Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier: GoKQAhrjwh/frsEEoRFaxTDVqaYyejD9HHhEXZz7l7E=
Subject key identifier: 93:FE:E2:11:5C:82:D3:84:38:22:8F:E3:E1:04:A3:96:9D:A2:01:5D
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 019654251058D58BDE0DD2D05467E5121046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number: 134B
Signing time: Sun 20 Apr 2025 17:00:37 +0000
Manifest this update: Sun 20 Apr 2025 17:00:37 +0000
Manifest next update: Mon 21 Apr 2025 17:00:37 +0000
Files and hashes: 1: N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa (hash: ieg3VFvZTZIlfpmG2a/ZhByTEF92xOsm5jd+caG7KwI=)
2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: BQe+cVdR2Ps2tG6QiQSn3KfZQiAliYSoUKc9gK6OMNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:10:58:d5:8b:de:0d:d2:d0:54:67:e5:12:10:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Apr 20 17:00:37 2025 GMT
Not After : Apr 21 17:00:37 2025 GMT
Subject: CN=93fee2115c82d38438228fe3e104a3969da2015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:6f:a8:a0:ed:87:70:5b:3f:7c:1e:cb:0b:
7c:47:d6:f8:83:bd:71:cb:35:13:d1:41:2b:17:a8:
af:2a:91:42:6b:b7:ff:d9:73:b4:a7:cb:e6:04:97:
e0:69:e2:3d:20:a9:4d:e7:68:6c:29:9a:df:fc:01:
c7:eb:44:1b:6d:c4:45:2c:66:e1:a9:5b:1e:2d:a7:
4c:6e:30:62:ba:2c:0e:8c:c7:d4:87:70:ea:7c:53:
70:d2:e5:13:15:2b:35:8f:dd:85:68:11:c6:ae:ff:
fb:af:24:cf:8b:02:eb:05:ea:b8:16:1a:a2:47:9f:
95:e4:87:d1:ba:6e:02:b8:1a:5b:fd:fc:0f:4a:c7:
8d:3c:b8:6f:fb:09:0b:27:c2:73:ee:fc:5c:8e:3d:
cc:f1:04:0b:ee:e7:22:3c:0b:4b:77:04:90:df:1b:
5f:d4:d2:b2:69:38:4c:06:47:b3:45:f8:a2:40:bb:
a3:28:69:df:15:b5:f5:54:f0:56:ed:a2:8c:19:dc:
e1:43:78:ba:ac:1a:97:c7:6b:b2:96:c9:5b:a8:49:
99:ee:83:8d:70:34:87:47:a2:2b:0a:0a:d3:65:ab:
b0:d7:dc:f0:a9:0a:f9:5e:db:af:da:55:5a:17:72:
c2:cb:bf:83:f6:e1:07:6a:a3:6d:ea:4d:1d:f2:e0:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FE:E2:11:5C:82:D3:84:38:22:8F:E3:E1:04:A3:96:9D:A2:01:5D
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8f:81:a1:69:6c:6a:bc:e0:d2:ed:b3:64:0b:2f:97:d7:11:
4e:30:60:aa:26:19:e0:6c:b0:2d:b3:f3:7f:c9:40:f6:6b:33:
b8:71:82:0b:39:56:2e:cb:84:88:3a:7f:34:6d:37:c0:e5:55:
fc:0d:04:f2:71:16:f7:09:a6:60:de:55:ae:4a:5d:27:8a:2c:
d2:d4:2c:13:51:92:24:2d:f8:bd:1f:75:f8:e8:37:16:f0:b9:
2b:97:e5:29:27:e8:46:26:c7:bf:f4:93:21:00:d6:65:2d:05:
6d:37:c8:41:41:6e:d6:42:d4:40:cf:8e:ed:c2:fd:53:df:5d:
fb:82:9c:e7:8a:cc:5d:f1:54:08:bf:7b:5d:7a:22:5e:0b:3e:
a3:08:63:d8:d3:11:fe:a4:08:35:84:03:e0:64:64:7c:98:0e:
b1:fa:65:1a:fb:66:fb:02:73:20:98:83:5e:7e:03:d4:3c:72:
cf:18:53:27:56:56:90:5c:e1:a9:33:28:1e:9c:ab:06:c3:3d:
1b:c5:c8:ac:9c:95:e1:ef:7f:c9:6a:6b:41:ea:24:e7:94:f8:
a6:1a:b3:02:0b:0d:00:28:8b:08:5d:5e:99:4a:cd:ad:d8:82:
95:e0:a2:8a:fa:7a:f8:ae:39:76:65:02:92:59:1e:2e:7c:ec:
f8:5c:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:25:59 2025 by rpki-client