Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: RQ6wXrMeoum1/Mf9bjvp8TlpatpDln/pjOsPo7szMtU=
Subject key identifier: B0:53:40:B3:41:B5:E8:90:29:C2:66:7D:DD:72:CF:D5:CF:83:38:DD
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 019653122204362D88D5A804D638B4767BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 13D0
Signing time: Sun 20 Apr 2025 12:00:19 +0000
Manifest this update: Sun 20 Apr 2025 12:00:19 +0000
Manifest next update: Mon 21 Apr 2025 12:00:19 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: vI38h1Nt/KcsW5bsOoye80NUjAJhpA54k76cGXf3Mks=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:22:04:36:2d:88:d5:a8:04:d6:38:b4:76:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Apr 20 12:00:19 2025 GMT
Not After : Apr 21 12:00:19 2025 GMT
Subject: CN=b05340b341b5e89029c2667ddd72cfd5cf8338dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:d4:f7:1b:18:19:a9:93:c2:34:4d:44:bb:
f5:8f:be:74:3b:80:f3:f1:b9:38:0c:6a:6c:46:71:
03:08:3d:9e:f5:00:1e:d4:c9:44:60:21:1d:ce:26:
fc:fd:d4:31:21:7f:03:74:1b:b5:54:02:ad:2d:01:
20:6b:30:e6:6e:b4:b5:6e:67:9a:71:b4:f5:1b:8a:
1f:2b:49:b7:22:26:1c:43:75:1a:df:73:4e:b0:90:
0f:7e:ca:77:b0:f9:16:96:9f:fc:0f:fd:56:77:8b:
8d:07:bd:44:f7:10:b3:49:2f:63:21:66:fa:f6:63:
58:46:84:4a:b1:82:ab:ed:ba:fa:86:64:e8:f7:dc:
0f:c5:77:89:12:c3:fd:0a:96:b3:5d:99:5e:df:e8:
17:e0:fd:7d:77:6c:c5:2c:43:3f:20:8b:8f:37:99:
f1:cb:03:f7:18:83:ad:1a:9b:57:2b:4a:5f:8b:54:
be:bc:34:42:04:d9:53:e1:59:6d:c0:8f:6e:1e:39:
25:6c:76:60:b6:aa:7f:f2:9a:1a:21:53:d4:66:d0:
10:e8:76:3c:ea:c5:9a:87:3a:2f:88:8f:48:52:77:
e7:cf:ab:f8:bd:41:8e:ed:fb:c7:52:1a:c7:68:cd:
89:64:4a:21:05:ec:94:8b:e6:c6:d9:c7:64:ed:ad:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:40:B3:41:B5:E8:90:29:C2:66:7D:DD:72:CF:D5:CF:83:38:DD
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:72:22:8b:08:e6:38:cf:f5:7a:a6:97:4a:27:3d:db:0f:b9:
e2:cc:61:f6:e1:77:6c:5a:8a:6e:e7:65:49:54:b9:63:78:a3:
48:b4:15:a6:a9:54:23:a3:34:11:43:f6:d8:50:be:cb:90:ed:
3b:d7:f1:75:ca:23:26:82:ba:5c:b6:fa:c7:be:a5:9a:79:8a:
e3:eb:68:a1:cd:fc:2e:4c:f5:99:64:d7:13:29:a3:27:65:a1:
d7:54:92:8a:50:02:67:6d:01:8a:b4:e0:bd:d7:7a:12:b7:a9:
5f:6d:6d:b5:36:f1:91:5c:c5:ac:e6:25:53:18:da:54:f7:e3:
d6:bf:f5:f9:20:72:ba:62:ef:2c:33:f2:2a:3d:64:a6:eb:8c:
e7:54:ad:1f:c8:74:5e:af:7c:97:90:a8:91:4b:18:03:dc:4e:
de:ef:92:a1:3c:60:92:ac:72:e6:22:4c:0d:7c:9f:53:88:f7:
f0:ca:ad:67:52:1f:c6:c4:47:e6:e1:06:c9:ff:ef:8a:0a:f0:
b5:53:ab:2e:5c:9b:61:df:d4:2d:80:2a:1d:a8:11:65:12:a0:
44:c8:6f:85:4b:2c:a9:c2:e8:2c:4a:7f:8b:1f:bf:23:5c:5b:
b7:89:e8:c0:28:91:73:7a:ba:dd:68:83:20:12:41:5e:eb:2e:
67:99:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:15 2025 by rpki-client