Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
File: srV8B2efEIcOxTs576fQiwhXqRE.mft (raw, json)
Hash identifier: Bik4mS30Qddq1VnEMcZrM4vnzkUu5UGJmKj3wFEHTEQ=
Subject key identifier: 7D:1F:7A:60:2F:34:3D:71:9A:BC:E1:95:D8:22:AF:55:51:58:09:AD
Authority key identifier: B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
Certificate issuer: /CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Certificate serial: 01967F0F16CFED3FDA324763BEAE3C0B2C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
Manifest number: 0949
Signing time: Tue 29 Apr 2025 01:00:17 +0000
Manifest this update: Tue 29 Apr 2025 01:00:17 +0000
Manifest next update: Wed 30 Apr 2025 01:00:17 +0000
Files and hashes: 1: ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa (hash: FRWb8W/VjUKZi4bCa79dR9xehManyu8Gtrb5uK1Umc8=)
2: srV8B2efEIcOxTs576fQiwhXqRE.crl (hash: VymBEDx+GYVjOvLHt/1ZBZG2Hxi3uFGAhWYe+UZr6lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:16:cf:ed:3f:da:32:47:63:be:ae:3c:0b:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Validity
Not Before: Apr 29 01:00:17 2025 GMT
Not After : Apr 30 01:00:17 2025 GMT
Subject: CN=7d1f7a602f343d719abce195d822af55515809ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:3d:56:9a:c8:d4:10:8d:55:4a:aa:17:c9:
56:2b:01:79:ab:79:40:a9:bd:d6:db:44:3f:e6:b0:
4e:8c:f6:3b:c8:55:7d:3f:70:f1:d3:20:c0:39:77:
f1:41:89:70:af:95:e8:1a:87:27:71:ab:61:4d:b5:
25:90:14:00:e0:1c:8b:f3:c4:36:bf:c3:e6:c2:b3:
65:7e:57:97:ef:e7:0b:6d:5b:cb:2b:79:4e:5b:18:
aa:2a:d9:71:1c:e1:53:a8:55:c6:d7:46:26:d2:54:
9a:ac:c5:a6:84:4e:a3:5b:74:cc:7a:cf:2b:02:97:
1c:80:60:9f:00:46:59:2d:ae:da:17:be:0e:c4:f9:
89:56:14:1d:83:60:a9:7d:c4:d4:19:9e:60:71:ad:
7c:a2:ba:b8:eb:ac:e5:33:40:41:40:fb:00:17:03:
fc:75:ad:36:90:49:e2:de:cd:4c:a5:6e:3a:e3:c2:
bc:2c:56:21:7b:b6:92:60:cf:76:b3:98:ce:2e:16:
f7:9e:4d:06:73:d7:2f:8f:0d:98:d6:13:2f:46:2a:
cc:70:4b:34:f7:9a:86:fe:36:78:81:1c:08:f1:08:
e7:ef:1a:ac:67:e5:59:bf:83:a3:68:a7:46:2d:39:
ca:66:1a:b8:4c:32:c0:54:76:cb:32:80:6c:a1:f4:
1c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1F:7A:60:2F:34:3D:71:9A:BC:E1:95:D8:22:AF:55:51:58:09:AD
X509v3 Authority Key Identifier:
keyid:B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:12:18:0e:9e:32:d3:7e:03:b7:a8:c2:cd:a4:97:be:dd:38:
d4:33:53:db:fa:af:79:97:6f:f5:f2:19:9c:13:14:ba:4e:66:
a5:1f:09:19:20:28:d7:d9:ce:b2:51:7d:24:d3:ba:7a:7e:05:
47:5f:d7:9d:f7:8f:ba:35:74:41:9e:3d:04:58:35:2e:c6:2a:
55:8e:99:de:47:dd:ac:5a:f8:6c:a0:5a:14:2e:20:16:b5:ec:
62:51:91:a9:77:dd:bb:d2:f8:22:4d:5d:45:6b:2e:f4:3a:f8:
20:62:b7:07:4e:1d:f4:08:1e:36:9d:0f:ef:84:7b:d7:83:da:
1f:58:49:6b:6f:40:02:ef:a4:47:72:fe:fd:37:92:db:98:33:
f3:18:96:dd:2d:ae:bb:a5:81:3d:60:8f:b5:55:3a:ad:45:c1:
0d:6c:0a:d2:8f:42:f7:db:d0:9e:30:a4:f9:11:09:db:1a:09:
9a:49:78:0b:48:6b:ee:13:b5:2b:4a:1a:1b:0b:9b:66:db:1d:
21:b2:d0:5c:99:2c:2e:d8:5d:56:2f:1f:a7:27:db:98:ec:17:
52:f0:8d:86:3e:d9:82:39:b0:57:65:ad:9b:db:29:bd:84:db:
ff:3c:40:9d:b8:4a:0d:36:a0:a3:95:29:c7:a7:40:c4:25:26:
b1:e5:b0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:43 2025 by rpki-client