Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: ZNv1uhQJ2tzRJA3nTo1S4wktPk1MrZE9vOMJNd/wzfY=
Subject key identifier: DB:6E:F5:4F:93:A5:F2:48:D9:EA:44:79:55:45:8A:93:3C:FA:F8:DE
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 01963FFA0574C4DA60B250DEF5988750ED24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0557
Signing time: Wed 16 Apr 2025 19:01:11 +0000
Manifest this update: Wed 16 Apr 2025 19:01:11 +0000
Manifest next update: Thu 17 Apr 2025 19:01:11 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: JI8hs4cXS/m/7Lniip/hQY8u35aR9q5TmYPApOiAg7U=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:05:74:c4:da:60:b2:50:de:f5:98:87:50:ed:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Apr 16 19:01:11 2025 GMT
Not After : Apr 17 19:01:11 2025 GMT
Subject: CN=db6ef54f93a5f248d9ea447955458a933cfaf8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:7a:17:cc:64:f1:60:9a:e5:ff:94:09:cd:
6d:4e:e3:10:35:8e:e5:99:e1:61:39:d4:ef:97:be:
73:da:2c:09:b2:8e:36:e1:b0:5c:f6:79:cb:e4:82:
f7:b0:25:2c:be:98:4b:1b:af:77:ae:3d:bb:1f:66:
92:d8:43:f4:46:c9:98:44:d6:7c:3d:79:d0:9f:48:
ae:95:f8:c6:e1:4f:2b:ca:08:ff:d0:5d:d8:93:17:
0e:f6:84:d4:a7:b2:74:8c:fb:9c:3f:11:e1:9c:9f:
ab:4b:55:8c:22:22:e7:24:d5:cf:09:68:70:fb:56:
85:f0:3e:cd:41:29:e0:49:a3:5a:67:6d:8b:b4:84:
a7:da:5b:8e:14:ea:9f:f6:9c:ba:4e:e7:61:6a:5c:
8d:a3:10:e0:c0:a5:8e:0a:e3:35:4f:29:34:a3:35:
b1:12:24:af:32:fb:fd:69:62:57:51:a2:de:15:9a:
88:2a:c2:84:82:5e:14:1d:d7:f3:23:6c:4c:83:b0:
1a:af:b4:53:49:1b:fe:47:11:d1:ab:6c:d9:3f:5e:
61:a7:50:ce:e8:7b:7b:1f:71:1b:eb:ba:4c:09:2a:
ef:5b:01:32:d5:a5:0c:f2:77:23:74:7c:23:4a:90:
6f:65:d0:85:a2:77:89:c4:86:1f:43:37:62:6d:a2:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6E:F5:4F:93:A5:F2:48:D9:EA:44:79:55:45:8A:93:3C:FA:F8:DE
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b3:60:27:54:c3:47:25:dd:d6:07:d9:08:43:36:a3:bd:cf:
2c:ad:84:20:2b:37:36:2d:c8:10:83:7e:e6:b8:d0:0f:38:8c:
f4:ac:98:14:cc:23:02:d4:b5:1d:c1:fa:93:e7:4d:a9:c5:28:
88:fa:2c:cf:fd:b3:62:d7:1f:cb:1a:65:e8:e5:70:76:0d:7d:
bc:10:37:0a:43:a5:6f:90:04:ed:52:52:8f:35:32:bd:76:4b:
bf:a9:03:20:1c:b6:74:28:6d:f2:b1:b3:b4:32:fb:bd:f6:16:
16:8f:a8:c8:49:b4:c8:d6:3e:ba:06:d8:bc:f5:ae:a9:9f:fd:
8a:f0:e4:7d:35:49:b8:55:d6:eb:83:02:d3:6b:be:5e:7b:93:
aa:69:42:43:3a:65:43:9a:75:a5:51:4f:74:0a:03:50:03:c2:
dd:ec:ba:d1:cf:05:37:9d:1d:6a:86:39:ad:a5:bc:6a:b3:68:
82:72:fd:62:10:e2:46:4e:e5:27:19:15:25:07:d9:28:d3:db:
b6:de:7e:a7:d8:b9:7a:fc:c6:44:f2:3a:dc:f6:0e:7e:b5:ba:
63:59:6a:ff:27:48:28:04:d4:d5:20:01:36:a9:87:82:04:cc:
5c:91:c1:88:c7:9e:55:2c:6a:a7:49:c2:2e:ea:63:45:61:30:
fa:3c:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:56:29 2025 by rpki-client