Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: KDr7bnNHESdpxTa/04q1jkBcu0tLPsx1q/uS5Qv5++8=
Subject key identifier: 9C:C1:A3:6D:4D:96:F1:22:35:57:F8:98:FC:94:C5:D2:FA:7D:F9:64
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019653EEA04F0F13C96F04B81DF50A9FB5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 16:01:09 +0000
Manifest this update: Sun 20 Apr 2025 16:01:09 +0000
Manifest next update: Mon 21 Apr 2025 16:01:09 +0000
Files and hashes: 1: NxzgzrcAsHWy0jDkGocEc3A82GY.roa (hash: 49MMg/vk9brRgJNoRcoYkHau0scqC/ahxGjMTh7J3YU=)
2: mPhBEESpSSmoxdu-n5OAjI6sC_I.roa (hash: 6Dj5yn1/ctkVobyO+cPsteiP8qKS3BhAZ1jJUQtNU9w=)
3: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: zbxByyPJXUj+4QhWKYu08qETSLvZwNnQstUVB1ddn2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:a0:4f:0f:13:c9:6f:04:b8:1d:f5:0a:9f:b5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Apr 20 16:01:09 2025 GMT
Not After : Apr 21 16:01:09 2025 GMT
Subject: CN=9cc1a36d4d96f1223557f898fc94c5d2fa7df964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:69:9f:98:12:ba:0e:24:f6:f1:65:d9:08:
95:26:7c:c0:4f:ab:9f:d7:c8:2f:de:0d:31:17:77:
18:c6:97:d3:a1:57:fb:8c:f1:88:ea:60:b0:5a:6a:
e6:66:74:d8:c6:15:3b:0d:ee:74:54:d2:25:84:aa:
d9:1b:3d:9c:2e:0d:f9:2a:60:8e:0d:73:ca:ce:ee:
6b:c5:6d:7b:45:88:b6:44:45:21:90:a8:c2:5f:79:
b6:2f:d1:32:29:8d:cb:2e:9f:4a:d1:43:df:e7:63:
a8:47:7e:08:08:65:f3:4c:22:33:dd:cb:d6:c4:d8:
1b:1f:20:b6:77:cc:f1:93:8f:21:52:17:12:81:68:
7b:85:80:fa:fc:e7:bd:d8:b7:bd:13:10:5e:6a:cc:
28:90:f1:4d:ca:e9:1a:2c:c4:a3:4a:47:f7:a9:7c:
dc:3c:e7:13:3b:a2:0d:5d:9d:a5:eb:a4:d1:de:a1:
fe:78:6c:10:f8:b1:6a:22:2d:3a:c3:02:4c:01:8d:
a3:a8:64:55:a7:3c:12:36:e1:d2:45:47:28:a6:85:
9e:68:07:3c:61:0c:25:12:e3:a5:66:8b:a4:8a:d1:
c3:a7:fc:f4:97:11:da:40:82:e2:89:ee:8a:b9:d7:
ed:46:66:4f:73:39:05:63:15:5d:03:fe:ea:33:28:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C1:A3:6D:4D:96:F1:22:35:57:F8:98:FC:94:C5:D2:FA:7D:F9:64
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:70:ff:79:41:0b:80:1c:95:28:a4:13:3b:20:44:69:c7:8b:
ba:53:b8:e1:32:0b:55:f8:2f:74:d1:1b:98:2e:b9:d3:d8:12:
37:99:6e:31:34:2d:bf:4e:fe:cc:9c:c8:03:90:90:de:e3:67:
98:2b:b9:c0:e5:17:4e:5c:0f:e4:29:c3:35:4d:54:bd:c5:4b:
06:f9:2d:8f:67:1d:f6:1e:8f:d4:b1:61:1b:f1:f6:55:99:95:
87:27:13:f5:b1:56:1e:c2:a0:dd:60:05:3e:42:9d:3f:3e:31:
9f:74:a8:78:8b:a9:b3:fd:16:94:68:6d:f2:fa:e9:56:e8:3c:
8f:8e:bf:6f:bf:c6:d8:41:f7:60:9e:23:00:7c:6b:46:7b:07:
2c:33:ea:61:6b:9f:d1:0a:59:76:86:2c:af:6a:98:54:57:4b:
77:00:ba:d3:94:88:a5:f6:c4:88:fa:2a:08:a0:43:0b:fe:07:
62:34:41:e5:86:d5:05:77:5d:d6:d3:9e:e0:95:49:41:1e:fc:
bf:a7:85:a6:27:3f:5c:d4:a0:07:94:a8:5f:81:c0:3e:b4:00:
8b:12:2c:5f:11:d3:53:a8:bd:cb:1f:46:73:64:e0:d1:59:86:
28:87:80:db:f2:6d:9d:65:d1:90:4c:1c:6e:df:2e:7d:00:09:
89:7a:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:44 2025 by rpki-client