Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier: vPPBNJTa1znuTm1gk3H4ICnZFuElf0qD3RSOl/QbWew=
Subject key identifier: AF:32:89:9C:4D:D6:5A:12:8A:E6:E8:24:AB:BF:3A:D1:AB:41:FD:4B
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 0196767A7EC9C63D7CDAE451F464665F0DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number: 1267
Signing time: Sun 27 Apr 2025 09:01:01 +0000
Manifest this update: Sun 27 Apr 2025 09:01:01 +0000
Manifest next update: Mon 28 Apr 2025 09:01:01 +0000
Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: f0DPJjSA5jSN0ZcL4m4SAkHrLkVg90UbIE7IZtfvDOo=)
2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:7e:c9:c6:3d:7c:da:e4:51:f4:64:66:5f:0d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: Apr 27 09:01:01 2025 GMT
Not After : Apr 28 09:01:01 2025 GMT
Subject: CN=af32899c4dd65a128ae6e824abbf3ad1ab41fd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:96:d5:77:af:bf:e8:65:1c:fb:22:2b:3e:
b0:38:c7:23:c3:fb:05:be:d5:14:4b:79:91:d9:64:
1a:49:10:cf:b8:1b:82:2c:ed:45:7f:02:d6:18:94:
9d:4f:84:c6:e8:f7:b3:96:92:b6:e2:e5:d2:f7:5b:
bd:41:76:b2:2e:48:64:5d:93:6d:8d:43:d7:5c:7e:
a6:6a:97:21:00:d1:5c:cf:4e:c8:bb:33:9a:a4:eb:
b6:bd:d5:76:10:e0:22:da:a1:69:a0:f2:b2:e3:b7:
14:c0:53:0c:28:10:bf:70:44:e9:15:3a:30:9b:25:
30:37:16:57:69:ac:fc:ce:0c:de:af:53:83:bc:8d:
a9:89:0d:87:00:e3:e1:66:00:78:66:47:c2:43:5e:
8c:3b:fb:07:6c:b2:17:f9:bf:4f:0b:36:6b:4a:41:
61:fe:1e:eb:c8:4f:f9:68:46:31:e1:f3:50:ad:e6:
3b:dd:52:17:8a:f0:ab:2e:f6:a9:bb:3a:e6:81:8a:
f0:83:86:78:25:0b:dd:22:b0:b3:6b:e9:f4:3e:5c:
ef:bb:93:3a:75:39:cd:db:b7:02:ac:c0:36:04:ff:
7d:6a:dc:dd:87:31:42:e2:32:a9:a5:d8:06:60:bc:
1e:f7:15:3f:c9:d1:44:aa:ed:1f:42:05:4d:80:9d:
f3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:32:89:9C:4D:D6:5A:12:8A:E6:E8:24:AB:BF:3A:D1:AB:41:FD:4B
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d2:c2:c7:63:f3:a1:3b:13:03:76:0a:6a:59:87:8a:96:83:
a4:78:27:77:14:a1:9e:3d:91:4b:42:41:99:e3:46:89:80:b5:
7a:e7:c6:9c:86:78:92:5a:89:05:46:02:2d:c7:6d:be:93:d0:
69:c6:2a:b2:c6:1f:30:5b:b8:df:18:d7:cc:70:11:2b:eb:9c:
a3:cd:9e:d3:92:30:57:50:8e:3a:38:3b:72:79:29:df:17:9f:
e9:db:82:d2:ad:56:50:1a:0f:6e:07:88:e7:b7:01:c2:3e:8e:
d9:89:8e:e0:44:24:d5:41:a4:06:e3:bb:02:e2:d4:0a:b0:57:
18:b3:1a:20:d7:a2:7a:15:b5:d8:7c:a5:51:9d:59:0d:d1:78:
39:a6:c3:44:e2:4b:a3:cd:53:48:e1:23:0c:e1:27:66:d9:d2:
b4:1b:b3:7e:d1:90:b6:da:08:76:12:46:e6:f4:f4:69:14:f8:
1a:28:16:16:fa:cc:96:b9:fb:0e:a0:7b:ba:92:33:b4:3b:81:
c1:6a:94:2d:0f:1a:e9:f4:07:3d:6d:da:da:18:e7:1c:83:74:
c3:0c:ee:76:46:35:2f:ee:ae:44:81:b7:c0:4f:85:d3:77:0a:
17:b3:0f:98:1f:b3:e1:5e:a5:92:4e:ce:6b:cd:03:30:03:78:
57:59:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:53 2025 by rpki-client