Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: +T/AEAO5QOB4f6Vcv6vjPw2rrW+6XH0qbKTn1eC21pQ=
Subject key identifier: B8:57:C8:6E:4C:3D:2F:5F:5F:1F:3F:30:C8:8C:77:5F:3F:13:DF:B3
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 01968E4B32750E05CD73667BDF0A179817A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 080A
Signing time: Fri 02 May 2025 00:00:14 +0000
Manifest this update: Fri 02 May 2025 00:00:14 +0000
Manifest next update: Sat 03 May 2025 00:00:14 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: CQSX701c+Q62JcrarF/7ZXIbriPfOA7eeThg6FoEWiQ=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:4b:32:75:0e:05:cd:73:66:7b:df:0a:17:98:17:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: May 2 00:00:14 2025 GMT
Not After : May 3 00:00:14 2025 GMT
Subject: CN=b857c86e4c3d2f5f5f1f3f30c88c775f3f13dfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:9f:da:77:83:65:3e:fe:39:66:ac:c0:50:
69:b1:3f:b2:4a:c0:76:65:cb:b8:ef:59:ba:52:f8:
a6:c7:99:fd:80:e9:ef:18:71:6e:ff:ab:0e:34:b5:
e9:a9:7e:61:12:a8:16:67:1d:a6:94:f5:f7:02:96:
e5:05:4e:44:e9:c9:d3:62:b9:c3:37:cb:f8:9a:07:
f2:a5:18:2e:07:91:73:2c:af:4e:0c:e1:46:a2:3c:
3a:63:69:00:a4:d8:3e:b5:9b:f3:2d:52:d0:ba:2c:
7c:88:48:9b:f5:86:28:fd:c7:b7:ff:a8:33:80:36:
ea:b0:cd:55:f7:26:c0:36:d2:af:c1:0a:af:8d:62:
83:36:12:f7:b0:4b:a4:44:0e:7f:8b:81:15:37:c9:
b5:a5:20:37:46:cc:1d:73:8e:79:05:df:42:19:db:
e6:86:1f:eb:e5:1a:53:ad:ae:69:0c:1b:9d:5a:9f:
74:95:59:64:af:02:9c:6b:93:16:c4:4b:ef:91:2f:
5d:bc:a6:61:46:82:32:16:18:7c:4a:db:bb:5e:1f:
8d:5d:3e:7a:3b:8e:63:77:bf:30:a6:c9:72:49:ee:
a8:df:04:ff:b1:db:f9:e7:d5:1f:a8:8b:e9:17:2d:
2e:9e:bb:7b:31:dd:00:c0:33:d6:74:d0:cc:cf:3c:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:57:C8:6E:4C:3D:2F:5F:5F:1F:3F:30:C8:8C:77:5F:3F:13:DF:B3
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:30:90:2c:8f:57:d5:08:0c:62:58:01:84:3c:10:e2:78:00:
26:b1:cc:2c:df:55:e1:3e:31:d5:62:66:98:b2:94:da:94:12:
56:e2:1f:03:71:55:14:1a:33:4d:4c:68:1f:3e:29:10:c2:c2:
2e:30:a4:ec:ac:2e:b6:13:48:ba:16:28:5d:d1:4a:ce:75:c4:
ed:1b:36:37:79:cf:a8:c4:df:27:50:48:12:ff:9a:c5:eb:79:
4b:97:d3:ee:a4:d1:b2:1b:be:56:ac:17:10:6b:f3:22:bf:6c:
2c:f2:99:b6:dd:e2:f4:68:5f:5b:a9:a7:ec:d5:14:f2:0d:de:
42:8e:e0:08:75:a6:fa:cf:9c:b3:71:fa:bf:2d:e9:35:dc:ad:
30:1d:a1:6a:45:be:03:e9:b2:96:6f:13:f9:d7:03:fb:d4:68:
02:11:17:12:b4:d5:a2:ff:d9:10:a3:2e:04:1c:17:02:ab:54:
1c:a6:40:15:5f:2e:05:b2:62:b1:27:d5:52:9a:00:ba:d4:18:
2a:b6:9d:d9:bb:35:ae:3a:c9:eb:f3:f7:ab:44:c1:4b:50:87:
19:5a:f7:77:4f:27:40:19:5a:b4:10:21:80:1d:f9:f6:0b:ba:
e4:8e:2d:97:7e:60:14:e5:11:46:2d:1e:32:cf:64:b7:55:6a:
fc:ec:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:00:51 2025 by rpki-client