Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: /JvXuR4Yw63e0aGheN67HY0lLQ4cYE0QQrJqDoX5VnM=
Subject key identifier: 44:F9:00:C7:E4:8E:7F:86:95:64:9C:3F:31:FF:A8:EC:78:88:EC:1C
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 0196526D479168B868DF24A4CD11D09A3416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 148F
Signing time: Sun 20 Apr 2025 09:00:15 +0000
Manifest this update: Sun 20 Apr 2025 09:00:15 +0000
Manifest next update: Mon 21 Apr 2025 09:00:15 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: YDhzo9vJJRD1a5lIbUl+LJTziQkcM1whDP+vjQz11QI=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:47:91:68:b8:68:df:24:a4:cd:11:d0:9a:34:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Apr 20 09:00:15 2025 GMT
Not After : Apr 21 09:00:15 2025 GMT
Subject: CN=44f900c7e48e7f8695649c3f31ffa8ec7888ec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:42:39:40:2d:f5:e3:5d:28:ed:e2:85:10:
a8:de:1a:84:73:0f:a0:a7:d8:de:3e:0a:e2:ac:6c:
72:98:44:3a:a5:70:be:46:29:7a:4b:b4:72:59:fa:
8c:31:c8:97:2d:56:ab:6f:68:bd:ab:89:6c:41:23:
0a:ac:43:f1:53:80:f4:60:10:11:21:96:fb:5a:04:
a7:41:42:35:ed:1d:75:09:0e:73:b9:41:1a:15:fd:
5c:06:e3:c5:08:7a:b3:d1:1f:88:cb:75:36:f9:ca:
76:c0:3c:38:8b:f6:00:50:80:be:1a:95:c5:9c:d4:
ff:04:23:49:92:d0:57:bd:9c:83:09:0b:9a:86:92:
de:4e:00:92:23:0f:87:5a:e7:8e:bc:ba:80:03:43:
3f:64:0b:2e:4b:94:bc:23:c8:e2:08:01:2d:45:00:
22:ff:ef:a7:41:4d:f5:e0:b7:8a:3b:fd:02:be:e4:
15:27:9c:02:52:1a:59:9b:25:95:0d:4b:70:9b:fa:
03:8e:ad:d2:70:d3:aa:34:0f:c7:9c:17:a1:e3:62:
f7:5f:73:4f:2a:85:d0:88:1d:d0:34:28:fd:df:7e:
83:0f:df:e9:69:91:ad:e9:2d:85:22:94:d4:39:05:
dc:e9:30:a2:61:ad:9b:6c:af:d5:b0:d2:cd:ab:97:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:00:C7:E4:8E:7F:86:95:64:9C:3F:31:FF:A8:EC:78:88:EC:1C
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1b:13:47:0c:21:57:0b:54:61:3e:75:19:da:ca:2b:86:4f:
70:c6:e5:91:09:49:c3:c0:ee:1d:60:13:94:8c:61:57:ca:d6:
cf:8f:25:3a:85:b2:7d:12:bf:30:14:0d:e8:3a:fc:59:63:a5:
a8:f8:a2:c7:cb:e2:21:e8:ac:2f:ef:be:0c:22:03:2f:69:73:
fa:56:e1:20:28:f1:4b:89:af:96:06:ad:a5:57:d2:3f:ff:38:
9c:b4:43:25:88:f6:e3:04:ca:68:98:a2:0c:05:c9:c6:c6:32:
1c:42:70:90:45:60:c1:8a:39:84:ac:6b:85:23:8e:47:65:89:
c0:73:3c:51:00:1e:34:bb:b6:cc:ee:b4:88:e1:36:57:53:75:
ea:ac:a3:55:1b:cf:02:06:fc:92:44:45:84:67:27:78:b4:03:
a1:73:81:e2:36:dc:24:b1:52:ef:6d:3a:a5:27:41:11:36:10:
90:f2:ba:d5:12:af:5b:15:ce:39:65:9f:76:37:47:90:de:11:
35:0c:c8:a1:10:47:f6:0c:76:12:00:db:e4:4a:80:69:18:1d:
0e:36:07:d1:2b:8e:19:05:e8:39:ba:72:fc:47:3d:cb:50:1e:
04:0d:51:b2:91:18:66:1f:0d:e1:ba:50:0b:4e:db:99:2c:93:
ef:5e:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:12 2025 by rpki-client