Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: QkQkZ0NkcloT/WKb0GzxzRA4+RgCvP+lWWZD4iw5iuw=
Subject key identifier: 01:BB:95:37:F9:FB:7F:C5:C5:AF:1B:FD:32:6E:1B:0E:AD:B4:8B:AD
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 0196439EFE54672A91247061D0C86A9F22D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1286
Signing time: Thu 17 Apr 2025 12:00:15 +0000
Manifest this update: Thu 17 Apr 2025 12:00:15 +0000
Manifest next update: Fri 18 Apr 2025 12:00:15 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: Rk9zPXMlU22DNfcd9Qg6/imLtuevHY6YuATLRutVf94=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9e:fe:54:67:2a:91:24:70:61:d0:c8:6a:9f:22:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Apr 17 12:00:15 2025 GMT
Not After : Apr 18 12:00:15 2025 GMT
Subject: CN=01bb9537f9fb7fc5c5af1bfd326e1b0eadb48bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:04:6c:c6:8f:cb:30:e9:82:64:f5:da:30:
53:96:90:12:32:26:8e:56:8a:b5:6e:11:a1:28:3c:
e4:08:e8:0b:b3:d4:15:c8:ee:a2:56:be:13:91:80:
5c:25:6f:cb:35:0b:83:46:79:69:fd:88:a6:1a:57:
c7:d2:06:16:00:71:cc:ab:5f:57:dc:c9:54:b1:0d:
55:82:15:ff:a3:6d:c6:45:eb:a6:d3:81:93:f9:ca:
f1:17:9d:a3:b2:70:43:7a:4c:61:99:a8:9b:44:f1:
c4:b0:fe:93:93:1b:25:06:1b:db:03:c2:91:3b:ef:
20:78:d4:84:82:a2:a9:7a:7f:f0:61:0f:5d:79:0e:
dd:be:fc:77:9f:65:2d:27:90:13:34:c3:44:56:9a:
f1:b4:98:27:58:83:32:71:15:c0:82:f0:a4:54:c8:
36:eb:06:9b:45:76:1e:0c:a6:3f:7c:e6:e0:1a:93:
c9:14:80:c1:52:a9:97:e6:17:4e:6e:6b:d8:22:24:
62:1b:8b:b1:f5:84:ef:21:31:df:ba:84:61:e1:83:
39:4a:54:a9:64:89:68:cc:14:57:07:97:9b:1e:5d:
31:63:53:d3:04:f6:c4:8e:b4:cc:cb:03:9d:14:18:
5d:85:97:fd:e0:23:ff:b7:d7:2f:2f:d7:8c:20:9a:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:95:37:F9:FB:7F:C5:C5:AF:1B:FD:32:6E:1B:0E:AD:B4:8B:AD
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:37:cb:e4:19:28:55:4f:4f:d4:c4:1e:ce:db:fb:1d:56:d6:
20:97:d4:bb:e3:e7:53:76:d6:3e:bb:f0:48:43:07:21:b3:a4:
3b:74:84:83:cc:b6:ca:1e:d7:f5:a6:b0:34:30:15:61:cb:c0:
fe:7b:31:7d:92:33:45:b7:de:fe:3a:21:f9:3c:f5:4d:bc:0f:
3f:92:e8:ad:64:89:9f:72:fe:57:1e:30:ed:ea:bf:f8:28:9f:
80:75:79:fb:c5:55:cc:ef:24:21:c2:e3:50:91:f1:34:54:d1:
94:6d:b9:13:68:c1:74:59:aa:96:f3:c9:c2:59:52:51:47:44:
3e:6a:c9:a9:15:97:ff:25:c8:d5:87:29:75:b4:9e:95:9f:8a:
24:ae:92:9b:ed:74:fb:d7:88:0f:9f:04:a4:bf:2e:8e:b8:4f:
fa:89:1a:7e:40:15:f7:2c:b6:87:48:42:86:ad:6c:60:1b:93:
9f:b6:f2:65:1a:5d:c8:c8:3b:bc:c0:11:ee:03:91:1c:2d:b2:
6d:35:01:f5:59:51:15:c9:b7:b6:55:ed:c1:a7:9b:83:19:92:
e2:0e:b2:a2:a9:96:7f:0b:21:3f:90:b8:75:2c:76:fc:76:27:
68:74:1b:70:38:ec:4c:9c:cc:fe:8b:c2:b6:e1:dd:be:36:b7:
35:1c:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:39 2025 by rpki-client