Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: OSY8zptc7L6P6K4sf2hNLdL5lb8BX7q9i+FaxHZVv2M=
Subject key identifier: 69:01:A3:F9:84:75:A4:7C:3D:C5:E5:23:BB:D3:D7:DF:E2:C9:E9:DD
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01964FA37EC2C3143775D6A0CE1909B8902B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1508
Signing time: Sat 19 Apr 2025 20:00:36 +0000
Manifest this update: Sat 19 Apr 2025 20:00:36 +0000
Manifest next update: Sun 20 Apr 2025 20:00:36 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: wWikskF2hv0RKptl/M6KFba7XcgnD8L4S10fBomLsz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:7e:c2:c3:14:37:75:d6:a0:ce:19:09:b8:90:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Apr 19 20:00:36 2025 GMT
Not After : Apr 20 20:00:36 2025 GMT
Subject: CN=6901a3f98475a47c3dc5e523bbd3d7dfe2c9e9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:bf:2e:d8:b9:7b:45:86:e1:c9:f0:00:cb:
88:7c:55:7d:d6:32:0c:5e:58:07:7c:dc:11:a9:ec:
a7:6d:c2:5c:34:7f:7e:d1:7c:ad:f3:ee:3b:df:99:
de:da:e6:d0:44:e6:80:a2:9f:e1:df:c9:ab:7f:c6:
c4:f7:c3:2d:49:77:38:0f:21:51:07:b6:67:0b:26:
79:40:0d:66:9f:5b:9d:dd:dd:6f:98:ae:35:ac:b5:
57:1e:e3:63:1d:d7:66:77:e2:34:d7:a3:ff:e6:82:
fe:96:03:fd:ec:24:dc:e8:68:04:25:82:4b:d2:03:
ff:cf:88:7b:fc:f9:21:8e:6c:33:f0:8e:2f:63:f2:
e7:d0:01:49:ee:21:12:c9:0c:7b:68:4b:f8:64:d9:
9c:33:aa:cd:56:f3:13:ce:5d:82:cb:fe:8a:b3:4a:
ec:3f:7a:68:4a:f9:02:ed:7a:0c:e6:29:e2:bb:5c:
02:ab:eb:11:e6:5c:74:1d:d4:0b:54:ce:10:a0:fc:
90:5b:f9:63:32:fb:c7:f7:bd:8f:20:65:fe:0c:87:
5f:75:37:8d:22:ec:e1:4b:ce:8a:09:ef:e6:62:2f:
e4:03:85:84:4d:47:6c:28:ce:02:b7:03:7e:d6:ec:
f7:44:3f:a4:98:33:d4:b3:6a:75:1a:75:43:03:b7:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:01:A3:F9:84:75:A4:7C:3D:C5:E5:23:BB:D3:D7:DF:E2:C9:E9:DD
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:27:c8:42:ce:77:0a:c4:63:1f:bd:bc:29:75:29:0b:a7:
0b:6c:5a:62:7a:9b:92:c2:43:88:ae:3a:5b:c0:eb:f9:78:48:
8f:66:57:58:f6:c2:13:48:e9:14:1c:cb:25:85:3f:2d:c8:dd:
ab:61:65:49:1c:99:6c:56:57:7e:33:70:db:8a:c5:10:86:da:
2a:4b:db:db:53:2f:c1:7c:56:d7:6b:76:21:1b:45:cb:ab:0f:
58:64:ff:42:ae:91:a1:fd:2d:e6:c1:4a:70:a7:57:82:07:cf:
a9:64:ab:55:8f:cd:72:49:60:bf:72:63:9f:1b:f8:70:38:07:
bc:99:7b:6d:28:37:ed:0e:6d:42:78:66:87:f4:be:3d:59:5e:
86:0b:a1:1b:d0:7a:0d:25:f8:43:04:a1:b7:09:18:52:5a:f4:
e0:fb:b2:d7:d4:86:47:eb:bd:6d:09:28:19:1b:25:76:b8:3a:
5d:35:48:e1:69:a0:93:84:e2:c4:07:cd:7b:d9:7a:59:92:57:
53:8c:cf:c2:ab:29:4c:d3:7a:67:d1:9a:db:a1:69:a6:a5:41:
c1:6d:fb:6a:3e:b1:7a:62:f9:6d:f3:66:c0:87:c2:62:a5:4d:
d5:cb:0d:84:e6:2a:14:05:af:1c:0d:ce:4c:74:f0:96:bc:4e:
5a:f3:16:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:11 2025 by rpki-client