Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: owBSmwNCWhikUJl3vpClWfo2QoFnRe7pmAEn0qKPlTY=
Subject key identifier: 5B:E2:A5:8E:08:44:2B:18:24:F7:34:A6:05:F5:94:C3:D8:3F:CB:90
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 01960D1F6FBA3D7F6F283D934F4CAD40D3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 09E0
Signing time: Sun 06 Apr 2025 22:01:26 +0000
Manifest this update: Sun 06 Apr 2025 22:01:26 +0000
Manifest next update: Mon 07 Apr 2025 22:01:26 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: fPoEdVKmSej96KPsa1aBegeBdIbiz7LMIAM4jqljlfg=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:1f:6f:ba:3d:7f:6f:28:3d:93:4f:4c:ad:40:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Apr 6 22:01:26 2025 GMT
Not After : Apr 7 22:01:26 2025 GMT
Subject: CN=5be2a58e08442b1824f734a605f594c3d83fcb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:8f:7e:d5:9f:ff:fe:91:d3:05:6c:ad:27:
d5:19:4c:72:e4:6b:99:97:18:4e:8a:f8:41:d7:a2:
b0:dc:7f:e0:f1:e4:98:85:11:cb:bf:e2:ee:d2:15:
78:8c:5c:87:19:78:4d:00:d7:09:3c:bf:83:de:68:
27:2f:ef:09:10:5a:3a:5b:e1:f4:e2:a1:2e:f0:ef:
3b:df:98:ae:6a:06:52:cc:a6:e4:d1:83:ee:a9:dd:
f3:11:9f:71:e3:0a:24:7d:9d:b9:a8:b3:b6:a7:6d:
41:07:c3:1a:38:2b:4f:55:23:88:3f:1c:8b:bb:b0:
c7:87:23:77:df:fc:13:ce:0b:a3:60:67:22:fa:3e:
41:46:d3:d2:b5:b4:b4:51:50:a6:05:9e:d2:4b:32:
00:ac:64:6b:1d:80:a3:dc:e6:e7:c5:ff:91:9a:49:
69:bf:ab:c9:d8:b2:2f:98:62:a5:17:63:c3:bf:8c:
13:06:bd:6e:d3:d8:3f:64:08:d1:ef:85:ef:8a:77:
0d:02:97:6c:24:90:d7:ec:de:a4:39:9a:6d:2b:cb:
86:b7:07:f1:8b:e8:b7:c2:4d:59:ce:e6:f9:c4:87:
10:50:54:3e:35:ad:ca:f4:ff:11:ff:5b:fe:dd:d2:
e1:bf:91:de:47:14:55:e4:32:86:a4:73:84:34:6f:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:A5:8E:08:44:2B:18:24:F7:34:A6:05:F5:94:C3:D8:3F:CB:90
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:6c:67:d0:3a:59:73:10:0e:e5:ba:c9:73:f8:95:e7:0e:
e2:35:b5:da:8e:1e:68:19:f1:ca:cf:79:fc:cb:20:e9:d2:35:
68:21:94:2e:0a:a5:0a:1b:76:7c:63:a6:30:82:82:21:08:de:
16:14:12:a4:52:53:58:5f:9a:82:4d:f4:8b:1f:39:7a:2e:8e:
7a:96:ea:5c:ef:e9:09:a8:8f:e1:e5:8f:78:ef:80:29:e7:78:
b7:67:84:3c:d3:0a:91:1c:d3:5d:aa:c3:ab:6b:48:63:ac:e3:
4e:36:34:ea:53:96:4d:5f:ac:38:27:da:15:0d:ca:5b:b6:b1:
72:ae:3f:26:ff:83:f9:3e:24:9f:55:30:3f:55:1f:d0:90:b5:
68:52:1a:3d:83:29:08:5d:4b:27:52:a8:69:13:c8:f8:38:4a:
f9:fe:7f:82:2a:51:0a:43:a2:d8:5a:ad:9f:96:50:b6:ed:1a:
d9:c1:53:da:b4:6e:bb:19:70:34:b4:4f:bc:3e:cb:56:7b:d8:
99:09:48:da:2f:bf:6e:7f:63:e2:76:4d:de:f6:dc:0e:0e:fa:
a7:90:58:31:af:25:c5:e8:2e:f5:cd:a6:03:21:61:f7:3e:fe:
04:95:cc:11:bc:fe:6a:39:82:c3:16:93:84:e4:6d:7c:41:9e:
7f:f0:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:25 2025 by rpki-client