Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: rHLLNJiWKvqNoXew8pjMy0T9g/VRXJS82j5NKgFYCGM=
Subject key identifier: 87:BC:E9:F9:9C:7D:97:F0:5A:9B:9C:8D:90:6C:16:B3:0D:7C:C4:98
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 0196545C52AFA3DBA39C2AFAE65A12ABB84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 0325
Signing time: Sun 20 Apr 2025 18:00:58 +0000
Manifest this update: Sun 20 Apr 2025 18:00:58 +0000
Manifest next update: Mon 21 Apr 2025 18:00:58 +0000
Files and hashes: 1: Cc19cgugQdGGzWmKNe0-AV5tNOA.roa (hash: AdB3qWr4T5q3889qZQZVXkGWaD9whbwxZRKtQuF+C18=)
2: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: JzNnPkhEk35XBocbPupVNJO5Rz2TVjKZnaJwjelVdww=)
4: Y7PFR1AcfUDa5WoNJCBqS3QlUqs.roa (hash: Wv6ekzOe8NLiKCI6n/SgwcD6sKF1kP4pqcOdTIjNnr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:52:af:a3:db:a3:9c:2a:fa:e6:5a:12:ab:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Apr 20 18:00:58 2025 GMT
Not After : Apr 21 18:00:58 2025 GMT
Subject: CN=87bce9f99c7d97f05a9b9c8d906c16b30d7cc498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:13:ea:83:26:b2:e9:08:e8:ca:c8:d2:ea:
9d:fd:f6:8e:19:7a:4e:aa:78:50:e3:7e:d3:d1:2a:
80:0b:66:6e:4e:9c:79:3d:46:f9:bc:cf:b0:03:05:
6d:c3:ff:15:bc:9a:62:ff:ca:68:01:7d:4f:b1:7e:
f2:39:a8:22:4f:f6:f3:04:fd:99:97:24:b8:ad:62:
be:7a:87:51:d5:40:0f:ba:8a:08:aa:18:4f:7c:a6:
a3:c9:58:65:86:2c:1a:f8:02:16:12:e9:ab:fb:b8:
b1:9f:e0:c0:96:06:d0:a7:44:33:ec:3a:50:ca:10:
b7:1c:c8:f4:f5:0e:78:67:f4:f7:69:ec:49:8e:a9:
53:a8:0d:e2:aa:3b:60:08:ec:98:6c:98:51:d4:92:
44:86:d9:5a:de:2d:6b:73:35:8f:a9:c8:64:ec:8f:
46:41:cb:97:0d:7c:b5:29:f4:db:a6:c0:98:5d:02:
82:fe:24:7d:db:98:b3:8e:ca:d4:55:c6:12:5b:53:
12:b5:79:96:9b:7c:a2:9a:9e:96:94:83:d6:0f:c8:
66:0b:6b:3f:67:46:68:f3:82:35:d6:14:09:af:4b:
58:28:06:66:d4:da:4c:df:3b:c9:d9:97:ec:60:2d:
26:43:5d:6a:1f:40:f6:90:ea:03:df:57:16:e5:4c:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:E9:F9:9C:7D:97:F0:5A:9B:9C:8D:90:6C:16:B3:0D:7C:C4:98
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:af:b1:39:7a:56:5d:73:90:a8:1e:5c:2c:d8:40:b9:f9:69:
98:e1:7c:c3:7d:5a:b6:71:89:28:08:71:98:10:a6:30:ce:f6:
18:97:a9:fe:75:be:06:66:aa:c0:48:ab:cd:36:65:6c:38:fd:
d3:11:97:c2:86:52:c3:fe:27:84:95:ac:66:ea:49:b3:3a:13:
a8:35:d4:1c:78:0d:c1:52:53:f5:1e:b4:e5:36:57:53:3e:ce:
fa:dd:10:fc:b2:d2:c9:98:09:3a:37:74:2a:41:58:b6:69:6b:
50:89:38:bc:94:18:b0:30:e9:2a:7f:87:64:73:5b:5c:25:4d:
96:47:5d:58:0a:c1:a0:17:83:e4:8b:ba:6a:27:bd:f4:16:5d:
d0:9b:38:b7:12:eb:3d:12:5e:b4:b6:a1:c6:05:d0:ce:75:4b:
6f:7f:8d:c1:d5:f1:ef:fc:58:64:e3:59:6c:c5:5a:d5:42:17:
aa:ca:07:c2:d5:79:0b:98:b6:78:20:ce:e2:a9:5e:ad:c7:dc:
cf:3c:1f:d7:05:7f:fb:74:9b:89:e3:59:18:9a:e4:20:ff:95:
e3:7f:e7:32:28:f1:d6:29:17:bb:95:1c:7f:7f:06:82:d1:a2:
01:0d:f5:bb:06:b6:ed:3d:84:93:50:d0:88:c8:dc:88:47:74:
8a:c1:15:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:12 2025 by rpki-client