Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: 6ybPRZ9sibuDB49TII4byG6E3QlLEIRNKBVjs+0nQTo=
Subject key identifier: 02:56:3F:78:01:BB:B1:45:7A:E7:78:DE:5D:24:14:64:2B:CD:8E:8F
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 01965EDFEC1C76B62472E27AD26BAB0FBEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 19:00:55 +0000
Manifest this update: Tue 22 Apr 2025 19:00:55 +0000
Manifest next update: Wed 23 Apr 2025 19:00:55 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: A0ul5Nsxdgt8Dp0HuEEgqjY4+ys72VwZPwNUUzVbutA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:ec:1c:76:b6:24:72:e2:7a:d2:6b:ab:0f:be:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Apr 22 19:00:55 2025 GMT
Not After : Apr 23 19:00:55 2025 GMT
Subject: CN=02563f7801bbb1457ae778de5d2414642bcd8e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:57:24:43:2c:a9:9a:cc:08:4b:94:6b:cc:
e0:14:f5:c0:e6:f3:0b:f6:7a:f9:83:05:60:45:a3:
b9:cf:3a:6b:36:fb:74:b6:4c:bf:e1:29:89:d5:14:
25:56:c5:d7:c6:80:df:d5:a6:c6:f6:e3:88:40:86:
1c:72:26:c0:1a:ce:14:8a:e7:e2:43:88:9d:18:1e:
b4:2b:3b:23:f4:c2:51:52:c4:ac:db:03:3e:89:47:
bf:f9:01:c9:35:76:3e:f3:ba:de:a1:66:e0:16:0a:
01:59:6d:63:46:3f:f6:2a:fe:6c:e4:68:9d:12:1d:
66:1f:53:5b:d4:81:27:ca:f8:cf:9b:c1:04:4b:77:
55:51:d0:79:11:63:f5:1f:83:ba:06:9f:f6:49:b6:
de:e0:33:1a:c6:f9:b4:0c:a6:56:d5:d9:77:45:1d:
9c:9f:62:5b:f2:2e:46:02:7f:02:71:3f:98:20:53:
02:27:b5:01:32:50:15:1f:59:8e:68:71:d5:aa:b8:
d2:6a:05:ba:13:15:55:61:23:70:4c:d2:34:d7:95:
ba:0a:a0:92:1f:dd:4b:e0:d5:42:71:ff:3f:60:5d:
26:3f:90:91:37:a6:31:6c:30:29:2d:0a:91:9d:8a:
7e:6d:20:2c:ad:25:3e:d5:fa:2e:7b:b9:22:c7:b3:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:56:3F:78:01:BB:B1:45:7A:E7:78:DE:5D:24:14:64:2B:CD:8E:8F
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:01:e6:99:ca:8c:e3:24:d0:1f:0a:06:50:32:2f:e0:de:29:
1d:2d:43:98:6e:f7:87:1e:6c:f4:51:3b:be:8b:df:4f:5f:26:
3b:22:a4:b5:95:c4:86:a9:f1:a8:61:6d:3f:9b:ce:5d:4f:46:
98:58:12:09:46:e5:23:9d:f7:5f:ee:1f:2a:01:7d:54:c8:31:
50:0d:09:86:a7:1e:fe:22:59:d8:f2:cc:72:a7:ee:ae:a8:ff:
00:8f:93:09:3b:78:8e:a2:85:66:43:79:87:c8:99:fd:bb:03:
9c:58:97:0e:13:5f:4b:e1:e7:b9:17:89:cb:80:92:2f:61:2a:
a3:ae:73:6a:73:a1:df:64:c3:ae:f7:47:d5:a4:e9:4c:30:ac:
ac:e2:f2:12:bb:55:55:3d:eb:20:36:ec:36:3b:1a:3f:c7:24:
a4:81:d6:01:63:98:81:a3:40:61:c2:9a:88:3a:de:15:65:dc:
df:ff:fe:09:d1:2e:86:31:47:5e:1c:45:5f:a7:a0:e1:e9:2f:
d9:e5:0c:c6:d3:8e:71:28:35:db:c9:82:fa:26:b1:04:1e:bc:
cf:3e:04:0f:0e:f3:c1:28:7a:df:12:5b:91:3e:de:aa:82:69:
89:13:1e:d9:f5:bd:d5:93:c8:43:c7:b3:0e:fa:9d:a4:a1:ab:
9a:cc:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:33 2025 by rpki-client