Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: nXmSDaecXVtjmA52OU3e0Qq2Vm3wEfIE4Mx8slUXXYs=
Subject key identifier: 86:49:63:33:15:66:F0:FA:9F:47:86:00:FC:BF:25:F0:0A:94:8C:C1
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019608D4469061063743495071D76FE099DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 148E
Signing time: Sun 06 Apr 2025 02:00:51 +0000
Manifest this update: Sun 06 Apr 2025 02:00:51 +0000
Manifest next update: Mon 07 Apr 2025 02:00:51 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: DAVN78Dkr43G47F+ro4LZFU4HiWk7bhD80M3HFEMPcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:d4:46:90:61:06:37:43:49:50:71:d7:6f:e0:99:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Apr 6 02:00:51 2025 GMT
Not After : Apr 7 02:00:51 2025 GMT
Subject: CN=864963331566f0fa9f478600fcbf25f00a948cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:8f:c1:97:b5:92:54:57:a0:63:f0:4c:70:
e5:14:8d:d8:c0:44:f9:fb:fb:56:63:a6:f2:16:5f:
45:e4:6a:57:db:cc:73:5d:77:30:e7:b6:76:51:bc:
75:bf:d1:d1:65:f8:19:03:f2:53:d9:9f:81:38:8d:
07:72:ed:8d:7d:a0:ec:ff:82:e9:87:22:9a:1b:11:
de:f4:a4:b1:e5:47:59:f7:61:25:b5:97:6e:13:25:
42:f4:2c:ed:cd:4b:06:d4:07:4d:59:c4:63:c8:fd:
54:5b:4b:04:10:eb:f7:01:5a:ab:60:68:90:e3:8d:
bf:34:87:04:54:e1:fa:4d:ef:d0:5f:20:85:3b:e8:
77:b9:18:d9:13:78:d8:29:a5:32:8d:46:ec:f9:c3:
16:ac:57:8c:b9:92:18:47:46:4d:2f:de:8d:8b:59:
e5:dc:c8:c5:ea:78:37:0e:75:fb:c3:e2:e7:04:93:
05:ca:bb:6e:f2:52:5a:30:72:87:95:e7:d5:72:cc:
09:16:c4:09:62:24:f3:c2:e2:2d:bc:07:1a:c0:db:
be:e7:ed:12:b5:be:38:e4:de:10:bb:b5:20:b4:cb:
7e:f7:bf:6a:8e:ac:73:7a:63:90:c7:02:d9:15:d1:
2b:a6:08:2e:5e:28:50:db:a8:53:57:3c:4a:4d:cd:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:49:63:33:15:66:F0:FA:9F:47:86:00:FC:BF:25:F0:0A:94:8C:C1
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d5:36:2a:c5:1f:e4:70:61:ce:f9:df:c1:9f:ad:64:c7:9e:
fc:98:7d:ea:90:03:9c:2a:6a:4a:93:0e:73:e2:a5:3f:f0:1d:
bf:f9:6e:ef:44:4f:77:cc:2e:3c:1a:41:ca:d5:55:01:59:a2:
03:f4:0c:1e:24:3e:d5:83:bd:bc:79:13:e3:ae:bc:1c:8e:b4:
a2:c1:62:31:88:51:5f:9d:18:c8:8a:99:a8:c0:7b:aa:da:f1:
3e:ff:d9:fa:8c:b7:b5:13:78:3a:a2:0b:d6:d4:d2:34:85:c1:
86:87:a8:82:dc:1d:da:74:d4:5a:bb:36:e3:8f:24:33:34:79:
9b:6c:6d:cb:34:96:6e:92:dd:bc:ee:4e:7f:11:6d:dc:08:45:
b1:71:b8:76:21:4d:03:fa:22:ec:0c:4b:25:8a:dd:05:93:04:
d3:b9:5c:aa:24:f8:0f:eb:cc:5d:f7:2c:dc:4b:d0:64:28:59:
ca:f8:1a:a7:c1:c3:8d:0c:96:ce:f8:c3:3d:de:88:62:45:39:
5c:44:9e:7c:d4:3b:49:7a:f5:a8:e4:4a:ff:f6:6d:e4:ff:df:
c0:88:00:19:da:46:7b:6e:7a:bc:c4:c8:e8:bc:99:10:ff:86:
ba:93:14:9e:2c:6f:d4:78:c0:39:7b:6d:fc:a0:e6:9f:4e:e7:
12:cb:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:43:02 2025 by rpki-client