Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
File: S4UouKy8h0J2SlgajZeaGEKVZj4.mft (raw, json)
Hash identifier: Oa00quds/q7V2XOV/mNcKy2ACcRWJHQ2DGfaJ3yKY+A=
Subject key identifier: 1C:C7:57:AC:33:B2:3F:99:6A:55:CC:AF:3D:A4:C7:FA:25:27:92:45
Authority key identifier: 4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
Certificate issuer: /CN=4b8528b8acbc8742764a581a8d979a184295663e
Certificate serial: 01964B901D8AE5EAAF5063508B54D2212597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
Manifest number: 02A7
Signing time: Sat 19 Apr 2025 01:00:58 +0000
Manifest this update: Sat 19 Apr 2025 01:00:58 +0000
Manifest next update: Sun 20 Apr 2025 01:00:58 +0000
Files and hashes: 1: S4UouKy8h0J2SlgajZeaGEKVZj4.crl (hash: JZXxlQ6IlTO/3tz3WhPPLILp8NdTxPfqX7Z9WCqrcY8=)
2: vPSZGNLszHola-aE32fRdWDCw-Q.roa (hash: nE9CEsfxd7QnexQKpbRsasvakxwQXgvQt/2wyGB1J9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:1d:8a:e5:ea:af:50:63:50:8b:54:d2:21:25:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8528b8acbc8742764a581a8d979a184295663e
Validity
Not Before: Apr 19 01:00:58 2025 GMT
Not After : Apr 20 01:00:58 2025 GMT
Subject: CN=1cc757ac33b23f996a55ccaf3da4c7fa25279245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:95:1d:66:46:d9:d0:13:ba:d8:82:90:6d:
61:9d:c0:8a:dc:df:61:49:cc:67:1d:6b:d5:c2:4f:
49:fb:b7:2e:3e:93:20:6d:3a:9e:d2:25:b4:f4:0b:
05:53:11:ae:d6:16:4f:93:db:37:7b:3b:1c:41:65:
4b:ca:92:26:6b:97:af:1c:30:d0:80:d9:ed:4d:2f:
25:c7:0b:39:a3:8c:f2:c1:f7:65:35:94:e4:d7:93:
5e:db:4a:10:e4:6e:55:73:94:28:17:3b:1c:d6:e7:
ea:79:e2:84:ab:56:80:ee:91:47:1c:ca:2d:ee:d2:
6e:56:b9:5a:76:55:08:00:12:18:3f:6d:5f:96:2a:
38:e7:e8:7f:87:5f:c6:ac:ab:32:37:78:40:23:e3:
33:c6:aa:04:b9:81:14:f4:c7:94:cf:7c:dd:0d:d5:
cb:0f:a3:62:1d:10:fb:08:f2:23:ef:1d:e5:0c:9a:
a6:98:ea:b6:a3:e7:bb:43:9c:17:89:bb:15:8e:1d:
5a:e1:cb:69:ea:ea:cc:d7:3a:9c:2e:f1:d3:44:5b:
8d:a5:a5:22:da:f1:e7:5b:3a:eb:57:c9:9c:f4:64:
12:68:74:d2:1a:d1:b5:47:94:72:8f:ae:4c:c3:dc:
2b:82:f9:54:79:7b:f6:b0:5d:97:a2:24:8e:b3:57:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:57:AC:33:B2:3F:99:6A:55:CC:AF:3D:A4:C7:FA:25:27:92:45
X509v3 Authority Key Identifier:
keyid:4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:13:89:cb:04:0c:24:3a:a4:28:8b:34:65:c6:1b:83:9e:2c:
7a:6e:ff:a8:32:fe:b0:a0:c2:37:52:12:cc:f7:ca:bd:db:31:
34:6a:c6:0b:b5:12:1c:d9:b2:9c:c8:ec:19:c5:2a:b9:9d:7e:
ef:9f:06:a3:ae:35:18:a8:9f:93:ed:5d:38:c8:e6:cf:f5:d7:
67:96:9f:f2:df:21:38:f1:65:00:dd:2b:02:60:13:64:02:f1:
dd:35:96:52:1e:18:1b:13:63:d7:b4:50:01:f1:4f:46:46:e9:
71:f6:b7:30:71:5d:85:3e:32:47:13:64:bc:c2:9e:42:b3:92:
54:55:da:52:df:c0:f9:a3:32:ff:07:1f:1e:44:fe:2e:59:d5:
37:7a:b4:11:15:f9:e3:60:7c:9d:30:02:c9:0a:15:36:b6:71:
06:6a:e4:42:84:58:91:89:9e:5c:d7:c2:84:bc:e2:9d:54:9c:
07:40:33:3f:fe:95:8e:cd:4f:db:61:b5:96:47:e5:9b:da:0d:
d3:a1:eb:1b:20:72:d9:d6:9d:63:1a:c8:79:fa:96:da:9c:95:
7c:f2:ed:52:78:55:08:cd:63:bb:35:c0:81:ae:20:82:25:80:
be:54:ec:d4:6a:a0:ae:23:13:1a:8b:f9:32:24:87:4c:c4:a9:
14:30:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:54 2025 by rpki-client