Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: Mfx04WSgikudPzCB0ugvZxVYl+m6C/dEM4UUHjJ2O+A=
Subject key identifier: 0F:68:9E:3F:D0:5B:05:49:20:70:63:68:D5:E2:74:4A:0F:2D:27:ED
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 0196520052D810AFD3A93F9B52533E78F4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 0949
Signing time: Sun 20 Apr 2025 07:01:14 +0000
Manifest this update: Sun 20 Apr 2025 07:01:14 +0000
Manifest next update: Mon 21 Apr 2025 07:01:14 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: g4XBIpAB85v53/EA7vn1y7csgSzkdf/8i5kFnL6X1wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:52:d8:10:af:d3:a9:3f:9b:52:53:3e:78:f4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Apr 20 07:01:14 2025 GMT
Not After : Apr 21 07:01:14 2025 GMT
Subject: CN=0f689e3fd05b054920706368d5e2744a0f2d27ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:0e:0f:a2:cd:6e:25:20:b8:25:45:84:b9:
eb:00:08:ce:ce:81:9b:bd:f5:bc:e1:e9:a3:09:28:
39:93:89:b8:cf:8a:0f:90:18:0f:08:1a:f1:48:5e:
cc:3f:b7:74:6a:e8:ef:32:9d:22:6a:9e:c6:1d:62:
31:89:a4:57:fb:b2:cf:9c:23:1c:cb:eb:95:3e:c1:
fb:b5:cc:cf:00:45:c6:95:72:f1:fd:d5:ba:b7:38:
02:b2:3e:96:d0:a7:17:f5:73:8a:86:73:80:4d:2b:
ba:b6:32:36:74:33:84:c9:eb:28:7f:93:30:f4:8b:
4d:f0:9d:46:91:6c:74:1c:42:81:37:9d:ce:a5:dc:
49:8f:18:72:14:d2:c1:da:6f:9b:ce:91:a6:61:8f:
fd:e4:d1:8c:59:1f:07:3e:54:d8:12:ba:c9:47:30:
ee:c6:8b:62:87:ab:37:e8:ca:8a:c1:d5:de:ef:87:
d1:75:5e:60:94:92:c0:8c:1b:6b:fa:6c:31:d3:33:
cb:6e:2e:f3:f1:62:0d:6f:3f:0e:98:8b:53:a1:b0:
b5:c3:44:06:ae:d3:45:f4:b4:48:66:bd:1f:05:aa:
18:c4:f5:f8:81:67:52:ef:2f:eb:52:58:b3:43:8c:
06:a7:cd:32:af:2a:9b:54:76:87:db:98:f7:c8:0a:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:9E:3F:D0:5B:05:49:20:70:63:68:D5:E2:74:4A:0F:2D:27:ED
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bc:8f:e4:50:2f:90:2b:83:7a:2a:5c:e8:79:df:6f:a7:f9:
00:47:8f:29:13:f5:76:81:52:ce:1c:3a:a5:03:0b:69:3e:b3:
12:5e:e0:00:b2:da:21:c5:e2:41:4a:c4:7f:01:b1:02:b2:88:
5e:ba:80:96:8b:82:b5:5e:b4:dc:38:78:5b:9a:b7:56:5b:4a:
ba:57:89:9e:61:58:c1:1f:0e:91:56:90:1c:7a:cb:1f:a3:eb:
1c:c3:e4:a7:28:f6:c1:13:f4:42:c2:70:2a:f9:2d:8e:96:4b:
a6:d3:1b:19:52:f9:b2:d8:70:4d:04:e9:d8:b2:2f:52:51:ca:
a3:a2:73:24:0f:dc:82:63:02:62:f4:ff:58:45:38:f1:56:e0:
68:87:ed:6c:6b:4e:a6:95:b9:19:44:a8:70:73:fb:18:fb:ee:
b4:09:8d:d8:6c:9a:29:53:4b:d6:35:f9:0a:cd:8f:e0:ae:00:
ad:63:19:d6:03:56:f1:1b:76:4d:9c:fe:ba:cd:6e:b8:f0:ec:
30:c1:6f:c5:63:ab:b4:04:01:b5:53:c4:0a:7c:fc:20:86:55:
63:1c:a3:57:a2:1d:3d:3e:ed:a1:f5:e6:d5:7a:56:78:52:ff:
08:39:43:1e:ef:f1:ac:79:d6:a4:6e:88:74:c1:5a:fb:29:2c:
ae:2a:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:49 2025 by rpki-client