Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: NG1kbQC24MO83C3f2AGer3QP2KCkxyyFRFSEEueyIqQ=
Subject key identifier: C2:FA:16:A7:E7:0B:1E:18:AA:6F:5A:67:2A:6B:E7:20:08:57:D3:DA
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 01963DD45B3755C65B654C190B74C8154648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 1485
Signing time: Wed 16 Apr 2025 09:00:49 +0000
Manifest this update: Wed 16 Apr 2025 09:00:49 +0000
Manifest next update: Thu 17 Apr 2025 09:00:49 +0000
Files and hashes: 1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: jRZH68Nkj9qLomEhjRermcjZVDJXOQDu/eJ7GbkSkC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d4:5b:37:55:c6:5b:65:4c:19:0b:74:c8:15:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Apr 16 09:00:49 2025 GMT
Not After : Apr 17 09:00:49 2025 GMT
Subject: CN=c2fa16a7e70b1e18aa6f5a672a6be7200857d3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:21:ba:a7:1b:66:af:d9:a6:7a:25:2f:60:
7b:5d:cf:4e:54:7b:7d:81:3f:84:f9:8d:cf:68:d0:
c5:42:ab:58:e4:86:54:53:93:6a:07:fc:88:76:ba:
fe:6c:19:0b:40:c5:4e:f3:59:15:95:f6:46:bb:d0:
dd:e9:99:b5:b8:e7:39:10:1f:8c:62:cb:0b:63:ec:
02:a7:7e:73:7b:66:6b:9b:28:4d:a6:87:78:6b:31:
c2:b0:50:2c:25:ec:e3:62:b2:0a:c5:20:32:47:ea:
8d:ad:a9:dc:58:1e:73:07:74:1e:dc:4f:43:8e:83:
0a:26:dc:7a:05:83:80:86:4f:14:ab:43:ef:a2:db:
3c:38:76:e0:52:f3:6e:f6:85:6d:f5:dd:19:3b:e3:
1b:c8:ed:e3:a2:66:66:3f:81:03:94:44:44:ba:21:
7b:8a:52:74:eb:92:25:0e:3e:cc:a3:7c:41:ff:b9:
58:3f:67:54:0d:a0:ba:df:b7:cb:5d:67:ee:99:df:
f0:20:c1:07:33:55:0e:2d:ec:c7:c0:9a:16:36:61:
fb:29:78:38:07:77:5e:2f:d5:63:50:1b:dc:22:d7:
33:dd:2a:a4:d2:19:3a:9a:cd:46:db:fc:f0:45:1e:
b2:dc:8c:dd:73:4d:e1:d7:f1:df:b4:eb:98:a4:59:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FA:16:A7:E7:0B:1E:18:AA:6F:5A:67:2A:6B:E7:20:08:57:D3:DA
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:85:1a:b8:ff:88:98:4d:90:e4:26:20:3a:16:37:2a:46:6e:
7b:5d:3b:e9:ef:91:0d:1b:12:b5:71:b0:dd:32:48:b9:7c:d9:
b2:a7:cd:be:38:2a:50:df:33:88:53:bf:9b:fb:7d:a0:5e:c7:
13:90:4d:95:26:6c:7c:5d:be:de:35:df:09:77:f5:61:91:5d:
23:a3:3b:17:6d:14:ca:be:02:1a:7e:f8:0e:52:e0:28:af:3c:
29:75:d7:80:12:94:1e:70:ab:4d:5f:74:b3:d3:5e:0b:34:36:
6d:f3:2a:e1:55:83:2c:ef:2f:1f:f1:87:6f:d3:03:7d:9b:ff:
ba:23:ce:f6:5f:5e:88:c0:c6:e7:f6:e8:10:79:30:6a:6f:69:
08:d9:f8:d6:a0:fa:c7:b6:08:e8:19:39:a4:a3:c6:39:db:c1:
c8:62:35:6e:34:6e:cc:4b:1c:39:90:e8:3b:a4:31:09:ad:19:
5a:4b:02:6a:58:f1:7e:35:03:0e:cd:68:69:fb:3c:8d:3c:6a:
c3:75:c4:72:61:89:9a:e1:9a:bf:34:37:07:9e:64:49:f1:c8:
0c:14:ab:f8:8f:35:29:f3:de:ff:4b:9d:4e:3d:9f:02:56:28:
b0:60:1f:cf:48:0f:39:19:ca:8d:00:65:f2:e8:ff:ba:cc:bc:
58:78:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:53:58 2025 by rpki-client