Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier: F2YNOmAiB/sJbLwOiRqM0ioFmKEvfdlt2t+1QGZWhFk=
Subject key identifier: 2C:DB:F9:BE:62:F3:62:15:45:77:EC:D5:D0:B0:D4:CE:CE:E3:09:73
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 019679E97223BF2A734306604AF9A573ABA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number: 10D3
Signing time: Mon 28 Apr 2025 01:01:04 +0000
Manifest this update: Mon 28 Apr 2025 01:01:04 +0000
Manifest next update: Tue 29 Apr 2025 01:01:04 +0000
Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: kl/1eI1QOitxAMn+DWHQUoTppCLn3YAPtflJOQTAM4M=)
2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:72:23:bf:2a:73:43:06:60:4a:f9:a5:73:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Apr 28 01:01:04 2025 GMT
Not After : Apr 29 01:01:04 2025 GMT
Subject: CN=2cdbf9be62f362154577ecd5d0b0d4cecee30973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:94:48:93:1b:8c:db:08:35:45:df:e1:63:
8a:8b:16:5e:51:25:7b:06:ba:73:ba:1a:11:39:6e:
de:c3:86:b1:2a:cc:9c:51:30:eb:e6:78:0b:82:c8:
d8:51:1c:6e:ab:e6:ce:95:c0:2b:be:d8:6f:f1:e3:
cc:cf:01:27:bc:04:b7:48:7c:f0:4b:ce:4a:8e:56:
6d:d4:17:11:07:7f:60:e7:38:8c:bd:79:08:f7:74:
1e:1a:7e:da:df:ee:b4:9f:42:a8:8b:c8:c7:78:fb:
8c:31:a6:e6:55:87:d7:88:8d:fd:f5:72:7d:24:2e:
05:1f:e2:60:27:6d:66:ec:42:13:46:df:40:18:56:
46:59:6b:2c:a0:eb:1d:55:80:f3:36:83:fd:ba:53:
af:bb:be:bb:19:b8:c1:26:8b:5f:f5:d0:ca:c0:df:
ee:ee:f5:e8:a6:23:4b:73:40:56:b7:df:45:f1:7a:
d7:c1:26:b1:07:a3:b1:cd:20:91:f5:16:0c:fb:73:
1b:df:3d:05:28:b7:fe:a0:f3:a2:bc:97:38:a4:e1:
44:e2:f2:01:4d:ac:60:e2:f7:33:b1:e2:c3:14:71:
60:47:60:bd:a9:82:16:fb:f5:60:49:3d:f4:24:3f:
93:d2:a6:c5:37:fd:3c:3c:67:ff:4a:4c:46:d1:9b:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:F9:BE:62:F3:62:15:45:77:EC:D5:D0:B0:D4:CE:CE:E3:09:73
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8a:cc:1b:7e:3f:f1:67:67:d2:4a:20:ff:b4:c9:93:29:d7:
e2:27:72:3c:aa:c1:8e:18:ea:54:29:0f:ec:5b:f8:da:4f:1e:
10:d9:d4:38:3f:95:67:fa:88:e7:3c:b6:94:b2:07:9b:4c:84:
f9:17:80:30:5a:30:ea:1b:24:7a:f5:c0:85:c3:2b:c2:83:7d:
1c:13:f0:27:cb:bd:29:2e:82:58:37:42:46:90:20:a0:0d:b1:
3f:13:da:ec:6b:38:92:45:d9:5f:53:32:cb:90:dc:31:00:a2:
63:66:1c:8a:2d:1f:51:99:3b:23:62:16:5d:bc:30:9c:d6:f1:
34:01:48:15:24:38:ad:de:6d:e6:5d:58:27:1e:56:ae:6c:db:
ad:6d:db:44:49:d2:fb:00:c8:a5:e9:9c:a6:6d:84:66:a3:68:
49:7e:f3:7c:bf:e7:34:00:12:2e:2a:6b:bd:c8:35:d7:47:8b:
19:56:c7:79:91:77:f2:39:50:94:13:b7:d8:7c:3b:fb:b7:9e:
e6:53:cb:11:48:ae:5b:b7:08:22:1f:95:e9:93:e1:3f:81:fa:
80:69:5c:59:1c:39:6f:12:fa:f0:26:3a:b5:8c:44:18:41:f1:
01:5f:2f:10:5b:b0:e4:3b:10:14:ae:bc:71:d0:ba:62:d0:85:
33:d6:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:11:32 2025 by rpki-client