Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: 5qT7//j9VbpObEoiygjasDuiKr+8GU1Uq+wqRiPAXfU=
Subject key identifier: C2:41:E8:DF:B3:5E:8D:B1:5D:05:49:7C:F2:3F:78:A4:FA:0E:E8:5A
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 01964EC81D318052F910A2E79B5BD9EA207C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 1224
Signing time: Sat 19 Apr 2025 16:00:59 +0000
Manifest this update: Sat 19 Apr 2025 16:00:59 +0000
Manifest next update: Sun 20 Apr 2025 16:00:59 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: LmTh+VCz5xtGmJ+AHJ0/axOjSAWjJie3P9p6NAzYbQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c8:1d:31:80:52:f9:10:a2:e7:9b:5b:d9:ea:20:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Apr 19 16:00:59 2025 GMT
Not After : Apr 20 16:00:59 2025 GMT
Subject: CN=c241e8dfb35e8db15d05497cf23f78a4fa0ee85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:bd:a2:ac:7d:de:2b:b8:55:6e:fc:2e:c4:
9f:9d:ca:51:d1:69:7b:38:a2:56:80:c0:f0:0e:23:
26:5f:7b:7c:a4:7b:ee:bb:3d:d2:92:af:47:f8:6a:
26:32:d6:27:ad:99:46:f9:75:b8:1c:94:17:6e:99:
1c:84:7a:eb:ad:34:e6:68:08:13:ad:e6:36:27:68:
c7:aa:98:76:5e:77:6f:3e:42:79:02:08:d1:80:ab:
c6:71:56:ea:bb:37:ef:62:96:13:01:ea:12:db:90:
38:e0:5e:cd:59:3b:db:05:e7:59:44:5a:08:61:b2:
e4:1d:f8:10:ff:17:e4:59:ce:2e:e7:29:9a:f8:e5:
f8:75:12:f5:14:00:3e:f4:ad:38:5c:e4:bb:43:9e:
7b:71:6c:40:ca:92:9c:e6:ec:84:8a:9d:3c:f5:0b:
a8:e7:f6:3e:a9:98:37:9b:b9:4d:79:ed:17:90:73:
cc:96:0a:5d:c5:5a:29:f1:2f:0d:c5:c9:d0:a5:c1:
67:ec:23:a1:0c:3c:05:15:e7:ed:4f:8b:c8:c3:d7:
3d:58:f8:4d:c9:63:da:b0:92:a3:41:84:a9:4b:89:
3a:42:c4:7d:3b:1a:3a:59:e8:47:cd:65:01:e6:84:
f5:8b:56:b3:6d:8f:36:31:ed:3f:95:16:13:50:ce:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:41:E8:DF:B3:5E:8D:B1:5D:05:49:7C:F2:3F:78:A4:FA:0E:E8:5A
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:31:f4:fa:c4:1c:b8:83:fc:47:34:5c:f1:ef:57:f2:39:c9:
35:1b:f8:16:70:00:14:88:dd:32:8a:cc:f9:01:ec:d8:61:a7:
cd:9b:46:e1:d0:0b:e3:c4:48:ce:e9:26:74:c9:f6:62:9e:60:
19:d1:03:5d:c1:35:71:33:f3:5f:27:c9:af:54:ad:d6:7f:f8:
87:ab:1a:16:65:69:df:a5:45:37:7b:41:63:15:d5:85:30:bb:
c6:b8:97:db:19:40:e8:04:33:86:7e:6e:6e:54:3f:f1:f1:ab:
7c:02:8c:c9:a1:2a:a5:e6:04:05:d1:4b:1f:fa:f9:e8:93:0e:
6b:a2:92:c9:ce:d2:63:7d:5c:40:8b:a9:6f:b3:29:9a:0e:bf:
75:9d:d5:b9:15:98:50:06:7c:69:66:98:a7:bb:eb:f6:22:a7:
3f:44:c2:eb:ee:99:c3:65:2c:de:3f:5b:ae:46:78:3a:e4:91:
3e:15:45:2b:25:8e:c6:55:ec:26:80:99:dc:3a:76:87:7d:f1:
73:4b:40:e7:42:7d:db:e2:57:53:41:2c:17:22:df:90:ee:83:
c7:af:b5:6f:65:b0:26:c7:52:68:f3:08:91:87:15:1f:dc:2f:
0f:21:d0:34:0e:1e:7b:94:cc:19:29:84:53:da:bc:a9:8b:f8:
b8:00:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:17:22 2025 by rpki-client