Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: aae6Yvms+X4BoaUNSjuK3OEUQs69joXc26AONRKFmGk=
Subject key identifier: B5:06:3B:10:F8:8A:B6:2C:86:6F:0A:93:FE:42:9F:71:8D:09:35:38
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 0196564A7C133DC1D79D380E5896A0509984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 097E
Signing time: Mon 21 Apr 2025 03:00:44 +0000
Manifest this update: Mon 21 Apr 2025 03:00:44 +0000
Manifest next update: Tue 22 Apr 2025 03:00:44 +0000
Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: mTM8NTY5O/5XRDW+9n1zKVMtvFP+4SuO+ElhOuVZv8g=)
2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:7c:13:3d:c1:d7:9d:38:0e:58:96:a0:50:99:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Apr 21 03:00:44 2025 GMT
Not After : Apr 22 03:00:44 2025 GMT
Subject: CN=b5063b10f88ab62c866f0a93fe429f718d093538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:7a:96:b3:cc:72:60:60:9c:dc:2a:e5:3d:
2a:ec:f8:ea:42:5a:f9:7d:41:be:80:1c:64:e3:d2:
6e:8a:23:14:91:37:60:7f:f9:5c:6c:e6:b4:c4:36:
1e:b8:99:13:52:9f:6d:46:5d:99:70:3f:6a:58:4e:
aa:7b:56:c8:e9:26:0c:3e:34:ab:ff:f4:71:44:f0:
8e:d0:82:00:63:da:51:a6:39:2a:0a:bf:f8:c6:13:
cf:4f:b4:3a:7e:83:0a:9a:6f:f9:3f:48:d4:77:ef:
ee:23:ab:5d:94:e5:eb:aa:74:92:41:07:7c:b4:c6:
9d:58:ac:f4:1a:76:82:3c:54:34:1f:c6:24:b4:c1:
44:d5:c5:3c:d3:bb:a6:cd:b9:51:a4:18:5d:da:26:
55:5b:00:96:e7:b0:cd:cf:3d:c6:2e:ea:31:1c:1e:
8b:7f:f3:c5:05:fc:8d:28:3f:3e:ef:c0:c7:5e:57:
8a:7f:f4:be:5d:6e:17:4e:3e:30:ef:9a:ae:24:df:
58:f2:d6:fd:55:6e:90:c6:ff:0e:74:70:94:39:d6:
18:69:fc:a7:cf:d5:94:eb:fe:ca:38:a3:53:f0:f6:
f7:94:1a:c2:b1:15:31:52:c4:bd:c9:f5:24:a7:05:
17:ce:cd:9f:8d:e3:eb:3b:e4:90:b0:0b:69:5c:23:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:06:3B:10:F8:8A:B6:2C:86:6F:0A:93:FE:42:9F:71:8D:09:35:38
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f8:67:ca:10:ac:29:38:b1:43:d4:fc:40:c3:54:f2:92:29:
fc:10:ec:62:90:7b:4b:e6:1c:b5:57:f9:19:32:c6:5b:35:b8:
4f:ba:89:79:73:79:24:51:a4:e2:47:8a:03:e5:d7:5d:39:76:
82:ce:61:14:da:99:e8:e5:6a:1e:0e:08:0c:f0:19:3f:1f:9d:
49:01:96:2e:03:6b:32:6e:19:83:b3:da:fb:36:51:71:5e:f5:
c2:d6:8c:30:eb:c8:41:f0:85:67:9a:f2:b7:81:2f:58:07:75:
b7:17:cf:8e:61:bb:ff:e3:d9:b2:d6:aa:8e:53:bd:df:30:a6:
b5:b3:c9:bc:3f:de:6c:98:de:7e:45:2f:b1:a0:c8:6b:b5:1c:
df:40:3c:79:f1:86:48:3f:c0:29:c1:43:e0:11:47:f7:87:88:
71:da:73:3a:ce:fc:ec:79:21:f6:1a:8a:f3:19:0a:25:d3:91:
1f:d0:81:0b:5b:59:40:05:31:da:7f:6d:65:9b:a2:55:76:aa:
47:d7:54:f0:6b:24:e4:5e:e7:9e:13:49:7c:4f:ca:f1:01:25:
08:dd:57:13:c0:85:7a:75:13:68:2b:4c:cc:43:03:02:63:5a:
07:62:f5:3f:ce:77:e9:f2:7e:06:e7:be:c4:7b:5e:9d:a7:31:
fa:21:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:22 2025 by rpki-client