Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: cHWCZGuziqQUy3ceFy6Hy5ol7O0WNXde0qeJ0Zw+yaU=
Subject key identifier: C8:46:A4:27:D1:9B:14:87:62:63:7A:34:75:22:B1:2A:81:5F:ED:DA
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 01964D7EB3A8F5608635F462F28607056084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0C95
Signing time: Sat 19 Apr 2025 10:01:11 +0000
Manifest this update: Sat 19 Apr 2025 10:01:11 +0000
Manifest next update: Sun 20 Apr 2025 10:01:11 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: nKMrFWHahV/RS/VDsKefTtwTaSItLwmJHYu/Ve9BCB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:b3:a8:f5:60:86:35:f4:62:f2:86:07:05:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Apr 19 10:01:11 2025 GMT
Not After : Apr 20 10:01:11 2025 GMT
Subject: CN=c846a427d19b148762637a347522b12a815fedda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:97:06:a9:17:1b:16:83:77:1c:df:a7:c3:
8f:3a:17:34:5e:36:3f:70:7d:2a:e9:d7:80:22:ad:
ee:0d:23:14:cb:1f:0c:45:9d:a4:4b:9f:0f:58:cd:
8d:7d:2b:82:b1:1e:a9:06:ec:1c:c4:e8:f9:77:f3:
da:fc:10:4c:67:7c:a3:a7:f9:08:aa:d5:a8:c3:38:
a1:b3:18:6b:d1:fa:43:95:37:bc:09:da:f0:5a:19:
8e:5f:82:63:71:08:aa:e5:a4:19:6d:1b:42:d6:29:
e8:49:56:70:47:36:d8:0e:38:4b:75:64:97:4b:8a:
18:cd:b1:72:1f:ef:ec:09:7e:c0:48:16:c6:23:fc:
2c:65:4f:b8:d3:70:c6:53:53:08:3c:36:1a:4c:f4:
4b:25:45:2e:28:cd:6e:52:8e:4c:ca:85:78:92:9b:
26:e0:e7:5c:4b:76:ca:3d:f0:1f:18:58:19:1b:6b:
be:54:59:f3:94:c0:9a:f3:13:c0:41:24:ff:40:9d:
00:bf:03:2a:93:95:66:0c:08:93:7e:4d:8f:7f:80:
07:1b:d5:63:47:d5:aa:0a:6c:75:7d:52:d4:6e:33:
26:12:34:f7:8c:2e:39:e1:e4:be:e5:42:0e:24:c0:
db:86:de:a8:1b:0f:40:66:18:57:42:a5:af:f7:82:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:A4:27:D1:9B:14:87:62:63:7A:34:75:22:B1:2A:81:5F:ED:DA
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d6:2a:fb:a6:5e:bc:e3:70:70:81:ba:f3:a5:81:e5:a6:2b:
13:77:46:98:78:47:bc:95:f5:a9:ee:1c:4e:fb:8f:d7:7e:91:
cf:44:86:fc:d1:8e:77:89:ef:e3:c2:5f:f6:7a:e4:84:34:04:
78:d2:4e:70:01:92:ae:48:79:42:db:7d:a9:d9:7d:06:a8:04:
ab:b1:d7:d1:5f:b0:ee:42:e2:13:cb:e6:df:b6:92:b9:10:e4:
48:d4:ea:04:41:76:b1:73:33:96:bc:28:18:67:89:ce:b3:90:
dd:a3:00:a0:d5:c4:77:bd:fa:5e:3d:18:ab:a2:f4:5e:fa:82:
49:a5:4e:9e:f1:6d:3e:5a:ae:41:b0:ab:fe:0d:bb:14:48:a3:
34:7f:e3:cf:69:91:b0:ac:35:32:2e:f0:01:34:80:6c:6c:08:
c0:31:7c:ef:9e:4f:66:f9:16:55:55:27:1f:8b:3e:df:03:2d:
4e:02:ff:5e:35:89:19:24:aa:67:5e:c8:20:c6:be:80:68:ae:
a3:6f:90:61:dc:a3:fd:4b:98:a9:d0:89:02:42:09:4c:84:3a:
be:09:22:46:06:94:4d:db:9d:e4:1c:55:54:99:86:2e:fc:84:
90:3c:dd:67:4d:c2:e6:aa:d9:3d:c2:75:9a:9a:76:c2:6f:a3:
1c:d9:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:45:18 2025 by rpki-client