Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier: sGG8a2bp9ZkvnjI2KAITyTMJlOATLdccUL9mWYkHwCE=
Subject key identifier: 74:70:14:7E:7E:E2:0F:29:51:31:FF:79:45:E4:CC:D6:5A:40:AB:8C
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 0196A0F68B2C510F71BDE519359BAFA95D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number: 09E8
Signing time: Mon 05 May 2025 15:00:34 +0000
Manifest this update: Mon 05 May 2025 15:00:34 +0000
Manifest next update: Tue 06 May 2025 15:00:34 +0000
Files and hashes: 1: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: CcoLHvFXSMhaRfYZZDLwyItoKSiMvA8j7HgHqmcPKlY=)
2: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (hash: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:8b:2c:51:0f:71:bd:e5:19:35:9b:af:a9:5d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: May 5 15:00:34 2025 GMT
Not After : May 6 15:00:34 2025 GMT
Subject: CN=7470147e7ee20f295131ff7945e4ccd65a40ab8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:38:3e:c2:8d:e4:12:a2:3a:7e:c6:d5:e5:
06:07:f4:de:39:cf:bd:85:46:be:be:88:c4:f7:50:
2f:4d:3f:98:a4:4e:da:fe:31:fc:3a:cd:f4:b3:0b:
85:df:58:ae:b7:40:8a:c6:a3:68:1e:7d:8c:16:fc:
f5:f8:2a:34:f0:46:62:5a:65:e5:ec:8a:2c:a7:6f:
8d:c4:8d:9f:27:91:b4:aa:3f:ca:4f:5e:e3:14:0f:
e2:2d:c9:b9:cb:51:9a:12:85:5e:69:f1:e0:70:a7:
64:fd:d9:2a:70:a7:9e:d2:d4:8b:e0:6d:4c:90:68:
27:6f:7c:58:f3:ab:c4:81:b1:08:75:7f:3b:9c:0f:
66:4f:e5:fa:a7:1f:80:cd:44:be:0e:12:81:24:47:
8e:d8:9c:3d:ab:5d:01:df:6c:05:aa:c6:50:20:d2:
9c:d4:29:34:b4:8c:9d:cc:a8:3a:22:4b:fe:88:bb:
85:db:8f:06:7a:9e:f2:6a:60:a8:75:ba:b6:ae:94:
f8:cd:0f:b2:0b:c8:89:08:50:86:0b:09:76:c9:95:
01:f0:d0:fd:b4:86:a7:85:82:a8:cc:7e:1d:e9:19:
ce:50:47:21:23:12:5d:e8:ea:56:e6:d7:ba:ed:a5:
c2:6d:6f:66:e5:c6:c4:9d:3c:bd:d7:86:a9:03:31:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:70:14:7E:7E:E2:0F:29:51:31:FF:79:45:E4:CC:D6:5A:40:AB:8C
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1d:e6:2e:65:30:d0:ed:7b:25:97:fe:88:9e:71:26:bd:d6:
fc:8c:f4:a5:f6:de:4f:a0:a6:41:5a:e5:83:82:53:e9:e4:ac:
a9:7c:c7:cd:25:07:87:80:72:ad:21:28:a2:fc:25:81:db:81:
d8:14:8f:13:7a:4f:96:ba:7f:00:01:69:3a:b6:8a:25:a7:c7:
6f:c1:06:c4:7d:db:03:6c:09:bd:17:df:71:95:19:7f:71:b3:
4a:5c:e6:d0:d8:2d:da:e8:8e:f7:bb:6d:f8:9a:09:53:c4:79:
25:b5:c4:32:8b:9b:7c:f6:df:1b:ac:7c:34:59:4a:d1:2c:41:
4b:e5:8d:60:d4:56:45:07:cd:2a:ae:b9:05:35:e8:db:8a:86:
10:b1:4d:4e:8e:55:a8:f6:6a:9a:7c:6d:49:85:82:db:04:7d:
0b:69:7e:9a:45:7c:a5:69:95:04:f1:34:2d:3e:dd:dd:e4:d7:
99:3b:98:f4:b7:13:41:9f:e7:42:21:37:95:40:67:b7:cd:48:
09:42:91:e5:79:a2:18:e4:54:af:dc:93:2b:41:45:ed:5e:70:
2b:5e:3d:38:0f:9c:51:14:80:2b:04:1d:84:4c:74:48:39:e1:
59:3d:79:ad:65:69:a9:3d:26:b1:28:37:8b:91:7a:23:80:30:
93:1d:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:47:35 2025 by rpki-client