Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: U58WXzHDA3BfSte8ZOVkPRZ02BKE2hquxME5WmW2CF8=
Subject key identifier: 09:C7:31:81:14:C2:19:81:D5:12:2D:8B:1F:FB:21:86:7C:38:58:81
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 01963F1D91B5DABC8BBBF5573F90FFED1623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 15:00:24 +0000
Manifest this update: Wed 16 Apr 2025 15:00:24 +0000
Manifest next update: Thu 17 Apr 2025 15:00:24 +0000
Files and hashes: 1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: z8oWS2Sh+NzpcsnqHHJIOcFMHZvoAOCZhYjm03QkQrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:91:b5:da:bc:8b:bb:f5:57:3f:90:ff:ed:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Apr 16 15:00:24 2025 GMT
Not After : Apr 17 15:00:24 2025 GMT
Subject: CN=09c7318114c21981d5122d8b1ffb21867c385881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:69:1d:3d:1a:5f:80:06:5f:27:38:39:00:
88:a3:ed:df:ce:e2:ec:f7:ee:8d:4a:45:de:46:a9:
22:18:a9:8e:fa:5d:0b:8f:74:41:7d:a3:58:40:cb:
83:91:36:89:5b:f3:3c:24:dd:ef:39:76:e5:57:54:
22:a3:ad:6e:34:e1:92:3a:0d:e2:39:97:3b:15:85:
a5:44:77:6c:7b:35:c8:80:b4:52:51:85:de:ba:83:
e2:41:58:37:6d:3b:a6:af:5d:39:dc:d5:ec:69:b7:
c3:51:64:2e:4a:ab:2c:d7:68:d9:b5:b5:0e:26:59:
63:f2:11:6c:95:fc:6a:5a:28:68:c2:55:41:ff:f0:
1a:24:f6:f5:9a:f3:17:86:6a:d8:6e:bf:e9:b1:fb:
ee:28:49:35:af:0a:d7:ab:bd:a3:1c:ea:e8:2c:c8:
99:35:49:c7:7b:f6:ec:e4:64:61:bd:14:8f:b8:66:
03:fd:ed:59:d6:30:ed:0c:e9:c4:f1:a4:0d:61:04:
e7:b2:62:a2:1f:43:5e:59:08:02:e9:b2:f2:59:ab:
16:d2:05:3e:22:6b:69:99:a9:80:36:db:d0:2d:c8:
22:b9:b2:54:84:cb:22:ae:71:75:d2:2d:0c:f7:a0:
d8:c9:7b:c5:c7:d4:fd:e3:26:ae:7e:54:f7:16:0c:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C7:31:81:14:C2:19:81:D5:12:2D:8B:1F:FB:21:86:7C:38:58:81
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:4b:eb:40:4f:c0:ee:2e:bb:ec:73:57:a8:da:d8:4a:ca:
bc:3e:70:f7:47:a6:50:1d:04:10:6a:38:e8:1e:0d:8c:b9:eb:
bf:c2:a7:49:97:31:2b:d3:9f:3f:f7:35:50:c6:f7:01:51:ef:
d2:a1:a4:ef:de:a3:5a:3c:94:d6:8e:1e:91:4f:67:3e:7a:f7:
67:21:0b:18:6d:d8:5a:26:ca:f3:c9:5f:04:9d:db:f1:81:d9:
ac:64:32:4a:55:ed:6c:06:cb:92:74:b0:e8:8e:81:d1:88:2d:
4a:14:4e:0f:95:c0:80:36:81:9f:36:57:42:65:ef:1a:b8:34:
2c:48:2f:1a:80:f2:40:6f:3b:28:d3:c8:e3:ac:d2:ab:a7:c2:
9a:82:0d:58:15:0a:4f:ce:2e:03:66:89:e5:ff:fc:7f:67:a1:
ac:55:ee:d9:54:7f:56:b2:95:29:bc:49:3b:2f:67:d8:01:38:
83:7a:6b:ce:24:97:61:46:3a:e6:44:ad:bd:a7:92:86:d7:d9:
4e:ed:64:63:d7:ef:f2:06:bc:42:8b:bc:9e:61:48:45:b1:4d:
1f:2a:f5:74:88:02:30:2f:f4:1a:e9:2d:d1:7e:a8:0d:c9:35:
5a:a8:da:7e:2e:cb:f7:34:db:3a:80:cf:2f:71:79:c8:c8:f0:
ce:ef:dd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:29 2025 by rpki-client