Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
File: sXLI1PyYbeufzrHw0MrifBwxNcM.mft (raw, json)
Hash identifier: N6or2XrxJT27LSSBJqwe/lkf3uG5axzN9hiP1KTlpLc=
Subject key identifier: 54:E1:23:87:ED:16:56:E3:65:56:AD:CC:41:A2:E8:6F:55:36:71:63
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Certificate issuer: /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial: 019658A65BA6D11917614D3F86B3CFF3B332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
Manifest number: 09F6
Signing time: Mon 21 Apr 2025 14:00:19 +0000
Manifest this update: Mon 21 Apr 2025 14:00:19 +0000
Manifest next update: Tue 22 Apr 2025 14:00:19 +0000
Files and hashes: 1: Fe5Gqx1aovGtXf8G6dbhghP8Zjc.roa (hash: BUPkFvlzjudVBF56jR+MbrRifodIklIIzIddNH6FiAc=)
2: sXLI1PyYbeufzrHw0MrifBwxNcM.crl (hash: /ffU9+e3j4vogvZSN8lvuLIgLhuEHoPmeFaqpMsRPf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:5b:a6:d1:19:17:61:4d:3f:86:b3:cf:f3:b3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Validity
Not Before: Apr 21 14:00:19 2025 GMT
Not After : Apr 22 14:00:19 2025 GMT
Subject: CN=54e12387ed1656e36556adcc41a2e86f55367163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:fd:6d:40:af:0f:c6:5e:a9:9e:2c:19:db:
ec:c1:86:f3:cd:4b:72:a8:79:d0:14:9b:b3:91:c5:
14:ef:4a:05:3a:5e:e2:bd:1c:3d:30:f1:9e:08:35:
51:a2:d0:dc:6c:53:79:e1:f8:08:16:f7:3c:be:de:
e9:48:0b:31:be:15:4f:bf:b0:8b:9e:d7:b6:7e:64:
e6:cd:45:ea:71:ff:fe:3c:22:cd:a3:3e:5b:f5:3d:
e1:96:27:0d:ce:dd:00:b3:34:f3:64:83:a5:9b:e2:
9b:9b:1f:f2:64:18:7a:74:2d:35:83:1f:3e:9e:72:
3e:98:3a:e7:62:1b:19:82:21:ac:88:c3:7d:47:c7:
eb:94:ff:9d:3a:df:f4:28:e9:c5:94:a3:6a:4f:50:
20:4e:e9:09:f6:89:8a:ff:a4:1d:d6:01:e9:c4:ad:
6b:f8:34:a4:ab:21:6b:38:0c:cd:5e:2c:58:99:73:
f0:27:8f:ab:c8:05:10:6d:77:83:95:2e:6d:b0:86:
b8:64:b3:53:d0:f1:d0:af:b7:bc:ab:3a:e0:96:d5:
08:b2:31:5a:c0:ce:73:45:bc:c6:1a:de:39:72:31:
95:e0:55:ba:7b:6c:8c:f0:f5:f7:84:46:63:f8:9b:
82:5a:b1:d9:87:93:82:0c:ca:30:a5:d6:a0:59:ac:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E1:23:87:ED:16:56:E3:65:56:AD:CC:41:A2:E8:6F:55:36:71:63
X509v3 Authority Key Identifier:
keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:04:9e:d5:a7:19:ce:44:b1:ea:d0:b0:37:d6:e9:8b:08:d6:
4d:52:a8:aa:d7:5e:3f:2a:93:9a:98:e4:09:39:80:be:66:f9:
08:68:0d:87:7e:62:2f:b2:20:e6:08:09:5e:c5:89:af:67:2c:
9b:38:a2:7c:22:1e:79:ed:eb:bc:71:c3:30:68:48:71:3e:fd:
0d:70:e5:67:39:55:f7:0c:ae:c2:a0:10:60:c4:ea:e8:79:3e:
a6:d2:1d:98:7d:55:05:6c:ba:08:89:3e:66:db:94:be:8b:ae:
cd:e4:06:4d:81:67:3e:dd:d7:82:a0:95:fe:12:2f:10:6b:e1:
7b:7c:32:85:a1:34:e5:98:72:a7:b1:21:a5:dc:af:0f:46:c6:
bf:cb:55:26:d3:cf:2f:3d:2a:0a:0a:e8:73:74:31:fd:9a:22:
c3:da:a5:da:77:ca:78:8e:6b:33:85:59:f2:7e:4c:53:6c:d8:
a7:cc:5b:27:db:63:c3:70:bf:ce:3d:87:f3:a5:33:cf:45:fc:
fa:0c:82:02:8e:f7:18:70:93:0b:68:22:35:bb:02:c8:eb:c2:
a3:27:f1:43:fd:db:43:c4:84:b1:68:ad:da:2f:d1:c6:72:1b:
b6:86:f8:83:9c:d2:0d:a6:37:48:ea:81:58:3a:48:4e:e0:f9:
d4:bf:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:25:31 2025 by rpki-client