Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: Y0S8G6U9uCBddGTwpV7KnIDa1S3c4NCRWYD3sAsGG8c=
Subject key identifier: 5B:B1:0D:86:29:54:7F:66:F1:D9:F6:04:B5:1D:80:86:DF:AA:E9:6F
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 01967B69B771305072CD3BADBE7C314A5CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 1263
Signing time: Mon 28 Apr 2025 08:00:47 +0000
Manifest this update: Mon 28 Apr 2025 08:00:47 +0000
Manifest next update: Tue 29 Apr 2025 08:00:47 +0000
Files and hashes: 1: LM0g69HtGp_batQfV5x1NEUMmOk.roa (hash: 7VtBpd+wuDX24L0fq4Y7fsMl9oygXrzXXYzNLlqhtLg=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: BegE7E9vvOKCBWdp9v5YD6hLtPosIJueWm4aq9A8HL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:b7:71:30:50:72:cd:3b:ad:be:7c:31:4a:5c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Apr 28 08:00:47 2025 GMT
Not After : Apr 29 08:00:47 2025 GMT
Subject: CN=5bb10d8629547f66f1d9f604b51d8086dfaae96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:21:79:21:92:cb:c6:d5:a8:a2:79:25:09:
d1:61:9f:1b:3d:42:f4:b1:c7:c3:28:73:9f:85:7d:
49:47:fc:85:f8:8f:47:19:d1:aa:ae:5e:88:ff:56:
0b:52:cf:66:1a:cf:cb:ac:9a:45:2e:df:bd:2c:d1:
80:b9:a0:98:d6:f7:31:99:76:2e:60:a8:e9:44:50:
1a:2b:2c:12:5b:a7:0a:7a:d0:fb:1f:ac:73:47:b1:
f3:81:12:b8:6e:f9:83:bb:3e:2d:ca:7a:55:b4:bf:
f7:97:2e:59:f7:99:80:90:a5:36:9f:37:66:60:73:
b3:79:3f:c2:e1:8f:be:48:d9:de:55:e0:81:7e:75:
11:96:bc:77:66:32:69:02:3a:57:35:55:21:f7:18:
75:fb:c1:c6:e7:0b:79:0d:47:ef:0a:61:23:31:c9:
17:c1:0c:c8:e4:c0:ab:d6:39:7d:f9:59:fb:c6:2f:
d5:15:e3:2c:bc:43:42:fc:33:c0:5d:d4:56:ff:f8:
2b:d0:2d:3b:5e:cc:51:02:7a:c7:88:d9:dc:88:ca:
6a:c9:e8:74:38:d2:84:ae:66:dd:45:1d:1c:5d:1f:
12:2b:11:9e:bd:76:77:e3:80:0d:a7:1a:63:72:f9:
91:a3:5b:0e:69:a1:f5:41:c9:b6:85:5a:ef:ab:e3:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:0D:86:29:54:7F:66:F1:D9:F6:04:B5:1D:80:86:DF:AA:E9:6F
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:b2:c7:2a:de:7a:41:b4:88:2b:a7:dc:ce:db:79:f4:98:
53:88:b0:c6:69:ac:b8:86:e9:20:94:3a:8c:9c:dc:47:ba:c2:
2e:1d:74:98:f6:4b:19:05:97:89:ff:b4:8e:32:af:78:76:35:
f3:d4:77:16:16:d3:99:47:c6:8b:c8:30:18:61:e0:1e:e9:2c:
b9:a4:a8:2e:5d:1a:fe:5e:f4:2a:70:49:02:a4:dd:aa:4c:ba:
af:c1:bb:2b:94:97:7d:a3:fe:e8:9a:2d:2e:55:f0:27:da:1f:
aa:77:a1:31:7e:4b:7c:bb:fa:11:7d:b2:53:e3:25:bc:ad:d3:
b0:5d:24:58:84:bb:8c:fc:13:8e:81:83:8f:0f:89:85:62:b9:
b1:be:98:af:d0:d0:a8:71:63:c8:bb:b7:df:d1:02:19:31:42:
1d:5a:e8:47:c2:3e:60:d7:40:aa:b2:b4:9f:5a:43:30:69:a3:
af:0d:06:83:62:4b:b4:f2:27:0d:08:27:8a:6e:91:d3:06:38:
59:41:6a:29:18:e1:38:45:d7:17:54:48:33:54:57:7d:a3:48:
ec:ad:ce:bd:6a:21:41:ab:7e:9b:97:37:86:7d:f8:44:88:9d:
ef:7f:79:d9:2a:27:a8:2e:bd:52:60:fc:96:f6:d5:2a:05:b5:
3a:bf:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:19 2025 by rpki-client