Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: 7uORZi/ERIw+YIMceD1OKeJPwHIBjkdm1rrOHdw3qFo=
Subject key identifier: 6E:E6:75:BA:12:C6:E2:CD:24:17:00:EB:66:99:7C:88:DD:EF:3A:F6
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 01967642D953CFE23C0B0C74AC1C078BE174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 08:00:14 +0000
Manifest this update: Sun 27 Apr 2025 08:00:14 +0000
Manifest next update: Mon 28 Apr 2025 08:00:14 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: yQ+Isg+YrgFFJBc6BN8SZSgf9nQ+QD8g5grbnwpucIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:d9:53:cf:e2:3c:0b:0c:74:ac:1c:07:8b:e1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Apr 27 08:00:14 2025 GMT
Not After : Apr 28 08:00:14 2025 GMT
Subject: CN=6ee675ba12c6e2cd241700eb66997c88ddef3af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:99:84:ee:5b:9f:a9:f7:01:05:1c:e9:bf:
c9:2d:05:91:4d:72:b7:82:df:37:5b:bf:7f:36:00:
ef:1e:31:d9:58:8f:b2:6a:1c:d0:ba:72:35:78:a6:
46:42:d7:77:63:25:85:84:6a:6b:4c:8f:f4:47:e9:
46:99:7f:9c:18:02:96:e5:87:9d:4f:fc:36:20:17:
8e:d9:e6:0d:75:78:51:27:d3:fb:82:2b:64:f6:56:
be:4d:4e:5f:a9:b7:88:83:45:2f:01:f3:4e:87:cd:
1f:a7:bf:3b:43:d8:86:53:61:9d:cf:d6:5c:f4:ed:
cf:2b:16:2f:02:25:7c:29:72:88:1f:d1:24:9f:d0:
ee:b2:5e:fc:6d:92:44:2b:cf:79:84:d3:ec:22:71:
ea:27:f7:9d:f2:74:04:36:96:12:d5:03:1f:f4:3b:
50:b6:86:6d:db:f3:d6:77:91:ef:40:33:b5:28:7a:
eb:93:63:d1:f2:e5:91:cb:3c:61:9d:de:41:69:3f:
64:1e:db:c6:13:bd:6b:8f:6c:5d:cb:9b:68:b5:b7:
e5:e8:3f:43:79:6b:95:27:b0:c5:10:ac:2d:6c:5f:
ea:06:9d:b7:d2:9f:72:1d:d4:f7:0b:1f:3a:79:cc:
93:a5:37:eb:de:ab:8c:bb:ee:3a:ed:75:20:cc:a8:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E6:75:BA:12:C6:E2:CD:24:17:00:EB:66:99:7C:88:DD:EF:3A:F6
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:3d:9c:ab:23:f6:a9:5b:14:62:58:fb:33:da:3e:ca:44:
5b:c4:db:2d:d1:4e:2e:37:c4:d4:a6:a1:f3:68:a1:2b:75:b6:
50:30:0c:ee:ad:a9:a9:3f:2b:14:1c:a8:0c:ef:2b:0b:77:9a:
c8:45:03:b9:70:9f:27:fb:87:8b:17:79:fe:9e:23:3e:3b:a4:
d9:96:09:bd:30:93:65:6e:05:ae:29:84:f5:27:db:45:68:33:
5a:66:86:46:97:72:d7:dd:23:86:04:5e:b6:37:e3:3a:f9:72:
ee:47:8a:0d:63:2f:a7:b2:77:36:89:ff:1a:6a:ec:bf:93:57:
61:d3:06:76:64:5f:b3:bd:e0:03:90:1f:09:1c:c2:81:a3:10:
d3:6e:28:69:d8:2b:ec:21:20:14:87:61:b2:32:f0:e2:c6:5b:
08:ea:58:21:eb:11:e9:83:f4:ad:ce:cc:dc:b4:f3:48:35:d0:
c6:b0:ee:03:49:7d:80:48:cd:39:1c:39:6e:3c:99:6f:3e:32:
ce:45:10:11:e7:e1:73:da:e9:cd:a0:cd:b7:72:46:23:2d:57:
75:63:2b:3f:7e:86:e7:f2:62:f0:52:54:85:2d:91:82:db:e3:
4f:6c:d0:9a:e3:89:37:54:60:ba:c1:8c:8b:ce:7c:72:96:8d:
bf:a3:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:05:42 2025 by rpki-client