Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File: S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier: 8Nl3KEdcIogHm4HLrVtBqI0dIYXQ2F4ktjBZcTVQ6zY=
Subject key identifier: 23:E6:91:B3:CF:30:43:8A:36:29:15:DB:35:B4:AF:BD:5F:65:93:F7
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial: 019678D60F49941DC874B05E9A2A961ADC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number: 0414
Signing time: Sun 27 Apr 2025 20:00:16 +0000
Manifest this update: Sun 27 Apr 2025 20:00:16 +0000
Manifest next update: Mon 28 Apr 2025 20:00:16 +0000
Files and hashes: 1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: wQXNkyHn8uaT960RUujJqmHjgwj0ab25Jb6tuxgeW0o=)
2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:0f:49:94:1d:c8:74:b0:5e:9a:2a:96:1a:dc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Validity
Not Before: Apr 27 20:00:16 2025 GMT
Not After : Apr 28 20:00:16 2025 GMT
Subject: CN=23e691b3cf30438a362915db35b4afbd5f6593f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:18:55:28:7b:33:f4:3f:2b:aa:a7:49:20:
05:c0:37:f2:a1:7f:99:99:96:18:11:0c:bb:68:75:
53:ec:a5:d6:d1:7c:7b:c1:fa:6f:35:68:70:9f:d5:
01:da:47:4e:1f:86:e6:48:bf:3e:07:a0:23:c2:bb:
57:18:60:2c:99:31:cf:09:75:65:3a:e2:1a:bd:32:
ed:30:5b:b6:0d:10:25:5f:cc:02:3c:7e:27:77:0e:
a7:8a:a5:fa:72:ea:3a:c9:c6:9c:9f:64:2e:f7:50:
0a:66:1f:11:8b:d2:70:e4:0a:7c:37:96:91:4d:ab:
7a:76:c3:02:62:88:d5:b7:53:7e:8b:af:f1:f9:9f:
fd:70:45:04:c3:51:30:16:be:80:ff:e6:d8:0d:ee:
ba:9d:ab:02:4d:54:ca:8f:68:33:b4:95:27:68:4a:
91:70:00:01:98:04:8f:d8:12:96:d9:ee:a2:bd:7f:
4e:28:e3:9e:22:43:75:19:aa:e9:f8:4c:0c:0f:f3:
8c:60:95:2b:bd:16:b1:46:8f:ed:29:31:ee:4c:e2:
41:2b:60:d1:85:75:e2:f6:c5:4a:e8:b3:c0:17:4d:
36:a7:53:52:e8:cc:2e:70:6b:52:f9:c0:54:35:3b:
d2:1e:0e:37:38:46:5c:f3:6a:f1:20:55:42:c8:b7:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:91:B3:CF:30:43:8A:36:29:15:DB:35:B4:AF:BD:5F:65:93:F7
X509v3 Authority Key Identifier:
keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e5:c8:e0:b9:2c:f9:81:02:5c:5f:f6:66:ff:f1:c8:bd:20:
0a:d3:6a:a0:d3:d2:25:f9:a1:86:59:d6:6e:be:53:9c:bb:6b:
30:2a:91:4e:f8:da:06:f0:7f:8d:34:3e:3f:4e:14:ae:61:3b:
e4:eb:e3:80:8c:de:e9:41:34:73:42:4c:ec:90:28:68:f2:fa:
ce:a8:a6:fb:5f:6b:15:6d:df:06:e8:10:0b:99:29:af:d5:4e:
81:30:40:3e:da:4b:ae:08:89:e3:29:4f:7c:18:94:21:8b:7d:
65:41:07:46:b3:4c:6c:ec:a1:7e:24:48:6a:66:07:27:8c:87:
36:f8:44:db:38:c5:e7:7b:48:20:a1:d8:31:0e:08:b4:82:be:
53:a1:9b:50:0d:01:68:17:41:35:18:6b:a5:5c:bc:19:d7:17:
d3:c0:76:c4:6e:c6:e7:53:4b:c7:a5:82:b7:13:69:f2:01:01:
69:ee:60:51:e9:70:e6:87:8b:81:1e:6f:e9:9a:2a:03:b5:be:
d6:7a:36:bf:b4:bb:44:1c:bc:77:47:bb:e9:34:04:8d:7d:bc:
5e:32:db:9e:97:46:25:92:10:c6:41:71:1c:c7:97:ca:46:29:
4e:43:38:fb:41:38:17:98:39:8c:72:5a:71:08:91:89:11:46:
7b:3b:b8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:00 2025 by rpki-client