Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: kWS3L6dXdKSNckQKD0hmAUO46JjguOuET7xTy4rRGz0=
Subject key identifier: E5:BD:60:F5:6F:0B:37:19:1D:9A:76:08:2E:FE:BD:07:BF:80:CE:7C
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 01967C7BFA4F69D6585C84D42CF70C13FD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 13:00:21 +0000
Manifest this update: Mon 28 Apr 2025 13:00:21 +0000
Manifest next update: Tue 29 Apr 2025 13:00:21 +0000
Files and hashes: 1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: jGqIrvC4cTRllr2wBqvyG7n8Wwzeh4vUPi7nU4S0z6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7b:fa:4f:69:d6:58:5c:84:d4:2c:f7:0c:13:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Apr 28 13:00:21 2025 GMT
Not After : Apr 29 13:00:21 2025 GMT
Subject: CN=e5bd60f56f0b37191d9a76082efebd07bf80ce7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:c2:29:ba:5e:f0:35:88:6a:2e:18:74:f6:
5a:84:48:1a:ed:f4:c2:0d:ca:11:48:97:b3:a9:8a:
d7:6c:3e:85:96:ad:69:86:95:1e:1a:b9:e3:56:5a:
59:2f:e8:e8:f9:4d:33:10:c8:42:92:d0:fc:73:17:
f1:01:ce:02:f9:19:a7:1c:02:45:02:20:ae:cd:32:
d6:41:75:af:fe:26:b0:a4:a6:26:d1:ab:f3:98:7d:
5b:93:f7:68:1a:e3:e6:99:63:f5:04:ca:22:c5:2c:
11:92:b9:15:45:d8:67:ad:51:f8:f9:6f:a6:46:36:
ad:6a:7a:1d:db:ef:ff:20:7a:5b:ff:bd:ab:b3:28:
ee:eb:ba:52:b9:79:2b:49:9a:56:d6:f8:4d:50:53:
61:4a:2a:2c:95:77:be:9e:ff:c2:17:3f:79:a6:57:
f1:15:35:a1:40:fc:b2:8d:ba:f4:3b:ee:1a:75:77:
df:0e:64:24:64:d2:15:74:60:6c:7f:50:c1:84:2f:
10:60:d0:d0:85:2a:83:f8:20:19:f0:d6:bb:3c:d3:
55:70:50:44:f2:1b:34:4a:1d:0e:86:f8:7d:d3:fa:
ad:cd:8b:91:c4:6c:d2:78:69:dc:be:17:09:23:b8:
4f:61:54:19:f1:e8:61:2e:78:bd:e1:6e:10:f7:1d:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:60:F5:6F:0B:37:19:1D:9A:76:08:2E:FE:BD:07:BF:80:CE:7C
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:2a:af:85:49:eb:a9:5d:ee:d2:0d:75:2a:29:04:20:29:
3a:9e:fd:33:fa:f7:f5:a0:88:71:c8:53:29:3e:e7:86:d9:8e:
69:f0:03:e3:75:36:a9:66:c6:cf:de:91:83:31:10:c5:30:bc:
21:0b:a7:a2:13:cb:76:98:59:23:62:24:6b:51:f6:22:42:b5:
2a:cd:28:91:0d:ba:ff:b0:be:36:36:ba:46:60:ad:b5:4f:3d:
ed:31:9a:1a:ca:f1:3b:36:3e:ff:1d:d1:8c:a8:a8:84:57:94:
e9:98:47:4b:1b:6f:dd:c6:14:86:83:e2:0c:f8:92:70:fe:ff:
e5:81:c7:ce:d0:cc:29:67:66:06:49:4b:e3:b8:5f:70:16:d0:
5d:0c:0b:5f:04:40:7f:61:a9:d6:72:07:04:71:ed:ae:61:85:
58:06:f8:7f:c2:85:aa:6c:65:a8:92:8d:c0:a8:13:38:ff:1e:
9a:04:ea:bd:03:f4:17:94:09:ee:5d:fd:1c:1d:65:d1:c2:c0:
7f:8b:76:d8:9b:39:ae:b1:2c:53:4a:e0:77:00:3e:46:66:ff:
7d:fe:dc:d0:34:cb:a8:49:db:26:89:dd:7d:da:4d:b9:15:62:
ac:61:aa:53:44:41:00:ce:f3:16:97:fe:fb:fe:52:f9:7d:92:
1b:77:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:50:09 2025 by rpki-client