Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: RGadWxUtYeNY8HJQ2ukuEdS0rC9/pY0ycSrXmDoG3q0=
Subject key identifier: C4:93:B9:CF:2C:5A:FD:5C:7D:A7:AD:2F:D9:CB:5F:48:26:34:5A:9F
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 01964CD97BC53C1857A754AF112D179E5316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 0FBD
Signing time: Sat 19 Apr 2025 07:00:43 +0000
Manifest this update: Sat 19 Apr 2025 07:00:43 +0000
Manifest next update: Sun 20 Apr 2025 07:00:43 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: PWGiY5E2LjWxYIzSr3Q1UL3noMezAbv80S8ps8rLYNc=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:7b:c5:3c:18:57:a7:54:af:11:2d:17:9e:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Apr 19 07:00:43 2025 GMT
Not After : Apr 20 07:00:43 2025 GMT
Subject: CN=c493b9cf2c5afd5c7da7ad2fd9cb5f4826345a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:c1:55:73:2b:57:05:be:b9:3e:86:2d:d1:
c8:61:e4:d4:ba:b7:cd:15:f7:80:cc:64:b9:d4:eb:
1b:3e:3e:2d:df:39:6f:cc:33:88:da:9c:3e:66:59:
7b:5b:40:7e:6b:84:a2:0d:69:0b:b0:ad:aa:d9:28:
fa:88:8d:e3:3f:6b:83:1b:a4:1f:bd:38:3b:d5:47:
71:72:04:d4:e2:ce:26:b6:5a:19:a6:36:21:fa:cd:
f7:76:c8:ce:1c:7a:d7:ac:f1:e5:ab:d9:60:ab:a2:
77:a1:c4:bd:01:87:ba:21:c2:40:4b:73:50:c2:1d:
85:d4:c7:58:e6:1c:af:05:5d:97:94:3f:c2:db:bb:
57:06:d2:36:7a:fb:a3:1f:2d:c0:c0:97:62:1f:7f:
88:62:d7:a3:72:f7:49:93:52:4e:31:f9:3f:41:eb:
d8:e2:9e:34:19:12:72:3f:74:08:e5:a0:dd:89:2f:
d4:ed:47:a3:f7:94:99:da:16:df:cc:4a:66:ff:62:
9b:24:3d:06:86:5f:39:8c:8a:54:36:81:62:8d:ca:
e7:5c:a3:0f:86:a2:04:bc:6b:63:97:28:c6:c8:61:
ee:2c:a5:ea:88:30:5a:f6:67:1a:de:7b:a1:00:f1:
3e:6f:96:f8:3f:ac:a0:c9:67:8d:a2:3e:eb:d5:70:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:93:B9:CF:2C:5A:FD:5C:7D:A7:AD:2F:D9:CB:5F:48:26:34:5A:9F
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:72:10:42:8d:d9:6b:9a:31:44:98:6a:c3:d5:ba:15:17:
1a:9f:72:20:c9:54:4a:7f:2a:09:a5:65:30:76:3e:de:92:e4:
ac:0a:da:8d:1c:24:d7:1c:72:e4:e7:73:97:f4:a4:35:6e:6b:
e7:01:2e:97:62:10:73:1e:bc:c0:ea:93:d3:bc:d2:56:dc:e6:
63:d5:3e:0d:5d:b7:2d:89:33:d0:11:97:87:0f:28:91:2e:52:
fc:13:1c:de:dc:d6:21:d5:3d:ca:f1:2c:86:c6:0e:d9:ff:42:
34:8d:a2:45:c8:05:06:54:26:99:34:5c:e4:22:a1:c0:c7:83:
eb:8d:c3:2c:49:82:a7:b3:9a:0a:c9:72:93:f9:0a:b1:7e:c3:
69:16:99:29:48:32:33:63:ae:e7:da:2e:22:70:51:ba:36:04:
de:23:ae:d3:15:a0:f1:97:ac:64:56:fd:69:45:1c:17:13:7c:
e5:73:d0:36:2e:19:f4:ed:7f:a6:7b:1f:e3:c7:4b:dd:8f:fd:
2b:80:77:e3:c3:99:50:eb:0d:97:8b:c4:49:1f:20:80:07:3d:
2e:39:11:fa:02:70:bd:c2:1f:8a:f5:87:eb:30:ad:ff:c0:25:
9f:ff:88:6f:fd:3b:84:f1:76:f1:a9:e7:2b:4b:7a:c5:9a:ce:
e3:04:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:29:10 2025 by rpki-client