Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: A/NiW3lyQWYEAxbx2IdWFzqs7BmN/XzP8jsTIUMuC7Q=
Subject key identifier: 97:EE:10:CF:85:9F:4F:77:DA:47:B4:1D:E4:8A:D2:6B:0B:83:05:D1
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019688B729CA94A73CF27C8BF48A44CE004B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 0D24
Signing time: Wed 30 Apr 2025 22:00:26 +0000
Manifest this update: Wed 30 Apr 2025 22:00:26 +0000
Manifest next update: Thu 01 May 2025 22:00:26 +0000
Files and hashes: 1: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (hash: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: Bm8u1+bcwTQ0FXLZeNcKWl5kHTKpsXVvTLiY9j42DQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:29:ca:94:a7:3c:f2:7c:8b:f4:8a:44:ce:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Apr 30 22:00:26 2025 GMT
Not After : May 1 22:00:26 2025 GMT
Subject: CN=97ee10cf859f4f77da47b41de48ad26b0b8305d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:8e:41:6b:4b:52:2e:9d:c5:ff:51:5e:33:
30:6f:85:41:99:c5:9b:9e:03:ae:b4:e6:30:7e:4a:
6e:81:30:30:36:67:12:e4:39:3b:aa:3a:c2:0d:be:
f1:64:f3:7f:93:7e:e8:d3:25:a3:52:7c:ab:a7:4c:
55:9b:8b:21:b7:00:d1:b7:9e:bf:82:e6:dc:59:68:
15:9d:70:63:0c:f3:42:a5:ba:7a:9d:82:3b:65:e1:
fc:5c:fe:28:0b:7c:ef:51:2b:20:40:c6:6b:ce:7e:
07:d0:1b:14:0d:ce:54:26:14:8e:5c:39:f6:7a:a4:
b9:67:38:d7:ab:b4:b6:c7:73:a3:81:7f:e8:6e:be:
18:c6:6b:3d:49:64:5c:8e:3a:07:3f:2a:99:69:3d:
5f:26:ba:7a:f8:16:d8:51:ca:49:7d:1a:bf:ab:56:
dd:63:9c:fd:9a:c4:40:bd:db:b0:37:55:52:b3:41:
e8:ca:0a:a4:33:ef:c0:99:a3:97:7e:55:e9:70:4c:
1a:00:1c:08:f8:ff:27:35:d1:0f:2c:f6:17:7a:48:
dd:59:d4:01:03:1e:91:e9:27:f4:0a:21:4b:fd:57:
6f:2a:6b:f6:5f:41:59:b0:87:64:08:98:d8:e2:09:
b2:35:d8:4d:9e:6b:83:27:24:0b:13:72:d4:e7:da:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:10:CF:85:9F:4F:77:DA:47:B4:1D:E4:8A:D2:6B:0B:83:05:D1
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:60:5d:98:ee:bd:d0:2d:ad:32:00:44:0c:82:2a:f5:75:df:
53:ec:fd:07:f0:08:1f:c0:d6:bb:5a:b5:c1:7b:2d:b7:31:7b:
97:8f:b3:52:90:bc:7a:4f:a4:e6:c7:f3:f5:1c:83:93:9d:56:
35:e6:6e:4d:f8:e7:ae:4a:0a:45:4d:39:7c:6e:ef:22:c1:34:
01:fe:9e:be:bc:05:80:e0:13:d4:92:e9:4e:e7:1c:3a:94:d6:
5a:bc:67:3d:cd:19:37:2d:22:7d:95:ef:cc:c6:a6:69:11:cc:
b8:8b:46:06:0a:84:23:c1:c5:4e:b2:66:8e:b4:a0:8f:0e:b6:
c9:26:04:36:3d:bc:1f:df:9b:51:7d:32:4d:c1:96:b3:f1:fa:
fa:0d:62:e2:72:17:04:07:49:e1:b1:e8:34:6f:a3:ff:b8:1c:
03:33:bb:80:b0:f3:c0:4e:45:9a:a7:d7:80:15:29:e8:c2:12:
b6:80:a3:54:b1:e5:2a:e1:2a:15:c3:45:02:ff:15:fe:3c:ef:
4b:4a:ed:18:58:e0:35:02:d9:40:94:81:f4:e5:a3:f2:c9:79:
1d:82:be:68:66:ee:bc:08:b6:6f:db:1f:ff:96:0d:26:4a:09:
5a:5b:4a:16:d8:34:89:bf:f1:a7:1b:d7:39:40:ba:6c:b3:57:
41:e0:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:49:40 2025 by rpki-client