Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File: SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier: sMP8K0fxPNJ9S+7EfqQ2JFFzIVy5a3Sug6TpuVBS23E=
Subject key identifier: 85:85:0D:68:84:8E:36:1F:78:9C:77:1E:BD:01:FC:B5:39:51:D9:1B
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer: /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial: 0196767A99450AFA15634BAEE38D3556CB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number: 0DFD
Signing time: Sun 27 Apr 2025 09:01:08 +0000
Manifest this update: Sun 27 Apr 2025 09:01:08 +0000
Manifest next update: Mon 28 Apr 2025 09:01:08 +0000
Files and hashes: 1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: EWsTkQtOrdVhaeZK1GYbrkOz1aJbce920oV5Rg9sFnM=)
2: galtvA878B_gyWy0hQyRkeaZi6U.roa (hash: COa1iZxjQ8Xwq/EGs0wzkzw8um4DhbZoyDMdmoMPbH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:99:45:0a:fa:15:63:4b:ae:e3:8d:35:56:cb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Validity
Not Before: Apr 27 09:01:08 2025 GMT
Not After : Apr 28 09:01:08 2025 GMT
Subject: CN=85850d68848e361f789c771ebd01fcb53951d91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:05:47:ef:4c:9f:47:3e:ca:56:98:9a:fe:
6e:97:00:64:6a:55:d0:43:80:75:ba:cb:4f:8c:c7:
25:5c:70:48:4e:9d:03:5c:1d:b2:85:af:22:4b:d8:
58:ef:73:97:c6:5e:03:ad:94:ca:d1:96:ed:f8:07:
dd:76:5b:58:6c:ef:46:69:b6:68:c4:e0:74:b7:1c:
60:e7:3b:c5:86:9e:d2:93:56:58:02:5c:24:c9:0f:
3c:50:39:d4:c7:d0:09:7c:4d:8f:78:ac:85:2b:16:
74:46:17:0f:40:60:45:eb:c4:ff:74:3c:13:d2:25:
47:dd:89:6f:2e:e4:d8:0b:84:b3:1a:44:26:2f:c2:
1f:71:23:41:62:c7:43:ff:df:cb:64:64:1a:b7:ac:
75:c3:4a:e3:d4:c3:95:eb:c3:88:b8:a8:fc:e2:3f:
82:3a:12:57:3a:2f:2c:3c:95:c2:1f:62:fc:33:08:
81:22:93:0a:f7:fc:ad:a5:32:87:98:7a:da:14:0a:
a4:eb:67:54:4e:d9:65:f3:55:9d:27:17:0b:b8:7b:
98:93:c9:86:20:d4:99:06:d6:ea:6e:a1:02:bf:8c:
e8:bd:0a:e1:c2:a7:03:cc:9c:73:0f:8b:bf:c8:e3:
bd:b1:30:88:2c:c6:9f:49:6a:fd:fd:6e:e6:59:f9:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:0D:68:84:8E:36:1F:78:9C:77:1E:BD:01:FC:B5:39:51:D9:1B
X509v3 Authority Key Identifier:
keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d6:88:f4:7e:0c:2a:a2:ff:21:54:96:a2:34:ec:fa:13:aa:
94:ee:09:e1:52:8c:f8:fb:bc:cb:38:7e:4b:c3:d4:4f:2a:f6:
54:8d:11:cd:70:55:71:6c:52:82:7c:48:0e:40:a0:03:e0:b6:
18:98:bb:d7:99:5d:11:63:60:50:e9:40:33:09:59:5f:13:7f:
4a:8d:e6:a1:32:b2:7e:2d:bc:a6:54:7a:9c:93:8e:d4:bd:d8:
5b:a0:47:44:ad:4a:a2:72:d6:cf:9c:7d:0b:88:6b:40:1a:19:
7b:57:ba:1f:08:ef:7f:50:ba:c1:8a:36:de:6a:60:cb:0f:77:
e1:3c:b5:bc:52:29:ae:7f:64:34:b4:bc:70:09:97:6a:db:5f:
a9:db:cc:c9:c8:73:bc:64:53:ba:29:66:f2:39:86:a4:7f:32:
ed:1c:62:33:51:0a:32:1b:37:70:4c:07:03:b7:d3:08:bb:9c:
db:2b:e0:a3:0a:d5:9c:91:d0:b2:4a:48:72:1d:6a:d5:ac:48:
a8:c6:09:29:9f:e8:19:e4:10:a1:75:cf:ae:63:32:80:5e:c5:
2d:6b:8d:23:94:85:48:a4:ab:43:fe:59:b0:1b:30:59:3e:eb:
c1:03:7d:5a:58:1d:06:87:e7:4c:32:7c:bd:57:54:f4:38:b7:
5e:8c:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:23 2025 by rpki-client