Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: ya1+U4E6BA6gKn0xfnSJC8HoRSW4bZWsULUIFUJQZSs=
Subject key identifier: BB:B7:44:41:35:F1:D1:D5:FC:C5:D4:EF:3E:27:AC:8B:2A:D7:83:71
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 01962037955B5B59F9B0AB91DC4EE25FF02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0B74
Signing time: Thu 10 Apr 2025 15:00:35 +0000
Manifest this update: Thu 10 Apr 2025 15:00:35 +0000
Manifest next update: Fri 11 Apr 2025 15:00:35 +0000
Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: iLX0Ch5ecvFwXI9b5v619/FxsKD/zj7kx2ie3TpmR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:37:95:5b:5b:59:f9:b0:ab:91:dc:4e:e2:5f:f0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Apr 10 15:00:35 2025 GMT
Not After : Apr 11 15:00:35 2025 GMT
Subject: CN=bbb7444135f1d1d5fcc5d4ef3e27ac8b2ad78371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a2:dc:4d:40:e8:1f:c1:28:7f:f9:cd:10:d9:
10:a2:fe:7f:7c:a7:4a:6f:d6:8f:e8:01:22:c6:a0:
c6:5b:ad:59:f9:88:94:e2:b2:d9:e1:17:79:bc:1f:
d8:85:db:3b:86:29:c9:55:64:c8:d0:3a:bc:75:1d:
93:fb:48:63:1f:45:19:d0:ec:29:a7:27:11:68:2b:
67:04:61:db:67:86:6e:be:d8:f4:62:fb:7e:62:c3:
1e:df:fb:ce:ba:e1:5b:99:6e:86:72:8d:7b:ac:f6:
fd:95:2c:b0:44:a3:cc:96:15:0d:72:f4:d9:a8:4d:
a8:9b:a2:db:4f:d2:dc:de:d3:53:ec:90:b4:00:0e:
12:c7:6c:8d:a9:99:77:8a:b6:67:8a:43:b8:17:d9:
28:6b:72:7b:46:1e:77:6f:6d:c3:84:1e:97:01:a2:
f5:6a:4a:a3:41:11:80:e2:f4:4e:e4:e2:7b:19:2c:
59:96:39:d0:92:9d:e0:12:d6:ec:18:39:9f:36:95:
c7:39:2a:1a:22:7e:34:8b:bd:82:0f:91:e1:70:92:
25:27:55:cf:8d:e1:b3:09:49:35:81:9a:57:8c:f8:
bf:22:fd:69:f7:3d:3c:82:4f:26:ea:e8:2a:50:34:
77:de:30:87:80:b8:fe:67:21:ee:50:99:d9:f3:d9:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B7:44:41:35:F1:D1:D5:FC:C5:D4:EF:3E:27:AC:8B:2A:D7:83:71
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:99:a1:cb:e6:43:27:4f:20:80:37:72:f9:82:04:ea:fb:ec:
2e:5e:b9:b3:cd:98:58:1d:06:b4:33:93:86:c4:bf:63:5f:f7:
39:7a:21:b6:79:a1:bb:db:8c:8a:e1:26:37:eb:53:e5:e9:35:
10:3a:bf:52:33:2c:f7:d3:3d:2f:fe:a6:e9:fb:e1:89:05:f0:
b0:e4:26:7b:53:ac:d6:73:93:b0:3f:9b:d9:87:f9:41:13:8d:
56:2c:f7:38:dd:ee:8d:c1:7b:76:af:40:45:c8:ac:f5:58:4e:
d9:75:a1:83:01:8a:72:07:fc:22:6d:df:ef:d8:70:dc:90:7c:
6d:0e:38:d4:7c:3e:20:00:12:b8:9a:81:3b:3a:cb:43:f5:c8:
c3:50:6b:c8:0b:90:9e:b3:c4:4e:f3:f6:23:aa:d1:0d:3a:50:
ec:40:18:65:69:dd:50:53:20:ea:b4:9d:a6:e8:8f:b6:b2:9f:
08:5a:d8:a0:9e:f5:e1:de:74:b6:42:49:8b:e6:4f:2e:3f:14:
3e:0f:da:23:09:3b:65:32:83:f6:26:37:7b:c1:9a:46:93:52:
4c:46:12:d7:5c:a7:fa:6f:29:27:c8:09:e9:bd:ab:53:d5:08:
ca:46:82:f0:4f:61:29:8a:61:08:a3:0b:bc:90:fb:54:c7:3b:
6a:a7:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:05 2025 by rpki-client