Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: qS8BbZCb2JPsmi2VQqM3INql080rKqRLbpKqfxneiII=
Subject key identifier: 90:5D:79:09:E5:35:62:2D:23:3C:B9:F1:E9:DF:E9:E6:0C:60:1E:F6
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 01965982270B98115CDDF12DAD39C7CF3A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 01B9
Signing time: Mon 21 Apr 2025 18:00:23 +0000
Manifest this update: Mon 21 Apr 2025 18:00:23 +0000
Manifest next update: Tue 22 Apr 2025 18:00:23 +0000
Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: xEv32TRN1r415Vc5EugQcc6wnbEUSUQ6KbaJH+/Jy6g=)
3: qU7NS3z4dR2Yct7lYNkAomkkhy4.roa (hash: A8aF09Arb1zd931tk4sAEkJct2PD6hOi6RvyzXv8HWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:27:0b:98:11:5c:dd:f1:2d:ad:39:c7:cf:3a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Apr 21 18:00:23 2025 GMT
Not After : Apr 22 18:00:23 2025 GMT
Subject: CN=905d7909e535622d233cb9f1e9dfe9e60c601ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:68:6e:cb:14:f4:bd:4c:da:15:f4:30:02:
e2:b0:48:eb:1b:a3:ea:b8:75:97:71:1d:71:8d:d4:
45:59:3a:ca:2b:2c:7d:ef:31:c6:c9:ec:6c:a1:9d:
25:83:79:b2:be:9e:0f:a1:78:8c:7a:79:19:21:5e:
4a:a7:59:46:3f:03:ff:25:6c:8f:ea:e7:d9:11:30:
79:ee:92:47:1d:ef:c5:5b:95:6b:8e:cd:21:59:8c:
da:e9:10:b2:7d:e1:29:db:9e:b6:4f:ce:fb:43:3c:
7b:08:be:f8:a8:b4:ce:1a:ac:02:35:29:df:5b:ab:
32:f2:a0:21:a5:17:32:aa:95:e0:96:5a:df:8f:35:
b4:31:c5:7c:93:ba:23:af:1e:14:3c:ae:df:70:3a:
ea:b9:8a:ce:25:1d:97:ce:59:86:02:47:dd:44:af:
ad:08:a2:95:f2:b3:af:f2:11:c6:7f:ca:5b:cf:70:
74:f0:e2:fc:5a:a4:19:b1:cd:8a:4d:f8:36:3d:95:
53:1a:b6:81:90:68:e0:af:b1:b7:7d:25:01:c2:a6:
cc:3c:cf:c3:0d:09:ed:55:d8:cc:0c:56:3a:a6:3c:
01:7e:d8:5d:87:35:38:c0:e1:71:e2:cf:89:38:3c:
ae:cf:4e:45:fd:66:07:28:63:30:43:de:e0:32:10:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:79:09:E5:35:62:2D:23:3C:B9:F1:E9:DF:E9:E6:0C:60:1E:F6
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e2:49:93:38:18:8b:74:5c:87:2f:9b:85:64:fa:6f:d0:98:
b2:93:dc:7d:42:d7:72:b9:33:08:9e:5c:58:a0:ea:21:67:a4:
4e:d9:cc:0e:02:30:4b:62:e4:52:b1:aa:54:d0:08:b3:c8:db:
34:89:73:f8:de:87:bb:dd:bd:98:6a:7d:57:bf:cc:89:2c:2e:
e7:8b:95:a1:3a:44:7a:eb:40:43:47:38:7d:9d:aa:d2:50:ec:
0e:7d:df:01:81:3c:71:04:49:d0:f6:40:cd:d9:de:6e:d3:96:
4e:f0:91:d7:7c:fd:cf:1a:a4:66:36:61:74:a4:8a:9d:fe:65:
ab:44:36:21:d8:0a:07:47:0b:80:52:82:f4:b5:ed:66:40:c6:
9c:f6:1e:52:63:d4:2e:7c:7a:99:fc:fa:e0:60:87:eb:89:98:
33:6d:56:a7:2e:3e:33:5e:42:e5:28:ca:13:b1:05:c3:95:d3:
98:3f:a2:3f:a5:9e:39:c6:a5:de:25:f9:3b:22:50:6d:a2:7d:
68:85:ac:f1:96:04:81:9b:f6:63:6f:c9:76:f7:a4:8c:59:e8:
7c:36:85:54:18:d2:dd:73:93:49:55:e1:bf:e5:41:4b:dd:59:
14:bc:51:66:66:7a:f7:d2:b5:b9:09:4d:fb:83:d8:5e:0e:da:
66:6f:90:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:44:20 2025 by rpki-client