae:13:c9:08:62:16:c6:b7:68:28:d6:
38:28:f2:2e:96:f8:08:87:ba:38:67:c9:1e:57:af:ce:42:e3:
24:c1:01:26:d5:f4:41:39:7a:00:0e:35:ce:65:52:d7:15:8c:
92:e4:45:8d:ed:6d:08:a7:7a:99:3a:d1:9e:d9:d6:81:b7:b4:
f8:46:84:5f:2b:1a:ae:ff:84:43:e6:cd:61:bf:b0:6b:10:56:
c3:05:b9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:15:33 2025 by rpki-client