Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: MTpeAf0FjWk7aUm9Btl4J+ZDcwfUXs9+vINsQhm0lP0=
Subject key identifier: E2:BE:A0:24:C6:82:74:B7:BB:C8:7F:CA:AB:64:7A:8A:03:36:68:D2
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 01964669A714E750D797FDEFE8D3E48C9462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 1440
Signing time: Fri 18 Apr 2025 01:00:51 +0000
Manifest this update: Fri 18 Apr 2025 01:00:51 +0000
Manifest next update: Sat 19 Apr 2025 01:00:51 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: 6n9V9GOyYFizLyW/2fO0FDLcT2pH7JjdkUvFN3oMLdE=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:a7:14:e7:50:d7:97:fd:ef:e8:d3:e4:8c:94:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Apr 18 01:00:51 2025 GMT
Not After : Apr 19 01:00:51 2025 GMT
Subject: CN=e2bea024c68274b7bbc87fcaab647a8a033668d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:aa:96:af:bd:49:3f:51:32:29:05:10:3c:
9c:38:67:38:ea:47:79:77:97:cf:6a:f0:6f:d5:55:
1a:0a:ba:1a:a9:ba:b5:a4:f9:45:2a:07:9c:14:66:
9e:ee:7c:7c:77:fd:57:be:04:7b:b5:32:bf:c2:56:
0c:bf:6d:27:b1:2b:fb:e8:ee:dd:be:5e:f4:2f:a2:
20:cf:ce:fc:4b:1e:42:6f:71:0b:43:44:69:a1:c9:
1a:bd:11:a9:53:14:14:ea:00:11:a3:41:10:31:52:
a5:a9:a6:1a:0b:b1:fa:03:df:49:50:43:55:e4:d4:
c5:b8:72:7a:10:5d:4d:0a:34:c2:eb:3b:a9:d3:49:
22:6c:ee:e4:3f:00:bf:1f:3a:f6:d2:79:73:68:03:
32:b2:d1:b2:1a:4a:85:cd:cd:d8:3b:1f:d1:69:5a:
be:c6:2c:83:2c:dc:c0:07:17:17:a1:8b:7a:2a:9a:
06:fa:bf:1d:dc:34:5d:66:0b:6f:6c:fa:78:37:ad:
6f:f4:85:b8:46:e5:09:e0:a3:c0:f7:c3:e7:b0:09:
66:4c:e2:e7:6e:0b:e0:98:ee:7c:42:24:36:0b:93:
59:c3:3d:a2:ab:7d:58:10:94:7d:5d:f9:aa:3f:27:
bd:f7:1e:7c:bf:3b:e4:4c:a0:b0:4c:5d:52:cb:86:
f1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BE:A0:24:C6:82:74:B7:BB:C8:7F:CA:AB:64:7A:8A:03:36:68:D2
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4d:1d:dc:d0:cc:7e:63:38:a1:3e:e8:44:65:90:5f:f4:e2:
e0:79:9b:ad:99:15:5a:a8:63:b2:cb:6c:1f:a1:75:cd:67:47:
7d:ae:ae:4e:43:7e:42:9a:83:fb:7f:ab:4d:dc:2e:a9:7d:6b:
d0:f9:ad:b6:e0:a1:c8:23:87:58:a6:9b:36:0b:40:c3:e0:2c:
2f:e5:f8:bb:c3:18:d0:b4:05:ca:89:fe:23:5f:3d:18:4a:3b:
87:50:8c:a5:1a:2b:b0:54:e9:de:d9:c9:f6:d7:34:66:73:62:
5b:bf:bd:99:40:94:00:78:e2:6d:dc:82:ff:e2:d0:24:0f:cf:
fc:dd:4e:8c:b9:39:e1:aa:ed:00:e4:e7:29:53:19:df:e6:3a:
12:7e:f8:09:d4:ad:75:35:aa:15:3a:e6:e1:f9:ab:5a:a5:a1:
6b:a4:dd:40:4f:cf:f3:b1:81:f4:1b:8c:0b:a2:11:71:38:63:
52:46:c2:2a:0a:6d:b3:85:a6:33:20:7d:27:32:db:26:8c:61:
2e:80:2f:e3:6b:c8:5a:bb:b7:f1:bf:2e:a8:3f:c7:4d:d4:e4:
79:ea:3b:e3:95:9d:ac:80:72:e0:37:e1:97:e2:28:f7:55:e6:
27:67:1f:67:63:64:5e:da:d8:bc:c5:47:b9:20:dc:96:15:4f:
87:be:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:06:37 2025 by rpki-client