Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: e8noGXIH9ve6feFuJWrhEDwkiG2WOm7bxqS6G36aulc=
Subject key identifier: 18:74:2A:3A:1C:39:F5:0A:40:6C:6D:41:9B:99:A9:59:C1:41:BC:06
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 0196AD9FBEF65764D685D3CF2C5B2853931C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 10B4
Signing time: Thu 08 May 2025 02:00:49 +0000
Manifest this update: Thu 08 May 2025 02:00:49 +0000
Manifest next update: Fri 09 May 2025 02:00:49 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: oBilSTqU7SngptIKUfDPbfSEKdaSxkOG4hrf4v+6S/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:be:f6:57:64:d6:85:d3:cf:2c:5b:28:53:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: May 8 02:00:49 2025 GMT
Not After : May 9 02:00:49 2025 GMT
Subject: CN=18742a3a1c39f50a406c6d419b99a959c141bc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:0a:60:23:9a:7d:9c:2d:70:69:43:01:e7:
d5:4c:7c:77:ef:a1:8d:de:b1:c4:d9:2a:d9:78:16:
f8:3a:20:7a:50:d5:d8:bc:83:f4:f1:9b:ec:3e:65:
d0:69:9b:b5:4d:da:ca:70:f5:e3:57:e5:96:90:d7:
c8:30:e3:18:d5:81:3c:67:e9:01:17:84:08:5c:57:
fd:16:0b:73:13:04:a4:e9:91:63:3b:8a:ac:af:f5:
3c:4a:c8:2f:fb:39:33:e4:b1:78:dc:f1:9e:04:64:
5d:79:16:87:6f:fd:27:5a:8b:cc:43:23:7e:fb:86:
73:91:fd:fe:67:b6:9c:83:b4:4d:0f:28:49:3d:a7:
42:94:91:06:1b:9c:a2:cb:30:e5:1a:a6:6d:89:f7:
7d:5e:b2:ba:de:e4:a7:00:35:8b:64:f6:aa:d3:db:
cb:46:99:38:d1:4d:31:31:ca:cb:b9:40:8c:4a:95:
d6:3e:8c:59:92:ca:66:30:c7:62:31:b0:4b:a2:b7:
88:c3:93:4d:a5:1d:a7:1b:46:cc:65:80:5c:03:62:
0e:3e:7e:e2:65:04:df:7e:d6:fe:f0:e6:0e:fb:71:
78:06:19:eb:8f:16:e5:cf:81:07:e3:51:46:ac:df:
ab:17:db:1a:5a:62:63:29:33:92:45:03:2e:42:6b:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:74:2A:3A:1C:39:F5:0A:40:6C:6D:41:9B:99:A9:59:C1:41:BC:06
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:52:2e:9d:77:64:a8:4b:99:d5:bb:c3:ac:54:52:57:43:a4:
38:0c:64:68:75:a8:b4:97:fd:c5:54:b5:23:60:2f:da:fb:52:
3f:f6:96:71:57:30:b6:ac:9b:78:b7:52:56:c3:48:7f:03:67:
2c:71:3f:46:61:3b:05:92:47:c7:84:e4:bc:e3:7f:bf:c4:03:
36:3a:a9:7c:85:71:49:fd:34:a2:84:9f:87:dc:b8:02:c3:95:
0e:f3:77:0d:cf:3f:32:51:4d:31:e5:83:68:9a:dd:e6:36:0b:
d7:85:20:9a:2e:65:43:37:86:8d:90:d4:05:a6:95:9e:0a:10:
5c:53:aa:40:78:96:e0:73:10:12:98:d9:99:13:02:c0:da:36:
65:55:1a:65:3a:f0:92:f5:16:ce:65:77:67:7a:71:9a:69:b0:
66:6b:d4:ab:82:2d:b5:b3:93:68:55:b5:80:f9:1b:2f:e5:d9:
d9:1b:cc:9c:cd:e8:31:08:56:a4:a4:e4:4c:70:62:a9:62:16:
58:ae:32:66:81:0d:e2:45:5b:a5:2d:ad:21:ac:02:b1:e7:3b:
6e:89:94:88:75:8b:7b:ff:f6:56:c7:19:49:a3:e4:ca:df:03:
77:38:a7:f0:b2:e7:9a:69:d1:61:48:cd:9e:1a:8d:82:c6:25:
78:01:d0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:35:34 2025 by rpki-client