Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: +AvRH98UP9J43/D1d90CJAa7awXdX8kdUViM5XsyU5c=
Subject key identifier: 2E:40:BF:9A:E6:0E:1B:BB:F9:70:E6:E3:0C:D2:87:21:F8:CE:91:86
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 01963B779BEAE42172D824D004B78F445BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 0F86
Signing time: Tue 15 Apr 2025 22:00:16 +0000
Manifest this update: Tue 15 Apr 2025 22:00:16 +0000
Manifest next update: Wed 16 Apr 2025 22:00:16 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: EJ/XV5D4Xvz8s4qyM0vqK5wuZRUgJwNCGCEq3gP87Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:77:9b:ea:e4:21:72:d8:24:d0:04:b7:8f:44:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Apr 15 22:00:16 2025 GMT
Not After : Apr 16 22:00:16 2025 GMT
Subject: CN=2e40bf9ae60e1bbbf970e6e30cd28721f8ce9186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:1f:84:4d:53:f7:a1:68:de:42:35:5e:db:
ea:31:be:82:7c:d2:37:36:24:e7:58:ec:e4:43:7c:
17:b1:6b:bd:53:8e:e9:3c:77:92:91:e7:34:b2:8b:
03:30:e4:94:88:28:8c:19:a8:e4:85:01:e9:6f:92:
23:e1:da:a6:5f:db:89:c9:b5:05:85:18:f6:55:e6:
96:e9:fb:1e:db:b9:63:92:80:62:4b:08:69:8d:ec:
be:5d:fb:bb:1d:e8:9c:18:4e:7f:93:e0:ac:00:00:
97:43:e1:54:a2:30:e8:6d:28:4e:f7:ee:11:0c:1b:
a4:aa:de:9f:64:2b:eb:a5:2b:01:25:78:96:a3:fd:
75:9e:40:19:e8:17:30:1d:7d:c7:ea:f8:1d:65:c3:
22:21:9d:ef:6e:fb:95:6c:f0:a9:d3:2d:5a:f7:d4:
a7:31:c2:e6:36:53:b9:02:94:9e:c7:04:cc:af:f2:
18:7b:cd:4a:ce:52:c5:1c:a7:5e:bf:d3:02:75:f1:
53:d1:2d:a4:7f:e5:57:8a:19:05:41:c2:a2:0d:92:
98:51:8b:e5:70:b6:41:0e:2a:0e:6b:b2:35:40:71:
21:37:f9:f6:bf:c0:a9:da:19:eb:68:77:aa:4b:6b:
e3:56:32:d1:6c:f0:15:18:ce:01:b9:cc:9a:ff:aa:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:BF:9A:E6:0E:1B:BB:F9:70:E6:E3:0C:D2:87:21:F8:CE:91:86
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0f:c5:95:c3:11:5b:86:05:4c:b9:ae:1c:17:a4:00:bc:15:
49:3f:78:b7:ed:6c:f1:8b:3e:58:0c:ce:06:9e:b0:d7:ec:70:
19:ba:77:4b:fc:6a:57:1d:d3:2a:9f:6d:43:f0:ba:93:8e:60:
df:79:47:0e:0b:90:b0:5c:42:72:8e:02:cc:40:93:d0:06:ad:
dc:c7:40:4e:6d:73:13:23:7f:b0:c1:b7:b5:07:d1:19:a9:99:
e9:51:3a:6d:ad:b8:06:a4:a7:95:08:9f:e9:5e:d7:06:8b:67:
c6:b8:89:17:d9:a0:85:00:40:fd:ad:2d:18:c9:a4:3f:97:0c:
3a:85:05:03:be:34:82:2b:08:23:0c:d8:65:99:47:70:b2:74:
66:76:51:5e:96:e0:97:90:8b:52:36:8c:de:41:a1:54:f2:44:
61:48:c0:6a:43:34:d7:c6:ef:57:aa:27:90:e5:4c:37:55:5f:
e9:d0:ba:fb:f5:34:37:c3:74:0a:67:8e:f2:ce:8c:f6:37:43:
0d:1b:81:c2:b5:55:22:af:be:b5:b7:bc:c9:98:cb:ef:88:5e:
01:e7:df:b2:ae:9a:05:9d:32:0e:5f:1d:8f:69:d9:86:68:75:
8e:d5:a5:ce:8f:25:c8:c4:6c:84:af:38:d8:06:df:6d:dd:58:
d7:89:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:40:58 2025 by rpki-client