Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File: S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier: pX0ZbURgSOT4q44Kkfk1u9wNDol/We5aAwx3xN9/43Y=
Subject key identifier: F9:68:29:55:12:6D:BF:8C:2D:89:73:21:87:20:D5:74:7C:6C:FD:F2
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial: 01967E33A950A448D91CECBEF9B49032E7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number: 0FED
Signing time: Mon 28 Apr 2025 21:00:36 +0000
Manifest this update: Mon 28 Apr 2025 21:00:36 +0000
Manifest next update: Tue 29 Apr 2025 21:00:36 +0000
Files and hashes: 1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: Wvnn2codcVNznrY/xf6DB0H9BmVksOHqQaEliL7VKIE=)
2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:a9:50:a4:48:d9:1c:ec:be:f9:b4:90:32:e7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Validity
Not Before: Apr 28 21:00:36 2025 GMT
Not After : Apr 29 21:00:36 2025 GMT
Subject: CN=f9682955126dbf8c2d8973218720d5747c6cfdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:72:c7:6b:57:c9:86:60:68:95:35:c3:62:
3a:7f:23:5a:c4:59:eb:46:c5:de:39:0e:8f:7b:c6:
dd:10:96:9c:aa:5f:fc:06:32:3b:fc:16:9f:7d:9b:
35:aa:9d:7d:5e:a6:a6:00:dc:62:51:04:d2:a3:6d:
8b:00:dc:b5:f7:83:eb:d4:72:a7:39:83:fe:ba:41:
0a:c7:d4:c2:a4:f9:60:13:e6:d6:a1:2b:ed:04:08:
20:a6:1a:9b:18:c3:4a:2a:fe:25:38:1b:95:0a:cd:
1e:19:f0:b8:85:9c:f8:21:c7:a6:1c:83:6a:7c:46:
4f:f7:13:d8:7c:fe:e9:ce:c2:f4:88:03:db:21:fc:
ad:1c:d9:c6:2e:b5:07:3c:45:59:70:6c:ac:ab:52:
06:19:61:d9:d9:32:d6:cc:e4:5b:e8:25:3a:e0:40:
17:80:ab:64:b9:45:58:68:fe:3a:7e:a6:d0:25:a5:
b2:23:29:81:18:0a:67:9f:74:c0:24:4a:bf:7a:da:
75:bb:0d:e0:a0:3c:1b:ad:b9:bd:be:12:ef:b1:1f:
55:c9:e8:bf:9a:66:f3:e7:52:00:45:ff:18:7b:97:
a1:f6:7b:a6:f4:e7:37:4c:5b:dd:2d:b3:5a:b2:d2:
48:b9:e9:79:3e:35:63:1c:f7:6e:c5:66:47:a9:ab:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:29:55:12:6D:BF:8C:2D:89:73:21:87:20:D5:74:7C:6C:FD:F2
X509v3 Authority Key Identifier:
keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:31:2d:03:31:28:e7:80:76:92:e9:32:7c:bb:5d:0e:9f:ff:
de:66:7a:87:39:81:d8:c5:8f:1b:5b:56:c9:ef:92:21:12:35:
01:b9:80:88:58:a4:03:7b:0e:9f:8a:b9:30:96:e8:7c:d8:40:
3b:85:df:ce:cd:a3:f5:ad:76:03:ad:ea:fb:a0:9b:b7:35:c1:
ae:b2:66:bc:02:74:18:f6:65:6b:ae:32:70:41:45:cf:ea:52:
30:ec:65:6c:d8:ee:b0:07:fb:c0:2c:88:40:47:92:56:80:cb:
93:57:59:cb:cc:84:c5:20:b8:c0:c4:15:64:16:49:b6:9b:a1:
fb:42:de:3f:8b:e0:ea:e0:02:32:6f:81:f7:f3:1d:19:8d:d9:
64:02:0f:5e:e2:23:72:37:06:bd:9d:eb:02:07:8b:f4:7e:1f:
7e:88:4c:0d:b8:cf:39:f7:b5:1b:79:41:05:10:ad:8d:ae:9b:
07:7d:14:1e:05:70:05:08:b9:39:2e:70:33:15:59:fa:96:4b:
11:59:0b:6e:f3:f8:74:0a:03:ca:87:93:01:dd:b9:99:0c:30:
b9:3b:93:7c:bc:54:b6:fc:a6:d8:a3:2d:ec:0a:49:58:25:d9:
31:99:da:f7:ed:d6:c6:17:68:06:2a:d3:e6:f8:cd:da:85:09:
d6:c5:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:41:51 2025 by rpki-client