Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: 3ihKZTbESz+fzvAa65P6du4xnp8vUeGjWmGrdKOOejo=
Subject key identifier: FF:5A:59:33:D5:51:8D:3E:3B:06:D3:91:22:E2:09:CC:99:42:67:C3
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 01964FDAAF0981773E91A7CBAD257912835E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 01DD
Signing time: Sat 19 Apr 2025 21:00:53 +0000
Manifest this update: Sat 19 Apr 2025 21:00:53 +0000
Manifest next update: Sun 20 Apr 2025 21:00:53 +0000
Files and hashes: 1: K12F-uP3adhB5XYkvRWOwtyWFxQ.roa (hash: 4K99rP4m/GgxDIw4+Su5OB+ocoFQK/2aIqkgeWKmoU4=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: jXk8+xj93O5tnYsPuCwPxOdVskKpmR7SrVENK83C3KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:af:09:81:77:3e:91:a7:cb:ad:25:79:12:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Apr 19 21:00:53 2025 GMT
Not After : Apr 20 21:00:53 2025 GMT
Subject: CN=ff5a5933d5518d3e3b06d39122e209cc994267c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:b2:46:df:7b:03:29:1d:7e:53:14:e1:48:
28:5c:cb:25:8f:15:38:10:e1:71:3a:1b:91:a3:4f:
7c:ff:86:2f:e2:07:f9:05:9e:5e:52:24:14:05:e2:
8d:8c:45:8b:a2:96:c9:6e:4d:74:38:51:9a:c3:10:
6e:84:2b:8c:15:be:e9:b6:c2:15:ff:a6:a4:54:5e:
56:45:b5:7c:c6:68:bb:a7:60:52:3c:e1:4e:6d:de:
1a:e8:4a:73:ea:b2:fa:b3:bf:92:ba:06:c3:32:cf:
2b:02:ea:95:d4:26:83:f7:35:87:93:c6:11:95:89:
1a:01:3e:97:2b:98:01:e9:58:50:21:b5:89:37:83:
a2:e3:80:25:ed:8d:db:3d:e2:d8:72:9e:25:0b:f0:
f6:10:6a:22:1e:a7:9b:51:68:ec:c3:a8:fc:a4:98:
a5:fc:9e:40:68:8b:3a:c5:d3:55:bc:d5:8d:c7:d2:
11:bc:f1:67:c0:51:cf:19:93:60:2a:1b:54:b6:4a:
2e:76:11:73:ee:b1:0d:fc:37:91:8f:99:87:01:89:
e2:dc:2e:0e:21:08:2c:bd:23:9e:26:cd:b5:04:0c:
22:57:cc:cc:77:7c:25:58:f9:49:d9:3b:21:9c:52:
fd:d3:8a:db:71:94:d3:d8:d7:a5:d4:79:ec:c6:9b:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5A:59:33:D5:51:8D:3E:3B:06:D3:91:22:E2:09:CC:99:42:67:C3
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f2:0b:2f:ce:a1:01:2b:95:11:6c:48:4e:86:d8:21:42:aa:
0b:c2:7c:8f:0b:9b:00:bf:e9:7a:40:cd:74:1e:cd:79:f3:15:
fd:bb:ae:46:a7:0e:3d:f4:a6:1b:ec:65:4a:9b:eb:02:27:fa:
c7:91:2d:c2:11:fa:55:81:37:a9:61:c7:be:20:02:02:6b:fc:
2c:e2:83:03:a8:0e:be:c9:d4:12:ab:64:54:b8:54:f2:fc:61:
00:63:be:cf:2c:38:ae:a7:07:0e:76:2f:a0:92:b5:ed:c5:3b:
82:99:0b:9e:25:b3:ea:93:8e:ab:87:9b:fd:6b:87:ca:6f:ed:
49:82:4b:b6:42:39:e1:d6:9a:f9:f9:c1:76:c9:17:9c:05:4a:
65:06:ee:05:8e:da:20:c6:48:67:4e:85:c5:98:7b:e0:e7:42:
70:33:b1:7c:35:92:91:41:e0:b0:25:41:ae:8d:0b:45:4e:7d:
8d:a7:5c:5d:35:ba:a5:fd:45:a7:93:af:16:c6:ef:1a:de:0d:
d5:4a:49:f8:13:3e:28:af:26:e6:6f:b6:c0:7d:12:3d:1a:46:
a5:5b:7a:f3:73:1c:60:55:a9:00:94:a6:92:c2:07:f9:ea:51:
55:ab:ab:a3:5b:9e:51:5a:08:f6:ce:a0:35:cc:b0:44:b2:4b:
0f:b5:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:38 2025 by rpki-client