Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
File: sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json)
Hash identifier: ocjczp1B+ukdK2R4EHmB7nVlLISChGcZ0af7XfkEjrU=
Subject key identifier: D7:96:43:18:C2:A4:14:56:D4:04:7F:8B:95:07:7C:BB:47:0F:15:4B
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 01967A8DB9A3F4203C69DC0D3F658A3501D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 04:00:30 +0000
Manifest this update: Mon 28 Apr 2025 04:00:30 +0000
Manifest next update: Tue 29 Apr 2025 04:00:30 +0000
Files and hashes: 1: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (hash: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=)
2: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (hash: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=)
3: gftrqq2xNPQCOHxaCTBevS63_R0.roa (hash: BBnqHSnGOHFEg3w/aAg1dxePTY9R+tg1C4jtSLBPpAc=)
4: m3cUBYWpFoNJDd2-oxdIXkG8VVc.roa (hash: mpHup3F6Ugyx18V1b4d2pdWmlp5tb6/q3Al4PmenfT8=)
5: s0olpFJOyt15T_pyM--2CmUb0gk.roa (hash: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=)
6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: jAwQqsQHidkMTdaS13qDJ50AI2E9DOTvvfnzS+d/KWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:b9:a3:f4:20:3c:69:dc:0d:3f:65:8a:35:01:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Apr 28 04:00:30 2025 GMT
Not After : Apr 29 04:00:30 2025 GMT
Subject: CN=d7964318c2a41456d4047f8b95077cbb470f154b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:0c:a8:24:81:25:2f:b1:03:08:d2:c6:24:
1c:db:05:67:18:55:cc:c3:12:4c:ad:f8:52:69:01:
5d:4f:bb:65:34:31:e7:78:9c:0e:f1:a3:12:11:3a:
97:32:35:59:7b:7e:7a:28:23:4b:98:7c:0d:de:70:
7b:70:31:b7:f9:1c:ac:8b:15:35:cd:4d:78:fb:db:
55:e4:aa:77:9e:bc:8c:92:78:1c:7f:37:76:03:bf:
20:28:f4:44:64:81:cd:7a:61:f1:86:b4:81:a7:e1:
4a:99:f1:15:77:93:95:42:66:c0:01:93:ce:5b:53:
24:92:14:e2:3e:27:67:d0:36:0d:95:16:ee:1b:31:
4e:6b:0e:38:56:48:1d:1d:fc:17:88:27:dd:94:71:
b8:97:75:5c:21:a2:bf:9f:45:17:03:63:96:52:32:
bb:2b:ee:76:5e:e7:74:dc:44:2e:c6:87:b3:0f:3b:
4d:a7:5c:12:db:db:a5:db:41:db:6d:0a:3a:9d:df:
cb:ed:b1:f2:95:a6:89:df:6f:54:11:f0:6c:e6:30:
55:4f:5a:bc:94:4d:41:b6:fc:ac:45:77:35:33:1f:
e0:7a:6a:60:96:c2:75:85:51:22:4e:39:dd:ec:00:
77:23:8b:74:f2:d9:46:4c:2f:e5:3b:2e:36:4e:d8:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:43:18:C2:A4:14:56:D4:04:7F:8B:95:07:7C:BB:47:0F:15:4B
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:52:b8:e0:5a:92:d6:77:69:5a:38:16:f0:a1:da:ff:45:6c:
eb:82:ab:2b:4e:4d:ac:45:d4:79:a6:fc:1a:8a:fe:3c:6d:c4:
fe:f8:55:d5:83:c6:48:cf:d6:82:72:51:60:82:08:75:93:15:
bf:ee:a6:17:e6:18:67:08:20:0a:f1:9d:30:b0:1a:3f:90:52:
98:7b:00:19:ee:6a:75:23:d3:98:09:1f:59:7b:18:ce:50:45:
0e:64:69:25:b6:42:8c:c3:02:88:6b:fa:7e:89:3c:0b:40:55:
e8:dc:68:ab:16:8e:3d:0f:65:74:db:0a:3f:0a:e5:3d:a9:db:
43:19:fa:93:9b:8a:b3:2c:ef:c2:e7:c8:48:cd:21:e2:11:61:
20:2d:e4:cf:e4:40:14:c7:ba:7c:2d:36:5f:a5:3e:e9:f5:00:
4c:30:37:d5:3a:25:e3:be:16:30:38:15:31:94:b7:88:36:15:
ef:f4:7d:67:36:52:aa:8e:14:7c:c2:c6:b8:0e:2d:05:4f:9b:
9a:ba:63:cd:71:c5:d5:73:6e:17:0a:46:bc:5e:dd:09:33:24:
47:0f:f1:6e:8f:ae:cd:46:95:da:66:2a:31:2f:f0:e2:4c:2d:
dd:6a:eb:e7:67:af:d6:7a:e9:40:46:67:a8:04:5a:1b:94:8e:
31:a5:1e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:34:43 2025 by rpki-client