Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: noJR2x00n6l7u5OB54ppRPnDAqiky0mPbhDM/Dk0fw4=
Subject key identifier: A5:76:4F:44:12:BB:83:04:B1:29:CF:62:CC:39:C4:6D:AE:8F:2E:73
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 01963F548DB8B421541FFED07179849C1B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0BD9
Signing time: Wed 16 Apr 2025 16:00:28 +0000
Manifest this update: Wed 16 Apr 2025 16:00:28 +0000
Manifest next update: Thu 17 Apr 2025 16:00:28 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: vDcVpaezpvLrWeJVtn5Z60hasn1h8Nkhnq4Fv1ymtYY=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:8d:b8:b4:21:54:1f:fe:d0:71:79:84:9c:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Apr 16 16:00:28 2025 GMT
Not After : Apr 17 16:00:28 2025 GMT
Subject: CN=a5764f4412bb8304b129cf62cc39c46dae8f2e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:91:80:1a:4a:10:f3:62:27:c6:fb:3e:30:
c9:05:19:11:99:c4:3f:7e:f7:66:df:ba:ed:f5:f6:
f0:76:70:67:6b:23:bf:f5:38:1d:c3:32:42:f5:26:
73:4b:dc:d3:52:e7:35:9a:73:d0:86:a4:40:7e:be:
0c:bd:a9:17:e1:28:e9:50:e0:7a:ec:01:e9:07:95:
b4:c3:ea:d1:2f:77:fa:f7:1b:59:9f:ef:3c:51:1e:
23:08:da:93:34:0b:25:67:8c:7d:2e:7a:a8:95:71:
47:8b:ae:9f:59:bb:a0:ef:48:4d:94:c6:8b:63:b0:
c9:cf:ad:59:8f:3f:e9:71:94:7d:d4:c2:a3:1c:f7:
4f:11:97:a4:ed:bb:54:21:21:09:f5:12:ba:b4:fa:
96:d0:64:ec:01:ed:1c:cb:46:06:42:90:c4:eb:68:
79:82:4e:75:85:66:c5:c3:46:0b:b6:8e:dd:b3:1b:
38:7a:28:09:cd:98:39:66:52:91:f2:8d:7c:db:c3:
82:ce:75:8c:0e:93:1a:18:d3:41:20:f3:ce:0b:99:
64:bf:df:2d:ba:c2:53:b6:0e:33:0e:a6:eb:5c:78:
a8:da:d5:f6:85:1d:37:03:80:c4:0a:02:2e:76:53:
80:28:76:5b:e9:43:d5:62:ac:c3:17:68:7e:d1:80:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:4F:44:12:BB:83:04:B1:29:CF:62:CC:39:C4:6D:AE:8F:2E:73
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cf:ee:c4:2a:6b:06:e6:2e:91:75:7d:51:ee:ae:b6:b0:8e:
08:03:cb:f0:7c:71:73:cb:a2:a6:a1:cd:33:ee:0d:41:19:ae:
09:a1:55:4d:c0:ce:63:17:52:ae:07:d5:20:d2:26:db:2d:85:
f6:23:38:47:9e:dc:b7:fb:ff:97:5c:ab:3f:9e:ae:ae:ab:45:
df:64:05:50:5a:ce:d6:1f:3f:cb:d9:13:ae:26:e5:bb:d4:47:
f4:bb:54:77:2a:32:88:cc:67:29:e2:b4:ad:59:cd:10:e6:be:
38:50:c4:20:80:04:db:78:19:d7:20:fb:e0:cf:a9:27:11:04:
bd:67:c3:cd:f7:c0:8b:27:6b:8e:da:61:47:53:2b:f8:95:a8:
63:16:97:77:ae:2c:e2:d0:f7:b1:bd:db:fd:bb:46:8b:ff:38:
c9:c4:6d:3a:76:60:f1:96:4d:8b:f7:a7:9d:0e:11:18:8a:ed:
90:94:2a:2b:16:c3:98:bf:40:93:95:0f:63:5b:eb:47:e0:21:
9c:ec:14:d4:ef:9e:b5:2c:1b:b2:5b:1f:45:18:a2:0b:f8:0e:
1c:45:de:db:ef:1d:ab:70:fd:e4:ea:c0:1e:93:f2:0f:25:0e:
b9:69:05:d6:d4:c6:3d:04:a6:f7:3a:bd:0c:60:c2:08:d9:92:
15:5e:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:18:15 2025 by rpki-client