Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
File: SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json)
Hash identifier: /GL1/5VlFKcz8EU9r0gEn3wSMDS6OhN3n/kRXc/27xw=
Subject key identifier: 0C:13:06:B5:84:DE:F2:16:EE:1A:AA:53:F0:92:EE:93:35:5F:01:A1
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial: 0196553892F10FBDD3C0B7105E7EBCE22E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 22:01:32 +0000
Manifest this update: Sun 20 Apr 2025 22:01:32 +0000
Manifest next update: Mon 21 Apr 2025 22:01:32 +0000
Files and hashes: 1: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: FWzKmBHxINh0Ba9OKBcx1izvRDjubbFGelg2Srs++Wk=)
2: aCk5yRvbKuue3ENXzksiDKszHOM.roa (hash: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:92:f1:0f:bd:d3:c0:b7:10:5e:7e:bc:e2:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Validity
Not Before: Apr 20 22:01:32 2025 GMT
Not After : Apr 21 22:01:32 2025 GMT
Subject: CN=0c1306b584def216ee1aaa53f092ee93355f01a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:47:8f:09:37:25:e6:8f:4c:a7:7e:bf:75:
02:29:08:da:c2:3d:c4:50:a8:98:47:18:50:bc:49:
d2:a0:04:6b:c2:fd:14:a0:27:47:4b:fc:70:bb:7e:
91:e9:48:ff:29:62:88:40:e0:8d:c8:99:4d:13:c6:
ce:c2:f8:1d:04:f1:eb:7d:0d:2b:71:b4:a3:e9:0c:
df:9c:bc:90:5d:7f:b5:85:88:b3:85:fa:a6:e8:88:
b5:ec:be:7a:79:ba:3d:50:e8:81:04:4b:ed:47:ae:
2c:85:77:8a:c5:b2:88:59:b2:47:15:c8:ff:c9:b6:
f4:5d:34:e9:69:40:89:52:67:42:08:01:3d:4a:5e:
fc:07:6e:3c:c3:a2:2e:ac:00:da:3e:44:5a:fa:5b:
91:0e:0d:a9:d2:c5:5c:07:58:88:25:bc:a3:37:ea:
68:5f:df:8a:9c:c0:11:49:90:e3:c1:4a:c7:75:b5:
94:98:d5:69:9e:76:c8:65:8a:96:ea:11:ee:38:9a:
9b:c6:d0:13:22:ca:f0:9a:1a:69:69:78:5e:97:5a:
3a:24:75:18:ac:cd:5e:3a:6a:d9:02:0b:23:66:48:
a2:8e:31:e1:2d:5c:fe:22:d0:69:8e:43:03:09:a7:
f8:b5:1d:df:49:ab:de:f3:68:ed:41:88:ab:0a:ff:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:06:B5:84:DE:F2:16:EE:1A:AA:53:F0:92:EE:93:35:5F:01:A1
X509v3 Authority Key Identifier:
keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8d:ee:97:45:bb:8e:49:1b:ee:62:25:fb:e7:6f:70:d8:be:
a0:aa:d8:b2:9d:64:f2:2b:e8:93:ab:fc:8e:6a:a0:38:7a:50:
88:23:86:4b:20:02:c5:e0:fd:46:06:6d:0f:b7:77:4c:53:da:
2a:7f:c9:71:b3:87:ee:78:34:ca:cd:97:2d:6a:8a:82:cc:51:
ad:9b:37:5e:9e:b9:ec:a6:83:1c:3a:3a:6f:a1:07:bb:ec:e9:
a7:78:3f:74:01:4c:58:a9:0e:49:bb:ce:74:ab:dd:63:e0:18:
94:dd:d3:6b:05:d8:c2:7e:8e:48:d3:e5:bf:f6:ea:bb:13:69:
2e:b3:06:df:36:b2:9a:f8:6e:96:e6:87:d2:fb:fb:a8:43:f5:
b7:ac:b0:bd:1e:41:c9:95:7f:bd:93:45:3d:03:52:bb:c5:c5:
aa:fb:33:64:0b:0f:a3:cc:d5:21:f2:00:88:75:f8:6a:91:1f:
06:4f:ce:54:41:90:9a:f2:91:3c:d2:3e:a6:be:12:d0:68:39:
91:91:0b:a8:6e:a2:7f:80:6d:37:14:ce:90:e5:41:e1:0b:72:
85:f3:59:cf:ec:8f:56:64:71:c9:12:5a:e5:d7:c0:db:ec:c5:
85:de:3c:c7:14:2d:05:3f:c3:66:8d:e8:47:fe:56:b4:1b:fb:
6f:55:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:48 2025 by rpki-client