Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier: EroazWgghkLdQBytP9d+cq0ZKvefLZN4UM/A4rCkD/U=
Subject key identifier: 8F:5D:1D:C2:94:94:3E:2C:8C:74:03:3F:A8:C3:CD:06:44:47:2B:8F
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 01958F6130BB2E4A87327FB06DF4F9B52E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number: 0ADB
Signing time: Thu 13 Mar 2025 12:01:06 +0000
Manifest this update: Thu 13 Mar 2025 12:01:06 +0000
Manifest next update: Fri 14 Mar 2025 12:01:06 +0000
Files and hashes: 1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: Tk3i7t9Tn5i3NPgvkQ5aXNfTRxF/SySc2qnsjBccZzM=)
2: gREff1tF-BFgfiQMOqwC-JywERY.roa (hash: s5MFDeOQrL+EZevqGRhg/WJb2VH0jOYXkHrjmynZzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:30:bb:2e:4a:87:32:7f:b0:6d:f4:f9:b5:2e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: Mar 13 12:01:06 2025 GMT
Not After : Mar 14 12:01:06 2025 GMT
Subject: CN=8f5d1dc294943e2c8c74033fa8c3cd0644472b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:9e:a3:2a:8f:56:04:1a:ec:48:88:17:97:
35:11:09:b7:9c:0a:24:a9:12:8b:23:6f:18:07:7c:
5a:40:70:33:33:b7:4a:c3:f3:05:05:37:68:e8:0f:
fd:4b:93:8e:97:e0:bb:d1:9f:b8:35:ec:5a:ab:db:
61:5d:da:2d:71:32:38:bc:5c:8e:3a:71:81:77:7f:
0f:ba:70:db:af:6b:c2:01:57:b7:74:60:f0:c4:33:
c0:48:a3:3d:0b:11:7b:bf:96:4f:5b:aa:88:12:58:
20:a3:f2:7e:a9:2f:90:a7:13:f2:49:e5:c2:0b:2d:
87:17:9b:41:6e:65:2f:c8:50:66:96:2e:fa:de:8a:
c1:d3:52:81:bf:f9:2c:0b:f4:47:b0:9f:20:15:82:
85:b4:b9:ff:50:5e:d7:3f:3b:ba:48:ab:b2:26:72:
bb:e1:89:d0:a9:6e:68:91:3d:d9:fe:74:86:0d:ff:
66:06:6c:51:f9:7d:ab:3d:5c:32:18:d5:82:50:3e:
36:53:9f:2e:fa:f8:41:81:0d:aa:0b:46:81:69:00:
8e:04:0c:4d:63:47:da:d4:11:e4:f6:af:d1:4f:b5:
fb:45:d3:d5:dd:3d:3d:eb:37:b9:de:c0:06:dc:c6:
68:68:ac:29:57:08:a3:bc:c8:a5:c9:65:23:5e:3d:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:1D:C2:94:94:3E:2C:8C:74:03:3F:A8:C3:CD:06:44:47:2B:8F
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:9e:19:18:ae:d9:5a:05:f4:0b:3a:20:15:d5:73:d7:cc:
49:5e:ac:6d:e6:16:88:1e:28:b1:ec:2f:7a:ce:10:99:3b:f2:
27:16:3a:34:63:1c:20:46:fc:c0:9f:3c:9f:8e:db:59:b5:ee:
0b:7f:12:cb:a5:1c:34:01:e0:06:98:0d:7c:90:53:67:a6:30:
5c:c6:0b:85:d7:cd:61:d1:05:1a:4b:5f:86:01:d8:5d:84:cb:
af:e5:97:8c:d2:7f:c6:82:63:ab:78:60:e8:19:a5:94:cd:39:
c4:84:b6:ab:a5:73:aa:23:1d:92:2a:3c:5a:d5:5b:77:e6:84:
e8:df:95:8e:e4:a4:6e:4b:5f:13:92:7b:95:87:4e:4d:5b:55:
89:f8:61:1a:06:2b:a5:86:3d:a3:81:3d:94:61:3d:c2:b3:d8:
ad:dc:2c:97:77:8f:b8:0f:6f:59:ba:6f:3a:b7:ef:c7:de:36:
4e:60:ca:7e:1a:0b:c4:2c:25:9d:96:1b:db:ba:5b:55:9e:e9:
4e:12:7e:3d:33:c7:25:b6:a3:ae:6a:23:b3:c9:2d:35:e1:5f:
e9:17:a1:57:18:28:eb:43:b4:b7:24:b7:e3:28:8e:8f:9c:c7:
cc:95:0f:98:fd:8a:d5:4e:de:f6:2d:84:e6:7b:ae:c1:e7:03:
0b:69:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:58 2025 by rpki-client