Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: rDfW9jG6qksojgKoPMcHn/Y22Z7ZNFD3DZnrUbMfDt4=
Subject key identifier: 40:6C:5B:21:74:E7:0A:8E:FF:3F:30:6C:D6:78:EA:E4:28:CD:72:C6
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 01965500A28B7FF011D7E869D878F038E522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 04A8
Signing time: Sun 20 Apr 2025 21:00:27 +0000
Manifest this update: Sun 20 Apr 2025 21:00:27 +0000
Manifest next update: Mon 21 Apr 2025 21:00:27 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: QKuykBkTwBm4bQNBH/QdM8skpHozlRzlUAHrtSzmSuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:a2:8b:7f:f0:11:d7:e8:69:d8:78:f0:38:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Apr 20 21:00:27 2025 GMT
Not After : Apr 21 21:00:27 2025 GMT
Subject: CN=406c5b2174e70a8eff3f306cd678eae428cd72c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:36:82:93:32:9c:4b:08:de:d0:89:70:c8:
9f:54:26:a1:16:68:9a:e1:cf:ac:da:e0:2d:9d:41:
4b:b5:0a:f8:6f:be:d7:30:05:2e:93:c4:5e:a2:65:
d7:54:b5:b5:ec:fb:58:af:64:52:56:aa:2c:74:c0:
d9:2c:c3:77:b5:02:0a:6f:47:03:91:e8:c0:47:59:
31:d0:8c:c4:4c:35:78:98:5f:d7:38:47:54:a1:26:
1b:4b:4a:8d:71:47:b6:39:05:65:d1:69:a9:e6:8f:
6e:7f:f8:77:61:fc:b6:2e:01:31:4d:c3:81:e8:22:
e2:0e:b0:0e:91:09:69:9b:e7:8e:02:d7:4c:73:b2:
f3:b8:75:75:bf:f9:98:91:3c:39:e3:2c:bd:1d:c4:
be:02:80:b9:d9:b0:b8:a0:5f:03:5b:69:2d:5b:b9:
4d:83:6d:50:fd:f5:b3:e1:6c:61:53:fb:62:f4:7f:
bd:9f:19:7d:fc:f0:e5:8d:e5:44:90:27:8e:e6:8b:
44:d1:04:0e:74:40:21:b4:bb:34:42:5e:c7:c2:4a:
18:38:ae:51:8e:2e:c7:c2:c5:29:59:c0:f4:3d:d2:
e2:57:ba:28:af:e5:37:b5:2f:b7:51:e3:f5:cf:fd:
00:ce:8a:6f:64:90:11:32:0f:46:bf:15:76:7f:d0:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6C:5B:21:74:E7:0A:8E:FF:3F:30:6C:D6:78:EA:E4:28:CD:72:C6
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:98:6f:60:0d:9c:e9:5f:e8:48:c3:a3:0b:91:bd:3d:45:0e:
0a:ce:89:55:84:55:45:a2:0d:0d:90:57:66:a8:b2:e0:3c:3a:
0c:d7:f9:51:5d:ab:20:af:55:7c:99:7f:65:13:0c:84:74:33:
8a:63:1b:28:a8:40:e2:a6:4e:87:c9:54:1e:6a:5d:a4:4e:98:
73:f3:2f:03:8c:ff:86:15:b6:34:3b:ea:5f:8f:6b:75:1f:58:
ef:84:3f:ea:8a:9c:13:50:77:e5:c6:2e:82:0b:66:0c:2b:d5:
3b:23:ed:44:f0:84:40:60:08:d1:f6:69:68:92:50:9b:86:91:
cd:6b:c1:e1:10:86:98:44:d9:c1:8c:62:04:2e:e3:5d:b8:9f:
c1:86:04:b0:72:c7:b2:4c:58:c5:d5:4f:35:28:69:76:40:a6:
93:36:61:3d:ec:95:bf:f4:e1:4d:d7:32:43:44:8a:f9:ab:6d:
65:63:b1:47:30:0d:49:ca:84:a4:ab:e8:34:f4:3f:5e:6a:21:
79:bb:b0:24:67:73:cb:a2:40:69:27:46:ba:77:5c:b1:33:ed:
a1:06:99:76:fd:9c:a7:d4:a3:27:5d:1a:84:09:e7:6a:39:ce:
e4:49:d0:cc:38:cd:0c:9b:40:59:da:a7:b3:ef:43:46:57:9c:
41:d4:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:27 2025 by rpki-client