Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: ECKgl08Oit7bHwRsWCgjNsSJlw5Y58IPojI3TpJi53E=
Subject key identifier: 47:8C:96:BA:76:C1:CC:4B:1B:66:B0:46:8D:71:FF:FD:EC:CF:45:DF
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 01967C0E1E71CE0E47ECE13195A652242EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 0E78
Signing time: Mon 28 Apr 2025 11:00:22 +0000
Manifest this update: Mon 28 Apr 2025 11:00:22 +0000
Manifest next update: Tue 29 Apr 2025 11:00:22 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: oySjORhjEusH1gCPncR/w2mHCpifzhwpCSMX1pJYp8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:1e:71:ce:0e:47:ec:e1:31:95:a6:52:24:2e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Apr 28 11:00:22 2025 GMT
Not After : Apr 29 11:00:22 2025 GMT
Subject: CN=478c96ba76c1cc4b1b66b0468d71fffdeccf45df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:ed:39:0a:3d:89:d7:85:02:fc:e1:dc:04:
ec:f0:e1:2e:b7:a3:4c:9f:fd:ec:be:60:9d:df:4a:
a7:4f:d7:f8:84:f6:98:77:61:af:f9:f3:78:ae:af:
6f:c7:35:6c:b6:d5:54:8f:82:c1:eb:50:bf:4a:a4:
48:bb:7e:8e:00:ef:c2:d4:e3:d3:43:74:cc:5c:43:
f8:07:64:b0:06:21:5c:3b:cb:7e:f1:e5:3b:62:42:
6b:bd:69:cd:24:78:d8:84:20:b3:4a:ea:4d:d5:89:
f4:66:ae:07:c2:12:b4:5c:d6:a2:08:9e:0e:14:6e:
42:8c:9e:98:4a:f5:da:6b:1e:3a:5f:1b:b4:73:9c:
6d:1a:e7:a6:ac:10:9a:ae:48:9e:30:c9:2c:82:9a:
e5:f2:1e:55:25:29:f1:9e:ce:1c:ad:ad:12:9e:34:
c6:2f:f8:98:25:c2:5b:c7:93:fa:1c:23:8d:3a:0a:
8d:6f:d8:c2:2e:d8:85:d4:5d:4d:0b:9a:87:1c:19:
92:73:68:1a:1c:48:b2:92:01:c5:d8:e0:e3:1f:23:
4c:60:e1:08:df:cc:34:94:9c:7d:c2:8b:8b:5d:bf:
30:f7:ec:d1:4b:86:81:07:06:c1:51:ca:1f:ee:29:
be:5f:33:0f:07:22:e1:b0:a7:92:bc:26:6b:1c:b4:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8C:96:BA:76:C1:CC:4B:1B:66:B0:46:8D:71:FF:FD:EC:CF:45:DF
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:94:a7:ed:7c:2d:86:09:ac:62:f8:7c:0f:ea:db:4d:55:6c:
f2:c1:a1:5c:48:82:29:97:d3:0d:1b:32:a9:83:f0:5b:b4:52:
45:8a:98:c2:fd:0e:d6:e2:05:84:43:48:0f:d2:da:1c:bc:5a:
70:f4:d2:ea:70:b8:94:9e:ae:e0:5a:6f:1e:a5:93:72:76:5f:
4d:4d:42:b6:73:32:9d:b8:3c:18:19:3b:be:cc:22:b9:fd:d0:
28:f2:dc:e7:d6:2e:59:3b:37:b1:b2:dd:57:c3:4d:a2:66:75:
84:45:d7:65:10:81:96:ca:1c:6b:6d:ec:6e:99:17:5e:f2:d4:
f9:67:3f:38:4d:b3:0b:a6:59:b5:b1:1b:55:5c:00:6a:5f:74:
32:e0:9c:d9:b1:de:ed:84:11:b0:69:a2:20:79:2c:36:65:04:
fb:be:95:b9:8d:91:0f:f0:b0:91:0d:ed:14:7d:9c:0c:f9:08:
51:5b:c2:9d:2b:d4:6d:87:50:2d:14:3c:29:05:32:4a:26:07:
3c:f5:21:a6:38:b4:2f:2d:73:d7:ce:8e:70:9b:71:90:27:de:
76:41:d1:9c:13:3b:df:53:fc:8d:7c:31:00:54:02:66:6e:05:
08:0b:8a:04:e6:12:ec:d2:f4:46:9b:f0:e9:dd:26:00:12:c2:
57:c5:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:21:12 2025 by rpki-client