Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: YVT0h1XnxAKTPOdyh1knVaTJJNdJThzgPQ0qDIitudE=
Subject key identifier: C3:CA:A0:6B:6E:F7:78:D1:FC:83:FF:82:6F:45:4F:26:0A:B3:40:3B
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 019651C917C237940986D933F6DFFB86D0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 06:00:55 +0000
Manifest this update: Sun 20 Apr 2025 06:00:55 +0000
Manifest next update: Mon 21 Apr 2025 06:00:55 +0000
Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: 4qI48KE288IdmOitDo6qLY2/HAdEBYiyupbwu0WwJHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:17:c2:37:94:09:86:d9:33:f6:df:fb:86:d0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Apr 20 06:00:55 2025 GMT
Not After : Apr 21 06:00:55 2025 GMT
Subject: CN=c3caa06b6ef778d1fc83ff826f454f260ab3403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:6d:44:b5:a1:01:2e:fb:9d:70:34:78:46:
dc:0a:f7:a5:af:8b:d1:ea:a0:24:f0:54:09:30:f6:
78:6f:c3:d5:2b:9a:c5:27:0a:20:29:70:f0:ca:90:
59:26:db:26:4a:7a:4f:3e:68:bd:aa:26:ac:3e:9d:
ad:17:69:4f:5f:97:4f:2c:71:b4:d4:92:98:09:32:
ef:e4:c1:a4:9c:87:bd:8d:fd:07:7c:a5:f6:69:68:
8a:21:4b:ae:0f:1f:c6:ab:69:07:f9:88:98:61:10:
09:62:46:3e:40:7e:0c:66:8c:7e:cd:df:3b:4f:68:
e3:21:79:e5:7c:fd:65:af:d5:41:27:2d:51:ee:bf:
f3:bc:31:8b:1a:bd:4c:62:a1:1c:c8:ad:d5:d5:c0:
38:d9:58:66:92:7d:2e:f0:00:d2:f0:29:99:f2:c8:
7d:7f:b3:11:b5:83:9b:3a:2e:93:6b:e1:01:b1:ff:
c4:8d:3a:de:b8:bc:44:a9:fe:85:df:64:f1:23:a9:
3f:0a:b8:1e:cd:06:09:0c:8c:dd:83:ba:d7:a9:c3:
c1:fc:5a:86:74:58:8b:12:03:c1:3d:1e:60:ad:85:
93:9d:01:61:86:8b:78:a4:7c:4c:c0:05:b1:fb:a1:
4f:60:d8:f4:23:94:b9:e0:55:b5:66:6c:e5:b8:3e:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:A0:6B:6E:F7:78:D1:FC:83:FF:82:6F:45:4F:26:0A:B3:40:3B
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bb:57:85:79:e3:e8:5a:f5:09:ec:76:bd:b0:31:db:ad:64:
9f:47:d7:bb:08:5a:d9:59:61:90:aa:41:14:8d:47:c0:1e:f5:
cf:c6:a1:22:ee:7c:75:54:fd:b6:f9:7d:06:8f:d7:36:9d:96:
ba:cc:3f:30:83:4d:72:b9:e9:f2:a5:18:ab:08:7a:b6:e3:5f:
ae:d7:35:e3:d8:a3:95:55:2e:26:1c:5c:ce:e6:ad:58:56:0c:
e8:54:e3:fe:ff:6b:30:76:7b:ad:45:11:ff:89:d6:83:21:ba:
6e:da:d1:45:e4:c0:98:5d:12:1a:38:ca:b8:18:c3:d0:30:e9:
95:af:a6:f6:2b:c5:df:0d:c2:00:40:6f:68:24:83:ac:8b:24:
c7:97:e4:97:9e:1a:98:b5:db:f6:66:aa:69:9a:d4:90:e5:dc:
f3:0d:f1:da:27:85:b9:ff:35:bc:13:8d:03:11:02:c9:23:da:
30:f0:f0:88:82:bf:1d:44:e2:29:cc:09:bb:cc:5f:7e:31:88:
ec:b9:2a:13:1c:d1:b0:ad:8b:dc:e1:2d:37:05:17:bd:fb:32:
84:8f:2c:1a:27:03:bc:19:60:4a:f7:c0:74:3f:27:7d:ad:a1:
8e:e5:99:c1:1a:d5:5a:83:39:79:dd:d6:58:25:3c:78:94:66:
cf:75:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:33 2025 by rpki-client