Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: CvfuIdrx6S5l7qnDAfP1CAk9sUR/7oktu7QX9dIK3A8=
Subject key identifier: 8E:3C:87:19:8B:1E:17:16:B8:41:66:41:26:21:7C:A0:65:34:7F:73
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 01964F6C4645A2C7BC66441033141CC606FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 0461
Signing time: Sat 19 Apr 2025 19:00:17 +0000
Manifest this update: Sat 19 Apr 2025 19:00:17 +0000
Manifest next update: Sun 20 Apr 2025 19:00:17 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: lNJaHQNQES7ZQetqYN6fjwL9kpaIECRVQeA2jWQsEL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:46:45:a2:c7:bc:66:44:10:33:14:1c:c6:06:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Apr 19 19:00:17 2025 GMT
Not After : Apr 20 19:00:17 2025 GMT
Subject: CN=8e3c87198b1e1716b841664126217ca065347f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:a4:53:3d:b7:2a:7f:6c:db:c1:12:10:67:
2a:9f:e7:f0:6d:b1:28:96:32:b6:9d:7e:3a:43:98:
f4:90:de:b1:00:6b:8d:59:24:c1:71:be:ef:97:5f:
96:45:6d:fe:1d:df:90:54:33:7d:a7:48:c6:b3:a9:
a2:48:39:f0:5a:ec:85:28:1c:2c:a0:71:b5:e8:ba:
89:6a:52:00:b5:9a:2a:76:05:f8:0e:b9:97:51:4b:
69:33:50:04:18:41:e9:d1:f6:47:70:7d:75:37:ef:
c5:d8:4a:80:bf:63:93:c3:28:fe:fc:49:e8:72:52:
87:42:cf:74:3f:5f:0f:77:76:c4:35:48:dd:e0:58:
dc:1b:20:3a:59:22:76:20:49:30:11:d3:ee:e5:c9:
ff:c9:ab:c7:3a:b9:c8:34:54:36:a9:1c:f3:0c:00:
2a:df:d3:73:8a:77:39:b8:b4:ba:7b:a0:8f:11:6a:
f5:9c:f7:4d:ab:b3:81:7b:a7:2b:80:2a:91:24:aa:
c0:8b:88:bc:4b:22:90:14:69:ac:a4:d2:b5:44:fd:
82:68:af:7e:09:94:33:b5:1d:7c:0a:21:38:26:c7:
bb:eb:c8:f1:2d:46:7f:29:71:4f:25:ba:f8:b3:21:
17:4a:e7:a0:b3:3a:07:67:d5:8d:5f:0e:fd:e0:80:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3C:87:19:8B:1E:17:16:B8:41:66:41:26:21:7C:A0:65:34:7F:73
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4c:61:6e:83:1a:63:85:7b:66:e0:8e:88:37:82:69:ab:80:
8f:7c:16:f9:a8:de:bf:cf:50:b7:b4:e9:5b:7f:aa:2a:b3:63:
f7:55:c0:d3:47:cf:fe:f8:10:d3:82:83:e9:00:d1:b7:7f:8e:
13:8d:2a:12:a5:17:6a:8a:04:74:92:e1:3c:af:d0:1c:43:bf:
81:8f:4c:c5:1f:5e:3e:9e:76:16:df:21:90:67:eb:8b:58:52:
05:22:5d:87:06:bd:ba:3b:63:59:20:89:49:48:1a:28:8c:ed:
ee:49:31:33:86:81:08:57:22:96:8e:31:01:38:88:6d:af:b8:
2c:72:79:9b:49:86:f9:d2:c4:45:9d:66:76:1b:03:86:29:00:
a9:24:a3:1a:32:bb:28:e5:fa:8b:be:14:1e:8d:3a:06:b2:71:
5f:65:a9:9c:21:52:6d:ad:3d:cc:23:eb:70:64:12:4f:c5:a4:
17:1d:9b:ce:17:48:67:7a:62:34:12:e3:36:e7:5f:5c:7c:e4:
34:63:5a:c9:0f:18:15:83:59:13:c1:8e:5b:54:61:04:fb:b9:
6c:2b:ea:26:1b:c9:25:a0:9f:98:e0:a1:01:d5:62:ab:72:e4:
17:a0:65:34:a2:68:23:71:c2:b6:fa:4b:3d:9a:ae:f0:3f:d1:
20:b8:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:23 2025 by rpki-client