Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File: sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier: cKf/aDIwMVdv/HUgNxkAjeBN6w3lQKL82dVm1Gq+Pr8=
Subject key identifier: 80:5A:B5:BB:D2:73:9C:7F:3E:DD:B8:81:C8:EA:1A:6E:11:95:21:56
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 019677FAD7E1CC6F69AD2077AB7A88B51ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number: 02FB
Signing time: Sun 27 Apr 2025 16:00:50 +0000
Manifest this update: Sun 27 Apr 2025 16:00:50 +0000
Manifest next update: Mon 28 Apr 2025 16:00:50 +0000
Files and hashes: 1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=)
2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: JlcB1JdCRz/UZ20cFUAZ9DlU8aQ3BDjjzQCY08QJnrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:d7:e1:cc:6f:69:ad:20:77:ab:7a:88:b5:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: Apr 27 16:00:50 2025 GMT
Not After : Apr 28 16:00:50 2025 GMT
Subject: CN=805ab5bbd2739c7f3eddb881c8ea1a6e11952156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:d0:51:ce:0e:5a:f0:ea:52:bc:ed:e5:d3:
05:25:20:11:21:28:8c:e8:71:97:84:92:17:7f:56:
52:f4:ec:70:c6:f2:17:aa:05:4c:ca:b2:3a:c3:9b:
60:bd:ba:80:3f:56:13:13:0f:8b:cb:32:4f:fe:79:
59:b1:e8:bf:e4:1d:94:f5:48:80:05:82:64:02:7a:
ed:d8:22:94:26:4f:8d:49:7d:6f:53:82:67:86:57:
bf:41:62:de:ea:ab:e4:0e:a4:71:f0:e6:f2:b4:43:
13:49:5e:36:48:49:45:52:4c:c3:6a:7b:5f:d1:e5:
03:95:06:08:ce:49:10:4b:97:b8:39:9d:55:c0:75:
73:93:2b:af:85:9a:12:94:6a:21:9d:1f:70:96:2a:
fe:10:2d:be:31:bb:df:90:5e:50:8e:25:61:4c:20:
f1:f7:ba:e7:37:c1:95:75:69:f8:35:c6:eb:ac:87:
d9:fe:ce:23:4c:09:e4:d6:44:51:ef:01:0f:6e:fc:
f3:35:fb:e8:8c:dd:17:e6:a8:f9:5d:96:92:e7:aa:
fc:31:db:bb:f8:64:e7:7f:b0:e4:c6:41:0c:32:eb:
9f:20:fe:22:73:dd:8e:af:ed:24:fb:91:3e:50:4d:
51:aa:c3:b2:08:0d:32:dd:37:30:60:a2:b6:ed:d1:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:B5:BB:D2:73:9C:7F:3E:DD:B8:81:C8:EA:1A:6E:11:95:21:56
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:41:65:2f:85:bf:e9:a7:3e:cd:d9:aa:7d:56:8b:4e:93:ff:
8a:e9:52:e6:ed:fb:23:dc:01:ac:f1:94:48:c9:75:c6:ef:0a:
7e:a0:39:28:e8:e9:8d:d8:3e:50:f4:99:81:e1:a1:7d:d6:89:
10:e3:58:93:e3:cd:bd:11:ed:f3:e1:d2:2e:ba:c3:f6:50:ac:
3f:1d:e2:f7:86:2c:c6:86:60:bf:97:04:af:02:dc:dc:29:98:
6c:f5:aa:ac:22:22:e1:b6:9e:ef:f8:ad:d2:79:b9:09:66:60:
50:cf:03:58:eb:94:71:5f:13:5b:b8:0d:19:89:1c:a5:79:8f:
9d:e4:73:98:af:c2:3f:ea:07:4d:c9:10:31:70:3a:6b:a5:4a:
ac:68:93:78:9c:84:59:5d:b5:f8:46:16:ad:34:00:a5:87:01:
5e:63:9b:17:47:1d:12:28:a5:96:bc:a6:3a:0f:4c:45:a5:50:
09:25:71:8d:0c:1c:d6:a1:e4:38:5d:fa:8c:b1:07:aa:42:d4:
8f:04:f4:21:f3:2e:8e:2f:89:79:6e:a5:d7:e9:95:3b:67:e6:
bd:6a:be:07:06:b9:94:56:d6:39:eb:3e:9f:3b:54:92:1a:79:
e8:86:31:b2:ca:78:f5:e6:86:85:42:1f:9c:41:2e:c3:06:f2:
64:4b:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:12:21 2025 by rpki-client