Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
File: SmO14kps7e29L-j2bXl6s9jqpMk.mft (raw, json)
Hash identifier: Xe6180pHiBqbofJG7ZRPVEu0RIpkySqk2ly1XfoJP/U=
Subject key identifier: F0:5F:33:A9:81:64:87:D8:6E:AE:9E:36:8B:8A:4D:17:CD:BF:5D:AF
Authority key identifier: 4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
Certificate issuer: /CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Certificate serial: 019611A1278CA5097A1D8C746338023DEFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
Manifest number: 14D5
Signing time: Mon 07 Apr 2025 19:01:36 +0000
Manifest this update: Mon 07 Apr 2025 19:01:36 +0000
Manifest next update: Tue 08 Apr 2025 19:01:36 +0000
Files and hashes: 1: SmO14kps7e29L-j2bXl6s9jqpMk.crl (hash: CdYNIEOdTA1DZFOSuRPD2Iv2gzGXsG+a+IrkctiPJgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:27:8c:a5:09:7a:1d:8c:74:63:38:02:3d:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Validity
Not Before: Apr 7 19:01:36 2025 GMT
Not After : Apr 8 19:01:36 2025 GMT
Subject: CN=f05f33a9816487d86eae9e368b8a4d17cdbf5daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:8d:b4:f7:1d:43:ad:6d:26:fa:f9:56:6c:
1f:a7:8d:d9:68:62:79:6b:90:f8:7e:28:05:df:58:
12:6a:90:3e:d7:5d:88:46:5a:5e:ae:63:7b:51:62:
9f:7e:a6:a7:93:90:80:46:df:2f:a8:52:c9:aa:4a:
e6:4f:10:a4:2c:27:88:4e:98:9c:41:fa:e8:7f:34:
c7:03:cc:2b:4f:61:c0:8c:9d:eb:eb:55:4b:5f:c7:
86:c4:38:c6:68:bb:eb:2b:0f:d9:2f:51:26:be:da:
3c:7c:9e:93:12:15:19:70:76:2e:c2:9c:f0:16:ca:
6b:c0:57:2c:f1:59:d6:03:d6:d0:9f:6b:5f:70:40:
2c:c5:c2:02:f7:a9:d7:cd:1e:11:2c:90:16:0b:14:
85:44:30:0e:8c:e4:1a:4e:59:3b:c2:d2:20:21:b6:
50:91:ba:97:4b:0c:3f:4e:b2:ad:fa:e5:92:56:42:
62:2b:c1:72:cf:23:9d:ea:b2:c5:b4:b9:10:c9:f5:
02:87:0e:ae:40:e4:53:63:84:83:03:70:ac:ec:ca:
b2:69:a2:d4:f8:9b:06:1a:83:3d:cb:b5:1e:67:a0:
44:6f:c6:18:9e:56:6a:61:2e:ca:f7:6f:0d:43:70:
91:5c:82:65:d2:bb:9b:4f:56:17:5d:41:89:70:e3:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:33:A9:81:64:87:D8:6E:AE:9E:36:8B:8A:4D:17:CD:BF:5D:AF
X509v3 Authority Key Identifier:
keyid:4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:18:98:02:2f:7f:ab:a9:a7:dc:34:40:87:6c:39:61:36:3b:
03:32:dd:61:c0:41:af:8e:a6:0b:90:1d:43:73:3e:59:26:ab:
6e:b1:d9:e7:f9:ec:17:01:a8:a5:8b:21:c9:1e:fc:6e:63:98:
36:21:1d:25:28:85:2a:39:78:7a:be:61:8f:ae:ba:bf:e8:da:
3c:a4:78:66:c4:07:76:30:77:1a:d7:94:f7:aa:66:95:1d:09:
74:da:fe:d7:eb:82:3e:9a:c9:5d:5d:83:ad:55:f2:0a:d9:09:
7b:65:56:05:af:6d:f8:23:c3:32:71:8c:32:84:47:06:05:29:
a4:cb:c9:52:a4:b7:82:74:2a:0b:bd:db:af:6c:83:08:23:f7:
c2:61:8f:dd:a9:b3:8e:64:64:96:94:ca:af:7c:c9:89:99:ce:
31:91:71:84:67:38:6b:d2:15:9a:32:d2:c0:9e:be:2b:c2:e5:
45:6c:2b:76:d9:f6:7d:5f:74:63:31:ce:40:d9:8f:ed:e8:87:
d6:7a:3d:b6:c9:58:77:31:48:c7:a7:53:b0:a8:b2:21:82:69:
d5:40:b2:1c:53:5a:77:7d:f4:c4:da:82:0c:47:65:4f:d9:d1:
f5:e7:bb:83:9f:19:b7:15:1c:c0:4e:e1:f0:9e:f8:6f:1e:14:
44:e0:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:54 2025 by rpki-client