Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: Qqj5yqIOY73So3Y6rgHpJkcP56886l0drNtprtpWaMY=
Subject key identifier: BF:85:B3:75:00:DF:91:B8:8E:6B:F7:A0:51:6F:88:8D:EF:89:CA:F1
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 01965CF1DD6F27E20CCDAF7ADCCDF8BAC7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 109B
Signing time: Tue 22 Apr 2025 10:01:16 +0000
Manifest this update: Tue 22 Apr 2025 10:01:16 +0000
Manifest next update: Wed 23 Apr 2025 10:01:16 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: YVuQQxpMAaAzPLoM8YccgweItQwj8xa0vvoMIPgih8Q=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:dd:6f:27:e2:0c:cd:af:7a:dc:cd:f8:ba:c7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Apr 22 10:01:16 2025 GMT
Not After : Apr 23 10:01:16 2025 GMT
Subject: CN=bf85b37500df91b88e6bf7a0516f888def89caf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:96:e7:44:9e:a1:98:7e:a3:11:c5:d6:12:
98:00:a0:4c:c0:a5:d1:e0:7b:52:b0:e7:06:18:97:
af:a6:e4:64:6b:c3:55:4d:50:93:94:1d:d8:25:07:
d9:7b:1d:08:96:32:27:d2:f4:e0:bc:ec:09:1c:c0:
4c:f8:01:2a:4d:51:76:82:2b:d2:f8:ad:78:6f:12:
e1:aa:c4:99:ce:81:bf:f9:e7:91:52:91:22:5e:e6:
3e:05:70:11:88:e1:12:d2:4c:19:bd:7b:ed:ef:25:
1d:b8:fc:32:7f:52:35:a4:c5:ca:42:3e:8f:d5:dc:
e8:f4:aa:56:7e:ed:f7:e9:d8:39:64:f4:78:76:42:
59:5d:e0:80:47:eb:33:03:9a:d8:5b:47:cc:fa:51:
6c:9f:9a:65:81:e6:c8:63:67:73:d3:3a:9b:02:81:
e0:a6:62:67:a9:e1:0b:27:67:e3:2d:0f:2d:ca:a6:
b8:38:5f:dc:2e:fc:6b:d4:23:a4:97:88:b3:88:f1:
bd:46:e3:a8:4b:ae:26:c9:4d:d2:21:51:a7:33:36:
e1:12:bb:53:2d:5c:06:7a:1c:89:0d:8a:f6:ed:81:
0d:40:8f:ce:db:e8:c7:7e:d0:c5:ee:48:0e:20:df:
06:5d:34:ae:8d:02:82:73:85:aa:0e:c4:6c:08:fa:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:B3:75:00:DF:91:B8:8E:6B:F7:A0:51:6F:88:8D:EF:89:CA:F1
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:93:4f:e8:4c:1d:2c:28:2c:69:05:2e:d5:7b:3a:8d:23:50:
ae:9d:3f:c1:49:b8:77:14:3d:80:46:8b:20:58:01:f6:3a:84:
ef:8e:7f:ca:6f:8a:85:ad:af:8e:fe:57:31:42:86:75:0a:da:
54:40:8f:77:00:26:d3:13:21:17:ed:c3:7e:57:ec:ba:00:f1:
e0:c9:2b:f9:81:91:98:fb:f2:1c:c9:0f:35:6b:d7:75:ca:3c:
65:e7:61:18:dc:b5:1e:a7:9d:cf:4b:b9:c7:3f:8c:7e:1e:70:
a3:6d:77:65:87:1c:cb:a9:20:a8:b6:3c:c4:e9:26:1a:03:b9:
8b:a8:05:52:f6:91:e4:83:31:b1:f2:c1:6a:41:3c:ba:29:9e:
5f:cb:33:f0:ae:5c:64:36:e8:61:e7:59:cd:c7:32:1a:fd:04:
51:66:a7:19:e7:1f:1f:97:0b:c4:d3:2b:00:b1:b2:f2:d4:d3:
ab:5c:ff:15:88:04:6e:43:95:72:c6:24:ea:6b:a8:a4:4e:e9:
54:e8:70:84:c9:90:fb:d7:e5:1c:ef:28:1d:8b:48:0e:67:69:
b5:8f:2d:11:41:0b:93:59:f9:1c:24:d0:d0:14:6d:1f:b2:f5:
d2:de:ce:0d:8b:17:0b:9d:99:75:64:dc:53:89:21:03:1b:58:
46:f6:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:34:17 2025 by rpki-client