Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier: M2w2tXatI+birzhqFXGHsBZm9FwAAonwhtmiMUT1hpk=
Subject key identifier: F4:8F:DC:FE:D3:B0:F6:D8:38:EF:47:8E:A1:09:5A:78:08:90:62:B8
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer: /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial: 01967B696717D092AE1589A438529E7E1005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 08:00:27 +0000
Manifest this update: Mon 28 Apr 2025 08:00:27 +0000
Manifest next update: Tue 29 Apr 2025 08:00:27 +0000
Files and hashes: 1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=)
2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: OriKavg/jlVbLLWgK5JnIouBXyw+aojOCmXlYgWNznQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:67:17:d0:92:ae:15:89:a4:38:52:9e:7e:10:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Validity
Not Before: Apr 28 08:00:27 2025 GMT
Not After : Apr 29 08:00:27 2025 GMT
Subject: CN=f48fdcfed3b0f6d838ef478ea1095a78089062b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:07:f5:51:b5:e6:2a:a4:9d:a0:20:72:f2:
96:65:7e:24:7d:15:0a:67:34:b5:b9:91:52:a2:a0:
9a:bf:f9:16:ea:e2:45:7b:33:54:fd:26:ed:62:32:
28:3d:fd:3b:96:8e:93:de:09:e7:e6:2b:f5:c8:19:
eb:25:4b:1c:b5:d1:e9:05:de:6e:58:b8:ed:da:a9:
23:02:b3:a4:31:1b:a6:0b:e2:7f:b4:19:2a:24:19:
f8:c1:09:4c:8b:5d:7e:bd:3e:46:79:43:47:bf:43:
4d:a6:b8:40:fb:42:44:d2:30:7d:f9:c7:f9:3e:65:
e6:9d:0e:d5:89:d3:6c:a6:95:26:95:ac:e7:43:08:
44:aa:07:ac:f6:12:25:c0:2d:fd:0e:c3:73:e7:cb:
5e:2a:94:a2:a6:e1:9e:86:6d:8c:a3:0a:80:02:b6:
9a:72:8c:4c:23:34:0f:d3:fd:e3:52:a3:05:8e:01:
de:2b:be:bb:7b:3a:2e:8b:f2:fc:ac:66:69:5a:27:
17:09:e0:fb:d2:b9:13:50:87:a9:b5:29:30:cb:04:
a2:d7:d1:d1:95:00:c9:c5:64:6f:ab:46:7d:d9:e2:
c9:b6:e5:42:8b:e9:16:a9:1a:da:c0:0f:31:6f:08:
a3:fb:11:cf:10:56:77:17:f8:db:43:66:86:27:86:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:DC:FE:D3:B0:F6:D8:38:EF:47:8E:A1:09:5A:78:08:90:62:B8
X509v3 Authority Key Identifier:
keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:eb:e8:4d:fb:95:25:92:92:0b:3a:aa:45:b7:89:bd:4f:63:
d0:e5:ab:b8:96:de:47:34:a4:d8:ad:f3:c0:9f:db:58:79:14:
2e:3d:d0:8b:76:ad:83:48:ba:b3:1e:eb:11:22:97:a3:f6:cc:
74:e3:da:8d:e4:6a:41:77:b0:13:75:6e:06:24:0e:74:2c:e8:
2f:b8:30:e8:8f:16:9e:d3:0b:6d:97:c6:ba:64:df:bf:d6:27:
09:37:b8:65:38:74:7f:8e:84:e0:17:61:a5:cf:00:bc:30:50:
49:b2:ce:f3:0a:54:27:0b:3e:16:ea:79:07:9a:b1:90:03:09:
56:64:a0:f4:8f:3e:a7:0d:95:e5:99:20:b3:3f:78:10:1b:37:
84:32:6e:7f:52:81:1f:34:cc:e1:8e:45:ec:5f:df:9a:38:d9:
31:84:83:e7:71:73:ae:8e:6a:43:42:16:d6:a2:f6:dc:89:46:
2e:d5:bc:dd:53:14:43:6a:36:6a:f6:98:b6:57:4a:9d:09:bd:
65:77:11:ff:b2:ad:d9:a3:26:42:14:32:5e:67:b8:25:4d:fe:
fd:96:68:38:17:5e:70:45:d3:25:b7:92:fd:14:38:4b:fb:45:
99:9c:a3:ad:fd:28:ce:23:bf:38:28:46:87:06:34:03:6d:19:
1e:df:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:42:13 2025 by rpki-client