Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: hN5rN7EVKn6oDVJCQ3YbbtKeIpzocniRhayefXhrPXA=
Subject key identifier: 4E:DA:A6:54:7B:27:F5:93:FB:08:BA:91:70:CE:D5:0D:53:B2:49:A1
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 019684A3981C4066D8DB5FC3420A5AB4C422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1406
Signing time: Wed 30 Apr 2025 03:00:35 +0000
Manifest this update: Wed 30 Apr 2025 03:00:35 +0000
Manifest next update: Thu 01 May 2025 03:00:35 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: tC2DmJIGDdI7VtJzrBsyFDaBdxosxvk1LFDxZbgPuXA=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:98:1c:40:66:d8:db:5f:c3:42:0a:5a:b4:c4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Apr 30 03:00:35 2025 GMT
Not After : May 1 03:00:35 2025 GMT
Subject: CN=4edaa6547b27f593fb08ba9170ced50d53b249a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:bc:cb:6f:53:07:5f:42:65:da:e2:ab:04:
1c:94:9b:e8:01:e0:1c:82:24:de:9b:c7:25:3b:f0:
28:91:9a:3e:4c:91:2e:1b:56:a6:57:97:4e:88:7a:
13:d3:b9:0b:b2:fc:ea:94:c1:f9:f6:f8:2c:06:1d:
b5:36:e0:1f:3d:64:07:a4:b7:0f:42:34:ae:e9:2f:
03:64:b2:2f:e2:4e:bc:98:c6:58:b3:f5:19:fc:4d:
37:18:52:1d:10:8c:34:6b:d1:06:4c:56:57:cc:1d:
80:21:e2:61:3c:4b:0f:7f:7c:c2:8d:f8:f3:28:d2:
8e:e4:91:9c:cc:0c:72:92:24:68:ed:d1:9b:40:8f:
a5:56:34:c6:e8:e5:ad:41:5d:9f:ff:ac:e9:7d:ef:
ca:3c:58:43:b1:84:f2:85:8c:b0:5d:06:63:a4:ba:
4e:8b:b1:f8:f6:20:79:bc:ec:a1:a5:d3:ce:05:93:
c6:2d:58:ed:3a:d4:b7:7e:ca:eb:67:11:d4:69:31:
51:e7:d5:8f:77:cd:d6:7d:3d:45:d6:8f:69:96:08:
98:b2:1c:72:e2:fc:83:d6:40:23:10:93:3c:cc:a1:
71:96:a7:0c:6c:93:57:38:1f:07:71:37:71:02:68:
3b:ac:14:78:5b:01:45:ae:d3:bd:94:d6:7e:05:1c:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DA:A6:54:7B:27:F5:93:FB:08:BA:91:70:CE:D5:0D:53:B2:49:A1
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ab:29:0f:c5:8f:91:5a:49:5f:89:b4:fe:22:c9:33:75:ee:
f0:44:99:c3:53:e4:c0:d6:a3:a5:b2:e5:9f:14:0a:2e:81:86:
23:9d:62:01:37:2f:25:49:b7:2b:25:73:f7:15:51:d0:bf:5e:
9d:98:4a:5b:fc:49:ad:20:4d:c5:56:54:45:ea:3d:34:80:36:
95:39:48:be:fd:c9:1a:8f:a6:9b:c5:93:bf:03:37:22:9a:9e:
73:0b:6e:4e:46:4d:d3:f8:8c:65:cf:aa:93:50:c8:9c:d0:df:
24:fa:04:9e:b0:b2:c7:d3:92:5b:8d:bb:44:2f:30:79:9a:2b:
de:fe:b6:90:23:a7:d0:af:79:97:db:0a:2d:fe:fa:e0:ea:9a:
7d:2e:36:2b:d0:37:52:a1:66:fd:0c:48:8c:1b:ab:c2:99:ac:
6f:aa:a9:36:4e:8e:ee:d0:40:6a:b1:e0:4e:c0:c2:46:e2:de:
3c:1a:f6:50:36:15:59:65:41:12:41:db:24:50:3e:2c:90:02:
e1:41:39:18:50:05:58:ce:19:37:3d:e7:03:28:67:ef:a5:62:
22:15:55:de:ec:fc:b8:f9:de:d4:a3:ee:06:e7:38:43:70:77:
a6:11:79:6b:0e:38:0e:68:24:52:f5:98:e4:1d:c0:78:70:03:
ae:da:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:33 2025 by rpki-client