Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: l1CC7QtHRqUx+Gn6WwyCqo7LrJ58w3fP6pyISBgK7bQ=
Subject key identifier: 36:4E:AF:96:66:D7:A3:F4:F7:3A:36:1D:CF:8A:29:8F:B1:AE:FC:EF
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 01964D7DF59E505A6267A9B509D4AADCC29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0C6B
Signing time: Sat 19 Apr 2025 10:00:22 +0000
Manifest this update: Sat 19 Apr 2025 10:00:22 +0000
Manifest next update: Sun 20 Apr 2025 10:00:22 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: uBfQYQX6PC6q4VGjjtxHdGFDgji1ixufEX9/4FBRVGk=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:f5:9e:50:5a:62:67:a9:b5:09:d4:aa:dc:c2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Apr 19 10:00:22 2025 GMT
Not After : Apr 20 10:00:22 2025 GMT
Subject: CN=364eaf9666d7a3f4f73a361dcf8a298fb1aefcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:fb:66:4e:87:59:31:ba:d2:d6:92:6b:de:
78:48:b9:23:e3:92:de:dd:da:22:d5:90:50:ac:54:
ec:93:8c:53:6a:c4:58:47:34:e1:92:c1:5f:90:02:
53:94:b7:06:0d:8b:23:46:91:d8:af:18:b1:5e:ed:
7c:92:38:85:47:bd:c0:af:cf:c9:3c:1d:89:95:3d:
5c:b1:95:b5:10:ca:ab:a2:18:7d:0a:bd:be:3c:5f:
3b:22:d4:d4:9b:7c:13:f5:43:a0:74:13:51:87:c4:
fb:58:ad:22:91:e0:cf:6a:66:a9:70:94:92:27:07:
79:6f:ac:c4:e8:db:a3:dc:9a:7c:05:ec:7f:ad:41:
cc:b4:8e:e7:56:d2:2e:15:82:17:6a:38:ac:3d:90:
14:ba:b5:35:13:a3:39:e7:95:50:3c:7e:5a:d4:5b:
6a:02:36:93:89:ca:7c:56:c1:71:1c:15:6d:73:e2:
2e:77:b6:00:66:b0:01:81:ec:c9:bf:03:00:ab:b5:
12:a9:12:ac:95:66:e5:63:d8:8b:1c:0f:08:4c:2d:
b4:4f:22:2e:7e:9b:f5:d2:88:fb:b2:f7:75:bf:39:
75:45:02:82:be:a5:2a:c8:28:70:9e:8f:fe:59:ad:
08:10:98:36:70:f7:ee:d5:d2:b0:38:03:92:29:14:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4E:AF:96:66:D7:A3:F4:F7:3A:36:1D:CF:8A:29:8F:B1:AE:FC:EF
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:86:c3:a8:b9:39:b0:0f:ab:4a:0f:26:f7:3c:2b:a5:ca:3d:
cd:be:7f:12:f4:6e:16:23:61:e5:93:8e:44:33:6f:27:ec:b4:
b6:c4:76:37:30:72:57:de:c2:7f:7f:f5:d5:b0:eb:19:ec:54:
2e:04:6c:19:8d:81:97:ec:c7:dd:75:6d:9a:c1:99:b3:0f:3f:
69:da:c0:d8:d1:2f:5a:3a:1f:b9:d6:1d:83:6d:96:29:3b:3a:
4d:d7:6c:16:60:91:55:2e:46:53:a2:c7:21:08:7d:ac:27:d4:
7c:17:4d:0a:cf:d6:43:78:d4:c5:ae:1a:28:12:af:bb:cf:ec:
d2:4b:89:ae:23:1d:fd:77:f8:2c:c1:c0:93:8e:a3:5c:5c:8d:
da:34:85:00:f9:1f:90:a3:74:8d:eb:53:1d:51:a4:97:93:d2:
8f:61:97:a9:90:62:80:5a:5f:e3:01:f4:00:68:4b:04:e2:fa:
63:ac:85:b3:98:a8:dc:bb:76:ac:90:56:7f:dd:fa:2b:7a:94:
43:33:ef:69:3d:da:b1:9b:57:bd:56:27:15:c6:a9:34:f4:28:
11:80:46:b3:dc:c1:a4:96:5c:2c:8e:80:36:3a:c9:75:2c:f9:
e1:89:58:f9:67:f7:4a:cc:3a:11:4d:80:e2:7f:8a:57:a8:13:
87:2c:7b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:38 2025 by rpki-client