Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: 2GJxz1Qp7DuWJibGSNVY6OeDUdSNnfy+xC6gq6gE3eg=
Subject key identifier: A7:18:00:13:D9:C8:6A:0D:1E:98:0D:96:DD:9C:3B:D3:14:08:69:B9
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 019652A487BB71FFEBE0B5643FBC0C83F31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 0DD3
Signing time: Sun 20 Apr 2025 10:00:36 +0000
Manifest this update: Sun 20 Apr 2025 10:00:36 +0000
Manifest next update: Mon 21 Apr 2025 10:00:36 +0000
Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: MxD8l5JCJtnjBdZ88vpJ3zmTgB6NsUgRLzXcvPjsrPw=)
2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:87:bb:71:ff:eb:e0:b5:64:3f:bc:0c:83:f3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Apr 20 10:00:36 2025 GMT
Not After : Apr 21 10:00:36 2025 GMT
Subject: CN=a7180013d9c86a0d1e980d96dd9c3bd3140869b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:dc:ad:13:be:21:d2:73:2f:a6:05:b7:f8:
42:5a:b4:b3:2b:2e:97:9b:f9:77:ad:4d:14:7a:41:
d8:17:ce:df:cc:5b:05:3a:ce:01:0a:e2:5f:66:cf:
72:1d:45:73:42:44:5d:60:f4:c2:1f:e7:39:46:b6:
64:f7:b8:82:51:6e:ff:43:87:78:f7:2a:c3:3c:98:
fb:8c:f8:0b:a9:44:74:22:8e:18:56:45:6c:db:1a:
d4:18:d0:47:fd:06:4d:ea:0f:38:63:34:e9:c7:e7:
04:25:e5:73:83:97:d7:2e:a9:d1:44:81:21:78:37:
8e:9a:81:6d:4c:99:bd:4c:53:47:1c:05:e3:86:50:
43:d7:c0:f0:58:d4:1d:e4:5d:71:61:a7:8f:fc:8f:
ae:cd:bc:39:e4:0a:0c:e6:c0:bf:d7:09:1a:8f:00:
8f:dc:9d:d3:e9:c0:93:ae:03:b0:f9:5b:e9:b1:57:
8c:83:e8:2c:bc:06:91:b8:f8:ca:a4:92:a3:ee:4d:
00:a0:d4:2b:c9:82:ec:02:29:ff:c7:ef:a9:e9:45:
8e:e0:11:f4:5e:90:28:eb:27:bc:88:5e:c0:b7:ad:
79:da:52:84:ef:b3:f3:4f:f8:99:1f:32:c7:17:1e:
38:92:d8:fe:38:3c:72:ba:12:0e:e0:07:b6:31:e3:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:18:00:13:D9:C8:6A:0D:1E:98:0D:96:DD:9C:3B:D3:14:08:69:B9
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4c:b7:5c:c6:01:b6:b1:46:11:92:b0:f6:a7:e9:bc:27:6d:
21:ac:7b:0e:ea:e4:c4:cf:62:d5:73:fc:55:08:da:60:4f:c5:
21:63:c3:47:0d:20:7f:18:9e:33:9a:c0:0f:4a:bf:ec:5d:97:
04:86:08:c9:13:f0:46:19:e1:e8:ae:ff:93:a6:fc:7e:53:9c:
b3:a7:e3:b6:2e:8a:a9:de:06:4c:62:f0:fe:c0:00:e2:a9:2d:
75:90:06:85:ad:3f:f0:a9:29:53:11:63:87:f2:39:e8:c3:7e:
bc:a3:c1:ee:f9:a5:15:62:ac:1c:d0:7f:09:f4:da:79:1f:d2:
6d:71:f2:6a:52:a4:fe:70:e6:07:f8:43:1e:1d:2b:ce:db:19:
b9:2e:0f:f2:97:0e:ac:4d:e3:f7:9f:55:64:04:75:48:f6:1a:
b9:89:51:93:98:9a:53:02:3c:07:24:9c:0f:68:1d:d3:5c:60:
bf:f0:62:a5:9e:0b:9e:f8:bf:9c:dd:c8:20:22:a2:3a:9b:22:
ab:da:02:5d:41:4c:b4:96:01:4e:bd:a4:59:c3:3c:4f:e3:fc:
c1:55:35:ef:92:c8:fd:c8:78:c3:ea:1e:41:80:64:b3:61:1b:
6c:f8:f5:f6:72:8a:d7:30:8f:a6:b9:a8:a8:71:40:70:a8:a4:
50:37:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:41:57 2025 by rpki-client