Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: acK9kkQwoee275NfD3e1qg7VgevBUdvIgBnJKjN9lgo=
Subject key identifier: 3E:7E:44:6F:FD:F2:66:F4:00:56:B6:30:26:C4:D3:8B:B5:97:7D:41
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 01965FBBFCB5B08BAC0FFC7F896A318B1319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 23:01:17 +0000
Manifest this update: Tue 22 Apr 2025 23:01:17 +0000
Manifest next update: Wed 23 Apr 2025 23:01:17 +0000
Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: lw1aAOy7I5S4OkR4Fl1Fb6Y1zJcqy5nZQMVuWY37Zf4=)
3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:fc:b5:b0:8b:ac:0f:fc:7f:89:6a:31:8b:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Apr 22 23:01:17 2025 GMT
Not After : Apr 23 23:01:17 2025 GMT
Subject: CN=3e7e446ffdf266f40056b63026c4d38bb5977d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:6d:f1:f7:b7:ee:5c:e2:f1:89:00:91:d1:
bf:69:85:61:2f:6d:1b:84:54:4d:19:db:c9:dd:43:
7e:7b:7a:81:63:98:98:06:7e:f9:15:c0:2b:46:f7:
db:fa:8e:3e:f2:22:f0:ee:af:47:9d:e7:62:d0:aa:
0b:cb:ed:e6:74:f1:ec:f2:b8:35:03:5d:d4:bc:be:
c3:38:b2:e6:7b:fe:f9:a5:31:b5:64:eb:ee:b3:6c:
1d:25:9c:08:42:05:12:a2:e9:9d:68:04:7c:62:17:
de:15:e5:35:bf:54:28:f5:ff:d1:95:65:48:9b:3f:
40:fa:94:f1:fd:c3:8f:8b:eb:83:97:64:4f:a2:64:
a8:28:25:e7:68:19:47:3e:a8:96:17:fe:ee:9a:88:
bc:54:e0:cb:4b:e6:e5:ed:40:cd:63:be:77:2e:ff:
b5:ed:7e:c4:88:33:e9:29:93:86:74:a4:5c:52:89:
d7:d4:5a:69:1c:e7:e0:8a:17:38:23:24:c7:75:4c:
45:e4:78:40:98:bb:60:87:ee:27:bb:5a:26:d7:f8:
fd:bf:64:48:50:9f:82:41:ec:fd:5c:d4:c1:3d:0c:
55:9d:d3:dc:e8:38:fa:3f:9c:86:7a:a6:93:7d:da:
43:47:92:b5:76:0d:b9:ca:c9:fb:bb:31:84:33:71:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7E:44:6F:FD:F2:66:F4:00:56:B6:30:26:C4:D3:8B:B5:97:7D:41
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1c:9f:9d:35:3e:0b:72:09:8a:d5:e4:4a:31:24:c2:86:7d:
c3:fe:b1:a8:91:58:89:cb:df:42:3e:b3:ec:c0:d8:b5:4c:f0:
62:53:5e:b8:23:32:3d:18:48:a2:13:4f:3c:11:28:76:8e:7f:
24:d6:9c:7a:ee:0a:e5:4c:1d:49:47:9e:ca:f0:a7:b8:0b:f9:
c0:10:f3:a6:b2:30:06:d8:40:bf:24:7f:a3:03:e6:26:aa:1a:
25:92:9c:f6:8e:b9:47:85:a2:a1:3e:47:ce:97:31:a0:b0:45:
ca:2c:29:ae:d8:40:6c:4b:ec:9a:4f:8d:ef:4b:f7:15:65:d7:
60:df:ab:62:43:e6:f3:9f:69:bd:65:cd:74:2b:97:b0:47:a0:
c8:cd:a5:bc:5b:e5:58:33:08:d5:fc:06:5b:fa:d8:d5:ea:57:
db:b7:0c:94:1b:ee:50:18:d9:78:29:c0:0f:dc:e7:eb:0e:09:
83:37:69:02:4a:c2:36:79:49:81:bb:be:d4:2c:c7:6b:81:4c:
93:c8:ed:6a:3f:9c:4f:45:94:33:ed:ac:08:0c:7a:39:2c:76:
bb:76:46:11:72:22:fa:a3:a6:2a:cc:a1:3d:b3:9f:97:b8:00:
22:3e:11:56:0d:e2:71:47:f8:43:89:8d:f5:d8:28:7d:67:e4:
d0:0b:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:11 2025 by rpki-client