Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: 2M4U2TPjbK5xqmvbJST94O+BXXvFME5lfjBqPBWTeVc=
Subject key identifier: 15:EB:E5:59:DB:53:67:25:9D:7C:91:31:90:BC:ED:EA:4D:83:3E:6C
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019649A24EA8386B81A230C859B15711C0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0A4C
Signing time: Fri 18 Apr 2025 16:01:35 +0000
Manifest this update: Fri 18 Apr 2025 16:01:35 +0000
Manifest next update: Sat 19 Apr 2025 16:01:35 +0000
Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=)
2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: 7cVyE7qzxtAsK2wiNy6jdfQ7DxUF3zW7B+WPvNf1L8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:4e:a8:38:6b:81:a2:30:c8:59:b1:57:11:c0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Apr 18 16:01:35 2025 GMT
Not After : Apr 19 16:01:35 2025 GMT
Subject: CN=15ebe559db5367259d7c913190bcedea4d833e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:27:4c:38:62:3d:65:4b:c2:68:01:f7:6c:
9d:62:00:c4:21:ea:1d:44:cd:9a:ef:be:a4:65:ea:
9d:30:b9:7d:b1:7b:46:06:20:fb:f5:af:06:1a:74:
ca:85:24:3f:f3:95:76:70:2a:b7:b6:0c:ee:d1:00:
e8:cf:fa:8a:bd:6f:7a:2e:44:36:27:0c:e8:53:20:
b8:f9:b1:de:86:9e:20:ef:30:44:63:90:ea:07:0a:
78:8e:c7:71:02:59:41:93:3d:cc:5f:8c:4d:e0:00:
19:4c:36:01:54:69:0e:d3:a6:81:29:bb:50:17:1e:
01:80:67:13:da:7f:71:f8:1c:50:54:4c:98:79:ea:
d2:47:92:8f:e0:46:4e:c4:f7:30:d1:6b:c4:31:b6:
87:37:cf:ce:01:28:e6:ac:61:94:d0:fa:e1:fb:bb:
3f:c2:d6:de:24:5e:63:76:05:c7:3d:7c:24:fd:31:
fc:5c:5e:da:37:ff:40:d3:57:9c:31:98:48:37:a1:
4a:a9:b3:93:75:16:13:57:1d:6d:c4:2c:dd:d6:f9:
4f:1b:33:6c:e5:75:3f:a5:57:38:7b:3a:2c:7b:21:
03:ee:aa:23:14:dd:52:2a:2f:bc:94:0a:51:48:ca:
1b:bb:27:f5:c4:2e:f8:08:40:4b:ff:8b:41:b5:d2:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:E5:59:DB:53:67:25:9D:7C:91:31:90:BC:ED:EA:4D:83:3E:6C
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:57:d7:21:eb:34:1d:ad:9b:2c:d4:7a:60:05:05:91:1d:6e:
8f:4b:be:a3:7f:bf:7a:ed:d9:87:64:9a:53:bc:0e:cb:e1:8a:
11:d4:50:a4:ec:d7:87:a7:46:85:1b:07:e7:81:3c:b0:d3:cb:
54:c7:ed:74:b3:25:db:7a:16:7c:55:b3:c5:31:89:22:a8:6d:
ff:8f:6e:e3:7d:a3:6b:0f:82:cb:d7:18:b6:3b:82:14:b0:0a:
e4:31:38:3b:17:1a:97:25:e6:58:b6:53:f1:f5:ff:6e:31:33:
19:c2:8e:8f:5c:28:8d:5a:8a:0e:0b:46:e1:84:36:c4:ef:1d:
9d:48:32:8f:9a:f8:0c:0f:1e:51:2b:10:f1:f7:eb:89:63:00:
b1:32:68:97:fb:2a:65:d2:77:75:27:ef:de:82:be:7f:c5:7f:
01:64:7a:a8:44:56:b5:7b:35:16:60:51:3e:f1:b1:06:e1:10:
19:ce:62:02:b7:6e:18:27:86:9b:ef:78:9d:2f:da:17:85:3e:
87:91:e2:bb:41:19:de:9f:53:07:26:70:f7:01:89:3d:98:76:
ad:5f:ed:a2:b6:36:12:06:13:98:5c:10:18:98:7f:6e:09:a0:
74:d3:c4:81:87:10:06:7e:8f:43:e2:b3:ce:ba:58:e3:e3:72:
a9:cb:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:31:21 2025 by rpki-client