Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: exyS4WAKIGGI7drF00IZpbsAZkQEj93eG++OX9QHJ+E=
Subject key identifier: B1:C5:7A:96:ED:2E:FF:30:F9:BD:31:4B:BA:44:60:BD:8A:57:78:75
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019650485366CAAC45A42322E1DC953D9CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 08DE
Signing time: Sat 19 Apr 2025 23:00:39 +0000
Manifest this update: Sat 19 Apr 2025 23:00:39 +0000
Manifest next update: Sun 20 Apr 2025 23:00:39 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: 1IgZSyjg4xKO7U2IyXnxtpdq1xcfZ4lD46Bl5s4W5sQ=)
3: vrYtR17Us0uRR4gxZn7liWGR4no.roa (hash: iPAbeEWSZ9JV1k70IoKGFIA+pbF0zGakCFdiJ4Nxk/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:53:66:ca:ac:45:a4:23:22:e1:dc:95:3d:9c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Apr 19 23:00:39 2025 GMT
Not After : Apr 20 23:00:39 2025 GMT
Subject: CN=b1c57a96ed2eff30f9bd314bba4460bd8a577875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:6f:87:d5:9d:65:da:1f:81:84:2f:f1:d0:
ce:25:fb:cf:f5:60:31:67:25:fd:a2:08:cd:b8:d2:
af:63:7f:1c:81:dd:be:3f:cb:ca:1a:33:c6:d9:d9:
86:72:fd:20:29:f4:dd:0b:a4:16:57:59:eb:54:ef:
ce:b2:00:99:31:53:66:0e:5d:aa:ea:be:d3:f5:35:
65:e6:3e:77:4e:73:00:74:0e:5b:e4:c4:35:b4:86:
54:c3:6a:5d:1c:7a:01:2e:dd:39:6c:44:4e:18:0e:
28:d6:03:46:cc:6e:f5:f0:5b:4d:6f:dc:ee:bd:ce:
ed:48:92:4d:2c:a5:7b:53:93:15:08:a1:db:07:ef:
df:07:4c:0e:a3:f4:ad:a2:fd:93:dc:cb:2c:c4:fc:
ca:2f:a9:16:00:7f:a7:21:f8:58:3d:4a:5f:4b:8b:
9d:c3:04:04:08:16:f4:62:83:15:75:db:a2:a2:c4:
44:9d:56:4e:f8:ff:28:95:a8:23:c2:fe:15:2a:e0:
08:6e:70:32:76:58:60:19:72:fb:35:a1:09:d4:e2:
f2:1f:40:da:cd:26:1e:50:d7:b3:24:6b:62:89:91:
b2:33:1e:a6:99:40:06:d6:0b:d4:57:76:87:88:ac:
08:ed:48:9b:79:4f:70:c4:79:e8:a5:b8:15:f5:15:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:7A:96:ED:2E:FF:30:F9:BD:31:4B:BA:44:60:BD:8A:57:78:75
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e8:9b:e9:d6:a5:18:7e:90:f4:b8:02:c6:00:04:44:4e:4d:
ce:7e:76:ee:37:56:f3:29:24:02:29:01:cc:92:b7:5f:84:68:
c0:d2:f1:e8:bb:06:15:f3:0c:10:2f:03:ec:be:ee:a6:34:2e:
c6:1c:20:e1:b1:cf:6a:b2:53:21:ab:34:08:61:0a:2e:3b:18:
4b:51:51:eb:51:57:00:42:cc:c0:65:10:81:dc:a3:79:e0:43:
c8:dd:a6:de:7a:aa:35:f1:7c:a2:ff:3a:29:73:88:ff:7b:1e:
3f:1e:4d:60:33:53:78:30:bb:3c:52:91:4e:16:46:73:d7:54:
a9:52:19:70:d8:ff:f0:4c:c2:54:99:72:ef:f1:b6:56:6f:36:
96:44:2c:af:71:87:31:2b:0c:9b:70:e8:ed:9c:3c:5f:dd:cd:
f6:f6:cc:6b:8d:df:f5:98:76:1a:14:ec:9e:de:9d:99:2d:ac:
18:e3:bf:65:e3:ba:06:3f:08:b5:a7:28:0e:92:2e:a0:79:34:
5a:55:c9:e6:ea:81:d9:f0:1c:86:a3:03:71:ed:4c:9f:28:d0:
a4:14:03:72:bd:ff:fc:53:c4:17:f1:57:87:d0:a7:1c:f8:7c:
80:f2:c3:3f:04:a0:9b:fb:a9:87:67:89:79:82:9c:8f:5f:62:
e1:f7:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:28 2025 by rpki-client