Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: NS/5XEQTUbeyHkk9SAvC6mNo9ExugmkCS8VyXvBgndI=
Subject key identifier: 6C:9D:7F:A1:18:44:25:CE:4E:2C:BB:89:B9:2B:07:93:7A:9E:20:A1
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019641B0CFEFC90820820087BF3EBDE9A91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 03:00:28 +0000
Manifest this update: Thu 17 Apr 2025 03:00:28 +0000
Manifest next update: Fri 18 Apr 2025 03:00:28 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: 3mbz7qVLnG1OCPSJP6YEgXVxRKLnjYZ/4htpbz6TGb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:b0:cf:ef:c9:08:20:82:00:87:bf:3e:bd:e9:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Apr 17 03:00:28 2025 GMT
Not After : Apr 18 03:00:28 2025 GMT
Subject: CN=6c9d7fa1184425ce4e2cbb89b92b07937a9e20a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:5f:a6:40:48:7d:f6:88:c8:6f:0a:8e:5c:
ba:0f:82:ce:84:bb:ef:5b:40:c7:e9:36:59:16:d4:
27:70:b7:94:fd:be:15:39:46:34:70:92:c1:75:9b:
23:d0:b4:4d:40:8b:e7:08:ee:19:74:66:6a:ed:8d:
01:ac:81:eb:bf:18:47:f2:19:0a:d5:5a:42:d7:b7:
56:45:35:f0:83:0f:91:9b:2a:7b:20:cf:c8:f4:6d:
ec:3f:58:51:00:12:2c:97:80:b6:b2:ad:77:48:b8:
f8:3d:60:a8:e1:0c:e8:a8:ee:1b:1a:49:4c:90:50:
ce:e2:00:ce:64:c8:c1:04:61:b4:9e:8a:fd:5b:f3:
ab:2a:5b:3f:5c:37:ca:80:c1:fe:95:cc:24:ce:92:
8f:46:70:b7:5f:26:98:17:3d:60:4f:1a:f1:f7:64:
89:61:73:90:8a:d0:b4:40:f1:f9:b4:c8:83:9e:bd:
6f:8d:e8:ed:eb:0f:ca:19:40:7a:ff:21:7c:46:7f:
4b:29:cf:a3:4f:eb:b6:a3:4c:69:59:12:7b:31:56:
23:81:5c:f0:eb:69:be:8d:4e:42:4b:73:31:50:70:
0f:5d:a8:1d:68:32:6e:0a:e0:66:fe:4f:0d:2c:b1:
80:05:ee:45:33:2a:3d:fb:10:8d:1c:65:9d:d1:e3:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:7F:A1:18:44:25:CE:4E:2C:BB:89:B9:2B:07:93:7A:9E:20:A1
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:1e:39:08:e8:a6:1a:f4:b0:35:80:59:08:97:9d:c1:6c:
3d:40:59:44:d4:06:76:7d:05:96:75:8d:91:c8:ea:36:f5:5d:
b8:6b:c0:ec:62:6b:b4:d6:7b:5a:e8:6b:de:4a:dc:50:cd:82:
84:68:50:86:87:ce:89:75:37:b2:e7:c4:0e:7e:1b:7b:97:6d:
7f:0c:c8:80:49:b1:17:d5:2f:0b:83:4b:3a:24:a9:75:80:2b:
8d:89:9d:d5:2f:98:e3:46:8b:fd:e4:d4:4a:d4:ef:97:02:51:
07:62:85:9f:12:74:ed:98:a6:d5:fb:d1:d2:c3:7b:2c:b8:4d:
04:cb:2b:2d:af:6c:15:1f:03:21:cc:ce:15:1d:d1:65:5a:4b:
f3:34:13:a0:a1:c6:b8:a7:51:5e:5f:05:58:b4:1c:9d:dc:2b:
dd:9f:35:dc:a4:05:06:3d:46:10:1f:7b:c2:bb:f8:a2:9b:dc:
02:9d:69:13:e0:4b:7b:2f:15:f4:14:3b:d3:a6:fd:ed:2d:17:
86:06:e0:dd:dc:0e:cc:ea:c9:0c:4c:10:9a:01:cc:47:f3:a7:
c3:19:ce:0b:63:5c:a8:0c:12:c6:0d:cd:60:7f:3e:d0:65:b5:
00:8f:86:5c:15:2c:0b:81:ef:db:03:dd:96:93:b7:1e:cc:05:
97:2a:6b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:24:10 2025 by rpki-client