Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
File: S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft (raw, json)
Hash identifier: /h6CKczzA7VbAvFrKNTYhepDtTNaXxzkk+cZa8cHX+M=
Subject key identifier: A7:5F:FD:F5:65:69:5F:20:1A:B6:C2:4E:16:F4:94:CB:25:A7:BC:EF
Authority key identifier: 4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
Certificate issuer: /CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Certificate serial: 01963F1DB68036BC1024241C38622BE888FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
Manifest number: 01E7
Signing time: Wed 16 Apr 2025 15:00:33 +0000
Manifest this update: Wed 16 Apr 2025 15:00:33 +0000
Manifest next update: Thu 17 Apr 2025 15:00:33 +0000
Files and hashes: 1: 1-Lt9NLCsO-0O5Dj-v2US9jmxXIQ.roa (hash: LmWlQzcgikgQeSr2EvN/FytTaYSjoQdRmrdKGtmELxE=)
2: S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl (hash: OgEICMsLBHUXI+/f3cVrGz5lETtcF/oKPM4IvusDoAc=)
3: hrzuIDRF15oBIKXIQfgIQbF1zzc.roa (hash: JpHqRzFezYOCJs0/enWH8I+qI+ye32fJxiyuYohDsJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:b6:80:36:bc:10:24:24:1c:38:62:2b:e8:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Validity
Not Before: Apr 16 15:00:33 2025 GMT
Not After : Apr 17 15:00:33 2025 GMT
Subject: CN=a75ffdf565695f201ab6c24e16f494cb25a7bcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:ed:8c:d5:8d:2d:00:ee:99:9c:84:d0:49:
51:80:c5:91:12:8e:59:95:20:a8:45:7b:20:4e:fe:
77:5d:20:a9:2f:06:58:6f:22:57:0a:ba:13:8e:18:
5e:80:27:93:8f:c5:35:0b:ea:dd:8c:cb:0f:93:50:
44:5e:02:05:f5:43:e0:9f:00:38:da:89:3a:f2:d2:
35:e3:cd:10:b6:bd:02:ef:7c:2f:41:5a:93:f3:aa:
cd:0f:47:4e:15:15:1e:27:bf:53:1f:d5:f6:55:76:
d9:8b:86:b2:5a:41:73:f7:6d:1e:ca:3f:5b:8a:7d:
5d:33:b4:fb:52:cf:fe:68:da:58:51:f7:ce:a4:86:
0e:50:fc:ae:e2:a9:8e:eb:28:82:c5:66:5f:80:a9:
1e:70:1b:51:2c:d6:6f:ef:e5:7a:db:b1:f1:e4:9b:
65:46:1c:99:72:15:39:62:9b:50:35:c6:3a:0c:bf:
e3:3b:bf:e3:c7:9e:e5:16:c0:d4:f4:7e:ca:ca:4d:
f2:9e:cd:cc:a9:73:3a:d7:a5:26:27:13:ed:b7:15:
1d:40:b1:f2:93:9f:2a:3d:d7:c0:61:ae:90:a0:1f:
97:ad:74:f9:1c:91:32:3f:f4:a2:d3:39:b2:7b:6d:
ff:52:a1:78:92:30:e4:84:b4:ca:be:ac:a5:00:7a:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5F:FD:F5:65:69:5F:20:1A:B6:C2:4E:16:F4:94:CB:25:A7:BC:EF
X509v3 Authority Key Identifier:
keyid:4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:94:49:3a:84:f4:dc:19:da:93:c5:2d:70:b7:ec:7c:f6:07:
92:54:41:04:43:64:91:9b:d4:b1:8b:4e:b2:0a:67:75:e4:2e:
f1:d6:81:b1:e0:32:58:39:ca:5e:7a:c7:f4:1c:5a:70:59:a2:
f9:da:b8:23:c3:3f:df:b4:51:5e:86:07:64:34:ee:29:1b:98:
cf:9d:9d:ca:4a:7a:9f:6e:f9:ff:70:8f:7d:4a:b4:13:de:72:
01:22:1b:58:a7:15:a0:5a:6c:9a:aa:68:6b:a6:51:bc:5f:06:
91:73:71:3e:72:4d:d6:07:f4:27:76:85:ef:ea:d2:f9:b7:49:
0f:23:f6:6b:83:5e:cd:a9:11:48:ad:90:b9:2f:ae:d9:82:a5:
44:18:eb:0b:91:e4:d3:a1:e4:01:8d:c2:6e:47:70:34:52:35:
09:41:e8:e0:eb:07:72:a7:aa:c5:7c:ab:44:2a:30:43:3b:f9:
68:44:84:5d:37:d9:f7:44:22:be:0d:39:17:5f:0b:4f:20:f4:
38:7c:8c:ae:37:32:53:44:ea:c1:5c:62:e7:38:68:98:e5:56:
83:17:fc:1d:b1:0e:e5:39:fe:bc:ba:ea:91:f1:14:fd:d5:64:
62:13:92:48:8a:08:6a:d5:1e:18:0a:d2:56:47:68:41:7c:b0:
7c:c7:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:33:54 2025 by rpki-client