Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier: JbWJz173TJ9F/j9+3b5/ql1wvUSCXRzIJauuhzYEtdU=
Subject key identifier: DA:D2:8B:26:DA:B8:37:CD:D0:5F:96:12:C1:D3:73:0D:C3:71:DA:29
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 01968E8253E7372DDECB9954456DF6590EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number: 0A35
Signing time: Fri 02 May 2025 01:00:27 +0000
Manifest this update: Fri 02 May 2025 01:00:27 +0000
Manifest next update: Sat 03 May 2025 01:00:27 +0000
Files and hashes: 1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=)
2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: yeSr6VjBDszs7djZT2QsofadNMPfGG4RyUmxb1FM+/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:53:e7:37:2d:de:cb:99:54:45:6d:f6:59:0e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: May 2 01:00:27 2025 GMT
Not After : May 3 01:00:27 2025 GMT
Subject: CN=dad28b26dab837cdd05f9612c1d3730dc371da29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:53:ff:00:81:a9:52:af:8d:d8:42:d3:0d:
7f:73:68:a9:51:ce:b6:27:fe:7f:58:ef:62:11:8a:
98:77:00:4d:d4:b9:41:8a:f5:86:a7:77:38:90:af:
1d:fc:1b:b4:b0:cb:24:f8:2f:4a:a1:7b:56:1d:25:
55:1f:1e:83:b0:c4:e9:b8:9e:aa:74:7b:a4:a2:b6:
07:de:ad:e2:51:70:24:cb:84:38:35:a9:fa:13:b0:
b3:d8:05:a8:0f:ad:46:21:87:31:e5:24:f5:87:e0:
b9:f8:44:4b:9c:5f:a5:7b:40:c2:a4:53:18:dd:3c:
99:14:62:5b:26:0f:82:d6:59:af:c1:08:dd:67:e6:
13:84:8b:cc:4c:ef:7b:0b:a6:f7:b3:7a:ab:fd:56:
5e:b2:3a:c9:c5:19:c3:08:a9:74:d6:b1:ab:81:b2:
81:1c:db:cd:6c:eb:35:43:63:6a:f7:5a:e8:aa:63:
20:11:17:59:a7:3b:47:88:2a:2e:f4:08:89:a4:40:
a2:07:21:ff:4e:38:1e:eb:5c:44:fa:41:44:e9:18:
a5:58:6d:28:cb:5e:eb:71:65:67:70:43:87:f9:02:
da:65:45:f4:1f:67:b8:fa:7d:8e:da:58:32:89:c2:
ee:d1:16:14:4c:11:49:38:6b:bf:47:0e:5c:50:3a:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:8B:26:DA:B8:37:CD:D0:5F:96:12:C1:D3:73:0D:C3:71:DA:29
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bb:5d:e7:87:a2:76:8e:9b:6e:9b:a5:4f:e0:d4:76:eb:a4:
a6:f1:a9:ff:9f:8e:5b:d5:7d:36:7d:d4:3d:85:9b:d9:33:fc:
1d:98:28:9b:37:93:bb:4e:9b:c8:bd:b8:a7:6f:52:44:71:6a:
55:cd:94:73:93:04:26:3f:b3:35:31:c7:1f:e1:4f:97:f2:50:
79:58:e8:5a:56:15:7c:36:20:a9:fa:f5:4b:c2:7e:fb:1d:4f:
d2:02:79:1f:93:b4:6a:ef:62:4c:ea:48:b9:a2:1c:4a:15:98:
9e:63:b8:22:18:64:5a:4a:1a:ca:b8:b1:0a:45:cd:00:0c:36:
84:b0:fa:ef:f0:1e:90:01:47:1a:51:38:cb:c8:d2:2f:e3:14:
59:42:b6:f1:86:15:d6:c6:e3:27:a8:4a:26:6d:19:a9:2e:38:
25:b8:70:1e:e1:10:11:15:f2:ab:f5:8d:e1:2b:f0:ca:1c:62:
68:94:51:2e:fb:f6:99:84:f8:72:31:b9:6a:62:fb:1e:7b:c5:
21:c4:5e:ec:e9:74:71:f5:83:dd:66:d3:1e:41:d0:7b:b0:91:
40:76:15:f7:eb:2e:d4:cc:52:af:5a:a4:d2:b6:f5:14:36:d5:
5a:c2:11:ad:a8:1c:80:a1:cb:5c:53:81:bc:5a:15:64:d2:72:
5d:93:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:33:01 2025 by rpki-client