Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: CT9/B04Hg/Mb6YeH6IgiIWsAD+C2MPSrGkBp9BSMVwc=
Subject key identifier: AF:1D:DE:44:DF:97:56:2B:49:E0:50:00:88:F4:9C:52:A6:3F:7D:69
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019675678A1300F74E276BAAFF51AA738833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0B16
Signing time: Sun 27 Apr 2025 04:00:41 +0000
Manifest this update: Sun 27 Apr 2025 04:00:41 +0000
Manifest next update: Mon 28 Apr 2025 04:00:41 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: xurUNp77srgaH8jTc7faP4Y9IOs65TwSykpzh7Rxufw=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:8a:13:00:f7:4e:27:6b:aa:ff:51:aa:73:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Apr 27 04:00:41 2025 GMT
Not After : Apr 28 04:00:41 2025 GMT
Subject: CN=af1dde44df97562b49e0500088f49c52a63f7d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:d0:a0:42:7b:67:6b:69:9f:bb:1d:27:c0:
b8:eb:62:4d:fc:86:5c:16:40:c1:7e:d9:fe:b5:b3:
1f:15:5a:d8:42:18:43:41:bd:91:f1:84:69:15:3a:
70:45:bd:65:61:08:bd:e3:4e:82:6b:e6:e2:fc:93:
1b:cd:74:63:7d:b8:9e:c5:96:b8:a5:f4:04:ed:03:
0e:34:2a:a6:1d:c1:0f:16:b1:eb:da:82:24:b4:53:
e2:ed:d3:ff:ee:d2:99:7c:56:18:63:49:01:8e:6b:
26:a7:76:be:9d:f3:9f:92:9d:2e:87:4e:23:48:d6:
bd:47:1a:ce:c4:13:e4:65:2b:76:48:bb:8c:f9:7b:
b3:3d:99:76:17:67:9f:74:92:01:db:e7:b0:c2:e4:
79:e0:b7:65:6b:26:77:9a:9b:57:6c:d8:13:a8:da:
97:54:c0:ed:35:e8:3a:af:15:8c:5a:8f:18:48:3b:
39:d2:b9:66:6a:95:7f:8e:5b:0a:b3:a3:9a:c5:94:
4c:46:0e:e9:d0:46:b7:d8:08:e4:f9:5b:94:a7:b1:
50:f7:ee:2a:5b:60:67:e8:d0:95:9b:e7:1f:33:c8:
04:41:ff:99:c0:34:0c:87:d9:e9:38:2b:79:c4:26:
60:a8:91:33:f6:90:51:66:ad:b6:b5:de:81:0b:e4:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1D:DE:44:DF:97:56:2B:49:E0:50:00:88:F4:9C:52:A6:3F:7D:69
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:90:b2:52:fd:23:d6:f0:ca:cc:33:9d:a9:57:20:1a:3a:f3:
3a:d1:da:5e:e0:93:91:39:ff:64:96:f8:37:0d:3d:a9:05:98:
03:d6:b6:c4:8c:0a:fa:d4:a0:03:61:06:37:04:7f:7a:26:bf:
db:a1:e4:6f:f6:f2:28:13:8a:29:8b:fa:92:d9:2a:4c:c2:d7:
d8:09:46:f5:bf:d6:4c:9c:bd:37:62:9e:dd:12:7b:a2:fd:bc:
cf:a6:30:f0:be:9a:cc:dd:dd:ad:86:55:12:16:20:e8:f0:be:
46:31:25:91:28:69:29:d8:21:c8:ca:2e:d7:ea:4b:79:97:7e:
2c:68:02:e9:05:fc:d5:d5:42:5a:f9:4f:44:86:b6:07:0e:45:
1f:60:35:b0:77:29:08:10:ba:2a:87:5e:bd:c2:3e:a6:d0:96:
84:0f:c8:1f:3c:2d:00:30:7c:cd:4f:06:25:39:f0:d7:5d:cc:
23:fd:19:3d:db:f6:1c:1f:d1:c5:d0:f7:ca:b3:1b:9b:2a:72:
b4:d5:18:99:36:ed:27:3d:0c:b5:24:ee:24:30:f8:a3:42:da:
65:8a:43:98:d0:f4:eb:39:06:60:d7:3b:71:70:60:f7:aa:60:
6d:e6:c3:a6:55:a4:94:35:e4:44:7b:3e:d4:aa:e9:81:07:ec:
bb:9d:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:04:28 2025 by rpki-client