Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json)
Hash identifier: OMxp+TghRpEY1qhGyA0riVdZAaOXQ7J9NziccKuPqnI=
Subject key identifier: 8B:9D:2B:20:0B:0C:05:B2:23:36:47:50:B6:C1:EA:B1:25:05:AC:16
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 01965838D03A41115FE05B6D90E3986F5BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
Manifest number: 28
Signing time: Mon 21 Apr 2025 12:00:40 +0000
Manifest this update: Mon 21 Apr 2025 12:00:40 +0000
Manifest next update: Tue 22 Apr 2025 12:00:40 +0000
Files and hashes: 1: AD-andXzbsJQ6-EJVFm7YfqJqyA.roa (hash: EQKBZSFz17cerT07f9V2gKbXedpsxOfFN/33BYuE0nE=)
2: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: qId+4u8cRZyj4D67UgBAl/fDcq+75Ya+4sZdEh/OUo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:d0:3a:41:11:5f:e0:5b:6d:90:e3:98:6f:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Apr 21 12:00:40 2025 GMT
Not After : Apr 22 12:00:40 2025 GMT
Subject: CN=8b9d2b200b0c05b223364750b6c1eab12505ac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:d3:3f:4b:3f:c9:74:bb:f1:82:c0:97:09:
7d:46:09:0d:9c:30:bf:2f:e6:9d:ec:eb:c2:ca:d4:
a8:c8:56:45:6e:76:0a:a8:75:b6:6d:d7:55:5b:82:
09:b6:d5:ef:a0:62:62:77:53:eb:e7:96:06:13:70:
27:75:04:40:5f:11:91:cc:44:67:b5:96:cb:b3:1a:
d0:de:5c:c1:91:73:6b:6d:24:5e:1e:bd:30:3b:35:
78:15:d3:92:5e:83:d1:4d:e4:08:f6:a2:4e:30:9e:
6f:b5:39:d8:63:23:e1:32:e1:b2:19:1f:36:fc:45:
0a:76:97:76:6f:de:33:c9:70:c9:cd:dc:ed:f0:d5:
57:e3:0e:73:9f:ff:f1:86:44:af:d8:ee:ba:fc:55:
7d:7d:7f:d7:d6:7a:03:aa:39:4b:93:80:b3:d7:ec:
0f:d9:7b:d5:15:f3:e3:6c:14:74:01:d5:76:f1:b3:
12:fe:59:cb:f7:d5:ba:c4:00:cc:7e:8c:e8:72:86:
20:cb:33:a4:25:53:79:42:a1:b4:cf:f8:15:da:f8:
49:67:a6:5a:8a:86:75:55:21:c5:fb:0f:39:0d:9c:
8d:c3:fa:88:aa:a1:0d:80:07:0e:0e:eb:15:a5:f9:
e0:4a:be:b8:bb:1e:b7:62:4e:11:64:8d:7d:9b:5f:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9D:2B:20:0B:0C:05:B2:23:36:47:50:B6:C1:EA:B1:25:05:AC:16
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:33:68:07:ba:06:a9:75:f7:0b:a4:6f:16:41:0f:8e:89:9d:
43:a8:68:b3:c0:79:24:85:f6:05:7a:e9:a2:76:c5:03:dc:f4:
0b:c0:2f:1f:a4:67:3b:6e:d6:8f:6f:81:02:ff:d6:30:f7:9f:
fb:38:a2:43:33:1d:26:55:e3:bc:2c:3a:c3:6f:b6:8c:1e:86:
be:f0:7b:1a:db:5d:c2:ec:f3:08:69:84:d6:cf:ba:61:1f:fb:
9d:0a:e6:9e:e8:a7:ea:e9:ef:8e:75:bc:ef:fa:89:68:68:a7:
e3:b9:45:78:7b:38:5e:88:3f:be:b2:f0:d1:be:4a:ee:12:29:
d9:a1:78:b0:f0:b2:3c:b4:04:76:4b:96:58:00:63:97:dc:4d:
0d:1a:f5:59:fc:1a:39:f2:84:c7:91:02:9c:09:3f:47:f5:6b:
80:18:18:fa:96:14:b2:aa:00:46:26:e5:e6:e5:f1:dc:a1:7f:
70:a0:7e:50:b2:79:d7:48:34:5d:1b:36:5f:a0:c2:ca:ba:f4:
02:ac:5a:a2:81:3d:61:35:dd:e1:61:ae:a0:ab:c6:30:c8:64:
c5:89:56:bf:72:63:80:4e:e7:11:bd:5c:6d:91:c7:67:9d:d2:
fb:e9:05:5d:fb:41:ae:e7:83:f1:6e:7d:93:92:99:95:5c:cc:
d7:6d:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:04:02 2025 by rpki-client