Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: kBY3cVsUf8T68QEti3Ae5zEx8Rm5FnwO6DeXtAR8EKM=
Subject key identifier: 8B:75:DF:CF:72:A6:BC:1E:B3:9F:A0:01:74:F6:D7:C3:05:7C:0D:7F
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 01964AEAD11A94D55BB39CD6B5244AE7759C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 0F2B
Signing time: Fri 18 Apr 2025 22:00:25 +0000
Manifest this update: Fri 18 Apr 2025 22:00:25 +0000
Manifest next update: Sat 19 Apr 2025 22:00:25 +0000
Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: ziq/TlFUUpauTRrl8gwVHld3WUAIhrXuTRdmLfLYKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:d1:1a:94:d5:5b:b3:9c:d6:b5:24:4a:e7:75:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Apr 18 22:00:25 2025 GMT
Not After : Apr 19 22:00:25 2025 GMT
Subject: CN=8b75dfcf72a6bc1eb39fa00174f6d7c3057c0d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:8b:db:49:25:f0:28:d4:2c:c2:f0:d7:c9:
95:48:b7:64:b9:af:19:03:48:42:4d:27:6d:7b:3f:
a3:31:05:ed:ba:70:eb:1b:29:bb:1a:1b:a0:b1:1c:
fc:aa:3f:89:fa:b5:20:dc:ed:e4:0b:9f:5d:41:41:
f4:60:29:ad:90:1c:cd:b6:63:73:09:3f:ff:90:07:
31:89:2e:39:5f:be:6a:e8:72:5f:8d:ac:7c:ef:36:
50:aa:64:9e:e9:f0:d7:2d:f9:1d:8e:21:1e:7c:55:
9c:76:e8:5e:44:a5:5e:d2:09:b2:e4:0d:bb:3b:4b:
7c:37:1a:07:44:c2:53:54:d3:17:69:ea:6d:13:76:
b6:3f:5a:06:1e:c7:d5:9e:cd:6c:cf:59:70:62:18:
48:fb:d1:51:d8:60:4f:11:b7:03:6c:1f:59:6a:92:
13:98:ce:c6:15:dc:b8:ed:a2:93:8e:b3:e4:75:72:
ff:ca:7b:59:12:25:fb:ad:ed:9e:17:ed:8c:6d:1b:
b3:b0:5f:9d:71:24:e9:d7:0c:df:c5:62:c9:f0:e1:
8c:a9:89:b8:57:61:f8:79:c7:45:91:22:d3:f6:8f:
b2:f8:7a:33:e2:b9:c2:d1:32:72:29:17:64:6c:ae:
28:34:a7:7c:7f:96:98:85:8c:6f:71:a6:47:f1:08:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:DF:CF:72:A6:BC:1E:B3:9F:A0:01:74:F6:D7:C3:05:7C:0D:7F
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:94:31:90:ff:17:bd:48:07:20:c4:1c:50:76:0f:a2:2a:e9:
8f:4a:88:ed:53:07:30:e6:f0:2d:d8:e4:97:6b:bb:9b:fe:6f:
b8:7b:a8:0f:21:d4:33:46:ae:f5:3b:6e:e5:fd:ed:ac:f0:7c:
eb:81:f8:a2:8e:06:e6:89:b7:06:55:46:6d:d3:99:c8:f6:52:
ae:0a:0b:ee:11:ad:1e:34:33:8a:c8:77:92:18:3b:cb:ab:d6:
86:9f:d7:93:8b:f5:f9:10:6d:91:85:5a:68:0b:54:5e:0d:d5:
d6:77:7b:ad:9f:77:be:e7:0f:39:dc:37:f9:66:8a:78:f9:39:
09:0e:cc:eb:f2:26:c5:5e:a4:3a:70:55:d2:6c:b3:93:6b:67:
75:4c:9a:7a:5a:c7:d6:79:42:7b:21:99:e6:1d:d1:72:8f:2e:
b8:68:01:ed:5d:2d:5b:c6:65:82:27:72:9d:eb:16:8c:be:2a:
c1:e3:c5:48:1d:d8:5d:13:ca:1e:9c:17:6c:89:e7:0a:a5:d7:
a1:b5:51:70:17:9c:17:3f:90:44:4d:04:1d:82:e0:9b:ea:36:
46:5a:0a:8d:c0:4b:b6:1b:a5:a6:30:74:5c:fe:35:14:3d:2e:
fc:62:2f:4f:a4:7f:c2:87:35:c8:7e:9e:14:71:9f:dc:18:94:
09:57:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:12:54 2025 by rpki-client