Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
File: _SqYOFjGha4w7gNeigMFQkiMXws.mft (raw, json)
Hash identifier: 2DOerekms594pKfNfsdF55HzLJTL0R+LJobKRrib9N0=
Subject key identifier: 68:B2:68:4E:1B:86:6C:6F:77:91:16:CC:A4:7A:14:50:58:04:F4:AC
Authority key identifier: FD:2A:98:38:58:C6:85:AE:30:EE:03:5E:8A:03:05:42:48:8C:5F:0B
Certificate issuer: /CN=fd2a983858c685ae30ee035e8a030542488c5f0b
Certificate serial: 01962D18C52E98C54423D5D3E0D71C785150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
Manifest number: 0331
Signing time: Sun 13 Apr 2025 03:02:00 +0000
Manifest this update: Sun 13 Apr 2025 03:02:00 +0000
Manifest next update: Mon 14 Apr 2025 03:02:00 +0000
Files and hashes: 1: _SqYOFjGha4w7gNeigMFQkiMXws.crl (hash: 3cIc4odB7t3MPPlN0fE+mMR4kmc9G4m/1vMtTcvPQK4=)
2: mcWI4GIqipBUvrnwIHMQKmS2RCg.roa (hash: RNQDLaE2tgJjxnmWK+M407e+BB24q00+oDFiCmR/ZNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:18:c5:2e:98:c5:44:23:d5:d3:e0:d7:1c:78:51:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2a983858c685ae30ee035e8a030542488c5f0b
Validity
Not Before: Apr 13 03:02:00 2025 GMT
Not After : Apr 14 03:02:00 2025 GMT
Subject: CN=68b2684e1b866c6f779116cca47a14505804f4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:3b:e3:2c:2e:b1:94:f2:f8:db:8b:61:6b:
e9:d2:e5:9c:cf:23:23:2f:b0:5a:a4:3f:48:74:31:
c3:ed:84:26:ba:b3:01:77:4c:57:38:37:ae:13:de:
cf:78:5e:71:81:fa:ec:d0:af:e0:ca:a9:df:13:9e:
8e:f5:de:61:d8:75:53:0b:d5:14:d0:90:53:74:d0:
4c:99:08:0b:42:34:48:80:48:fa:5e:fa:1e:47:90:
c5:31:92:79:ce:a6:92:69:30:25:02:08:1d:a3:19:
ce:5a:8a:4e:92:75:a3:9f:f3:60:0b:d8:5b:e0:cd:
16:27:f3:0d:f6:8e:f9:4b:1d:66:d0:58:16:77:e7:
fc:93:2b:4f:2d:70:3d:f4:d1:7c:d2:ad:23:8e:74:
fa:d2:18:dd:c8:53:53:71:2a:9f:0e:16:ee:64:72:
99:0e:ae:2c:01:95:4b:fe:99:5f:93:72:c2:ff:09:
2c:ec:90:5b:39:70:bd:ed:67:b5:1b:f6:d4:34:fe:
bd:09:95:32:09:9c:3c:93:65:61:77:6f:92:18:97:
1a:8b:9e:e0:e3:bb:41:89:7c:a0:12:21:0d:42:76:
64:25:df:ed:12:20:35:5e:a5:fb:ee:6f:e5:98:87:
14:20:e7:07:42:26:4c:8c:c8:67:f4:0a:5a:61:b4:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B2:68:4E:1B:86:6C:6F:77:91:16:CC:A4:7A:14:50:58:04:F4:AC
X509v3 Authority Key Identifier:
keyid:FD:2A:98:38:58:C6:85:AE:30:EE:03:5E:8A:03:05:42:48:8C:5F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:c6:8c:0b:cf:24:4c:b0:a2:13:62:2c:40:c3:04:58:f3:
5d:37:a1:f9:42:92:32:34:86:4c:75:17:5b:40:f2:f2:4c:28:
c8:8b:86:01:ea:41:04:6a:57:db:b6:54:c6:04:ea:06:66:9f:
41:81:bd:78:8a:d7:b3:19:e9:37:bb:a8:4d:35:95:f7:95:78:
ed:e7:34:c6:eb:8a:81:f5:11:8c:07:c5:1c:1e:ca:fa:37:5c:
34:1b:73:5c:db:5f:74:0a:18:a9:c1:c5:57:62:28:39:b5:2f:
67:7d:79:f9:90:2f:0c:76:a6:d2:31:8c:3b:b4:05:7d:94:ab:
03:fd:2a:8b:c3:bf:85:31:b7:61:33:16:c1:e7:48:be:08:55:
9c:49:df:19:ea:a3:69:f1:50:31:45:34:5c:62:a6:d8:0b:c9:
96:85:fa:c9:f4:f4:c6:f0:c2:7c:85:d8:82:d5:31:52:59:5e:
80:0f:04:1d:b0:b3:f8:91:91:fa:4a:81:45:99:f6:53:e8:3e:
3d:87:34:41:0a:e3:22:ca:20:1e:db:4d:76:7d:ba:cb:e7:c6:
2b:01:69:2d:9d:80:13:7a:39:79:74:c5:fd:a0:be:fa:e0:e6:
14:9f:36:81:f5:7f:26:ff:94:19:c4:d9:9f:29:c7:e8:7d:97:
3a:8f:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:00:02 2025 by rpki-client