Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: C3DOpNPlr4ES1TyFW9wR7gw+UW2Tn9NOzonFmbSVS8s=
Subject key identifier: 0B:65:0A:48:03:88:B7:6C:FD:35:ED:C4:5D:30:12:33:D7:01:2D:09
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 019676B0B220563B3D836CB1BA453CB65D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 13FA
Signing time: Sun 27 Apr 2025 10:00:13 +0000
Manifest this update: Sun 27 Apr 2025 10:00:13 +0000
Manifest next update: Mon 28 Apr 2025 10:00:13 +0000
Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: HXA6lEwF1CdPJSJXsrtetL4s9i+E5OC7eAM5E2kiaQU=)
2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b2:20:56:3b:3d:83:6c:b1:ba:45:3c:b6:5d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Apr 27 10:00:13 2025 GMT
Not After : Apr 28 10:00:13 2025 GMT
Subject: CN=0b650a480388b76cfd35edc45d301233d7012d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:10:c3:7d:b2:8d:1e:64:05:f4:7d:14:c7:
56:03:90:bc:16:e6:f7:84:af:99:c6:bf:de:2a:2b:
e3:53:90:22:6a:85:0a:7a:01:e6:87:51:37:78:68:
7b:93:ba:fa:b1:22:8c:86:88:27:60:63:7b:80:a3:
67:5c:e8:f4:f7:59:96:5d:54:18:fa:f5:5a:6e:21:
0e:0a:c2:8b:9c:a8:e6:d1:77:b0:59:e6:e5:ad:e3:
d7:25:40:83:86:5c:b8:4c:21:fb:0b:d2:82:e8:14:
96:6e:dc:f4:d8:ec:53:4d:61:88:47:71:53:bd:e8:
ae:d5:dd:eb:ed:2f:5f:e7:0d:a0:a9:8c:da:a3:ef:
96:28:82:91:60:0c:27:07:31:4a:47:ac:8d:4f:18:
5d:38:05:10:8c:2d:c2:f0:13:b5:c5:8d:50:34:35:
5f:00:ca:07:a2:96:73:1a:fc:ba:c4:6e:89:be:ed:
e4:9f:d2:95:df:92:e4:cd:00:6f:5e:6b:3a:16:8d:
58:3b:e6:df:4c:07:12:0d:aa:97:b8:ea:d2:99:44:
51:5a:46:e4:1a:b4:ad:1c:8f:4d:5d:0d:09:a3:f7:
ee:da:a2:4f:a4:95:2a:aa:67:25:85:ee:c8:d5:ed:
c6:c2:4c:c7:0a:f0:24:0d:de:51:7b:dd:de:bb:ca:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:0A:48:03:88:B7:6C:FD:35:ED:C4:5D:30:12:33:D7:01:2D:09
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7a:cb:91:4a:8c:15:5b:11:90:42:ca:9a:1a:f7:bd:f5:58:
a7:50:5c:8e:56:95:a7:51:cb:d7:bf:2d:cb:a9:13:2f:ee:cb:
78:e3:66:b7:b1:d7:70:d4:6d:61:86:ac:47:3b:7c:42:b7:ba:
6b:68:ef:15:f6:95:a6:8b:b0:7a:02:dc:08:a6:ef:12:7b:d8:
83:a4:d9:79:21:94:34:9c:fe:4f:be:65:1a:78:29:da:79:ff:
63:8b:22:f6:56:03:3b:f9:ec:4b:d6:3f:de:d8:34:ac:b5:bc:
e3:fc:9d:ab:a6:26:10:5c:e8:b8:27:86:8a:f1:09:11:55:13:
28:93:a0:67:3a:0f:bd:49:92:3d:66:32:db:2f:29:9f:0e:bf:
2b:8e:03:fa:bb:5c:0c:fe:21:79:2e:6a:a2:47:90:37:47:b9:
c6:79:de:97:46:3d:54:20:51:0f:73:fe:52:76:78:ab:ad:19:
73:f4:f1:af:08:9c:c8:57:2a:7d:75:ed:a1:7c:d2:97:fc:77:
fd:b1:89:0b:61:2e:5c:8e:eb:cf:ab:64:f5:4a:35:56:75:55:
73:29:1e:b3:c5:f3:c0:89:eb:84:b7:8d:91:a4:58:15:4a:59:
b0:00:d7:f3:35:cd:d8:d4:91:4b:06:62:d8:31:37:ff:6d:5a:
70:87:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:55:21 2025 by rpki-client