Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: CBn1u3oWGrIR8f5/f06zTvg3jEEaS36j+HCItlNJ+gA=
Subject key identifier: 2F:64:6B:E3:E8:2C:0C:ED:D7:46:B5:A4:83:0F:6E:A8:71:2A:23:8B
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 0196143441B6D7E54D6B6EB08D62D2381243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 0E6C
Signing time: Tue 08 Apr 2025 07:01:31 +0000
Manifest this update: Tue 08 Apr 2025 07:01:31 +0000
Manifest next update: Wed 09 Apr 2025 07:01:31 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: xdhht3DssobOwh31BEt1OdYpKA0loa5+euddTNkXD84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:34:41:b6:d7:e5:4d:6b:6e:b0:8d:62:d2:38:12:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Apr 8 07:01:31 2025 GMT
Not After : Apr 9 07:01:31 2025 GMT
Subject: CN=2f646be3e82c0cedd746b5a4830f6ea8712a238b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:e9:26:fd:0f:16:6f:64:b5:4e:e3:66:26:
c6:e6:5d:56:e3:d4:ad:bd:30:f3:4d:57:ba:3a:a8:
e9:6d:b4:c8:83:99:7d:1d:0a:e7:76:69:ad:2c:33:
f1:86:d6:fe:6e:ef:8e:8b:57:8e:c4:8f:4e:48:df:
2f:89:b6:39:d7:af:50:dc:51:4e:df:db:69:70:e9:
75:fa:27:39:63:20:32:cd:bc:ac:af:bd:48:c1:c5:
ff:22:c5:d7:11:3a:fc:f3:b1:5e:5f:79:0f:94:fd:
a2:e2:5c:43:df:df:1f:a4:22:c2:4b:4f:7b:5d:07:
40:c4:60:a3:fa:4b:36:68:74:6e:82:a2:0c:c1:43:
4f:fa:e1:9b:79:05:1f:cd:ae:27:4d:85:4b:bd:89:
86:32:60:08:52:b4:7f:1d:ae:9e:d2:f8:cb:ae:f4:
98:b7:8e:0b:e6:a9:df:a5:50:13:a9:51:6d:50:4d:
59:33:16:b2:23:ff:a5:b4:d4:fb:4d:ea:23:16:e1:
93:b5:41:b8:59:38:c6:28:a2:bf:ea:55:e8:a7:b3:
45:93:1f:bd:fd:bf:a6:f3:da:10:d0:f1:b8:bf:63:
f9:4f:36:4e:08:6c:3b:ed:36:69:96:ad:c6:45:fa:
43:1d:df:32:22:cd:45:f1:ae:fc:0e:5d:e4:e1:5c:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:64:6B:E3:E8:2C:0C:ED:D7:46:B5:A4:83:0F:6E:A8:71:2A:23:8B
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:e0:c4:be:f7:e5:a1:1c:a4:68:16:d6:0c:c6:3f:fc:d1:
6e:95:31:29:e6:1b:6b:97:36:7f:1e:48:81:12:ca:f6:e4:38:
59:14:5b:d2:bc:c9:31:81:70:25:e6:06:35:f8:1a:54:50:b4:
12:c5:be:31:d0:e3:ac:d6:54:9d:8c:f3:0e:bc:05:56:95:40:
b7:33:f2:da:c6:74:c2:c8:61:95:2d:83:9d:90:c1:f9:62:9d:
65:5e:78:0a:cf:5a:0d:2d:32:69:23:47:4a:15:49:53:43:5b:
8b:85:f7:e5:4b:8c:54:8d:8c:f7:11:35:ab:e5:1b:95:73:ee:
bb:72:12:03:63:c2:92:a2:24:6b:c8:85:d3:39:86:69:11:6e:
8c:b7:06:5e:38:95:e7:3e:b1:b5:ea:33:45:a2:d0:c1:80:de:
c7:cd:1a:4d:a2:0c:db:4e:6d:26:a0:ab:6f:13:d2:c4:18:e4:
ff:fa:12:83:b6:16:20:98:74:20:11:95:94:bd:55:77:73:6b:
96:9c:41:f0:50:f5:00:d8:2b:a6:aa:38:85:05:ff:34:69:27:
86:43:bf:24:f0:bb:a6:9a:03:bc:20:5e:57:62:c1:31:a9:52:
0a:af:7f:64:c9:13:5e:bf:c4:50:9e:a4:8b:2e:4c:ff:fc:5a:
d8:4f:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:03:54 2025 by rpki-client