Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier: lnlmunMX7MpoNELRMYFuDzyM2hctfHW8OQB/YN7FpEg=
Subject key identifier: 47:34:8B:BC:C5:18:3A:0B:F4:06:53:E2:3B:F4:7A:28:45:A3:9F:93
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 01963508A175948EACB18C40BD538BB0E53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number: 14EE
Signing time: Mon 14 Apr 2025 16:01:20 +0000
Manifest this update: Mon 14 Apr 2025 16:01:20 +0000
Manifest next update: Tue 15 Apr 2025 16:01:20 +0000
Files and hashes: 1: EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa (hash: 9DLeiprUkEPr3xfx5ncHn6G4kT050WW6ahOVAnuzCHg=)
2: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: ACB8+EaN6T7viBup5KZWs+6VahRmYN1gsG1bctz/BNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:08:a1:75:94:8e:ac:b1:8c:40:bd:53:8b:b0:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Apr 14 16:01:20 2025 GMT
Not After : Apr 15 16:01:20 2025 GMT
Subject: CN=47348bbcc5183a0bf40653e23bf47a2845a39f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:62:f9:19:e7:13:bb:4a:cb:c9:ec:30:f8:
87:b5:a9:5f:06:e8:4d:8a:fe:ee:ae:1a:4b:1d:e5:
82:8b:8c:ba:4e:d4:0d:e7:21:2b:ce:08:f0:2b:ef:
1c:32:4f:2f:5f:4e:75:c2:1e:25:89:18:a3:51:b6:
d8:85:2d:de:52:44:30:d4:70:7b:30:cb:be:3e:50:
c7:47:88:f2:f8:23:7e:e3:f7:d8:c5:96:d0:55:f5:
66:88:c3:c0:0d:a9:99:3b:cd:cb:f7:99:af:30:dc:
24:44:be:4b:90:cd:1b:d8:27:f7:39:71:a0:15:56:
bb:c1:8e:a7:87:64:99:ee:78:05:86:48:93:29:1f:
eb:38:e4:a2:91:94:20:69:ea:6c:9b:71:c2:da:a1:
84:2b:26:d3:eb:e9:72:2b:b6:34:ef:1b:95:5e:bd:
ad:58:86:ca:d6:69:c7:4f:58:0d:2f:d0:25:28:24:
3b:81:cb:23:58:d2:2a:e3:27:3d:43:7a:1a:ce:ff:
89:31:f5:1e:1a:26:b1:7e:5e:77:6f:23:fb:4f:9d:
db:08:0f:50:29:1e:54:be:61:42:be:fe:01:21:63:
ab:c1:89:40:73:fc:91:ca:78:5e:23:fb:6a:b8:50:
c8:67:e2:8d:6a:e6:29:b3:4d:d2:d5:78:d5:d1:f5:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:8B:BC:C5:18:3A:0B:F4:06:53:E2:3B:F4:7A:28:45:A3:9F:93
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:73:ca:2d:ed:63:3e:91:64:70:3d:da:c3:55:50:72:e7:f3:
30:b9:d7:ef:5a:04:39:89:fd:1d:ca:92:54:d3:70:d2:83:43:
60:87:04:6f:1d:c1:85:9d:ab:45:7b:a8:34:30:a7:27:c7:de:
1c:92:35:1e:7e:a9:5f:8c:4d:54:e6:71:6f:07:70:45:31:91:
fc:e4:2c:1d:a0:4e:0f:da:2a:43:be:02:18:da:d7:ab:db:3c:
25:81:80:d7:cb:bb:f0:c7:5e:21:6b:38:5d:3b:ea:36:ba:09:
df:88:bd:14:6a:51:61:61:7e:f8:58:e5:2c:66:0a:21:b1:95:
85:dc:4b:3a:f9:88:41:36:ef:87:2b:b7:a7:c3:f0:ab:33:88:
36:51:78:ca:70:d1:7c:3e:ba:2f:0d:ea:b0:47:cb:c9:a6:e8:
7f:61:2e:1d:94:9c:8c:af:25:92:89:d1:60:e4:05:8b:0e:a6:
5b:03:c1:08:34:99:7d:d6:ee:a2:8e:8d:f1:d1:62:b1:bc:03:
f8:5d:d5:43:bb:1a:7e:bd:96:4b:de:e0:65:1d:14:6d:15:46:
9c:02:30:7e:47:f8:f0:5b:31:af:56:23:82:12:0a:d3:0c:42:
80:6f:5a:92:52:bc:44:66:d3:98:91:99:cd:21:d4:1f:c1:8e:
8c:03:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:59:11 2025 by rpki-client