Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: QLy0AGkmGx84Vvho+fcodY/Q92EGLz17jaXdCVpHUHQ=
Subject key identifier: 0E:20:5E:D9:01:62:8B:25:A5:68:EB:67:7C:19:57:53:43:C2:33:06
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 01964AEABA498A2254F05668EB3E1517D31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 22:00:19 +0000
Manifest this update: Fri 18 Apr 2025 22:00:19 +0000
Manifest next update: Sat 19 Apr 2025 22:00:19 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: /Jw6L46UQ+LR+X5wH7vPkgdcZ8Fbbp8FQuQVpE+rzhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:ba:49:8a:22:54:f0:56:68:eb:3e:15:17:d3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Apr 18 22:00:19 2025 GMT
Not After : Apr 19 22:00:19 2025 GMT
Subject: CN=0e205ed901628b25a568eb677c19575343c23306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:ab:9c:0b:26:89:7a:87:a5:2b:57:73:38:
b5:f9:c7:c3:5d:b3:b6:e8:6d:2b:e2:f4:46:57:f9:
a7:fd:41:f1:25:76:30:16:28:a9:97:1e:e0:60:8b:
33:73:91:93:cb:da:5b:68:d1:1f:4d:ea:45:b4:b6:
82:9c:de:7d:c3:ca:14:fd:40:f0:ef:96:6c:5b:01:
89:ef:7e:f6:03:31:bd:81:1f:61:36:45:88:9a:b0:
7d:ef:42:f4:47:0b:e9:ea:8a:28:ec:3d:e3:33:08:
fb:a7:4a:24:3f:6d:f5:06:79:51:fc:da:ec:1d:34:
13:d0:0e:d9:e0:5e:b8:1a:5b:b4:b8:5f:bf:1e:91:
69:e4:43:40:1e:ca:bf:19:02:36:fc:12:6d:4a:99:
80:99:72:42:83:e8:b5:2f:c0:96:cd:0c:3e:4f:0e:
28:f5:d4:ec:b6:db:f5:7b:f3:13:0d:64:86:f1:87:
35:49:14:95:42:b6:80:a2:50:12:07:d2:3a:c9:29:
b7:76:5e:98:29:54:57:10:05:1a:01:67:ec:84:f4:
a8:d1:0a:8b:e6:e5:bd:48:6b:e4:d3:b8:a3:21:f4:
9d:3d:02:40:d3:7a:2e:be:70:6a:3c:82:b8:74:03:
c1:4b:59:91:00:55:d6:05:65:a6:2c:83:c4:84:f5:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:5E:D9:01:62:8B:25:A5:68:EB:67:7C:19:57:53:43:C2:33:06
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dc:8f:73:1e:e2:e0:93:ff:e4:e0:1b:fc:86:01:2d:2a:a8:
67:2c:5c:a2:0e:87:ea:0f:39:9d:5d:1d:db:a8:00:c2:f9:7b:
65:1a:2a:7e:ff:04:61:7b:4e:17:7a:bc:5f:ac:56:49:be:38:
20:f5:5b:c0:fe:ee:cb:ca:bb:dd:ea:a3:b4:55:40:e2:4d:d6:
f2:53:f8:da:64:91:97:d6:67:4c:af:b2:1d:b6:4f:5c:db:05:
0f:dc:5c:8a:5e:bb:4b:4a:ab:da:a5:2c:a0:22:a1:a7:9f:48:
8d:51:d6:61:16:95:c3:1c:da:8b:e8:e9:69:72:94:a5:ba:e1:
d2:06:0c:05:3d:b9:8f:66:82:2c:a4:89:60:ef:68:8f:87:57:
f7:f4:9a:e1:d1:d5:a7:bf:f3:3d:c2:43:07:13:ca:9c:63:2c:
92:cd:8c:b9:71:94:6b:db:a0:d7:bf:70:23:8e:8b:f1:22:81:
9b:e3:3f:72:1d:50:e2:a0:fc:f6:39:fe:f5:03:7a:a1:c2:23:
40:97:2d:f6:db:f8:5e:4d:dd:b7:01:e1:2f:24:82:0d:f7:c3:
6c:d7:24:1c:43:ee:85:bc:e4:8b:ec:e9:d9:95:1a:3f:9a:c7:
20:7b:c2:f6:8a:16:39:9e:4d:4a:7c:91:01:c1:50:86:8a:ae:
2b:f3:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:37:09 2025 by rpki-client