Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: oETGr+K6F/gZBiE7REejrZIpIgubhJS317wRZt0MpBI=
Subject key identifier: CF:E8:92:FA:09:A5:CE:AF:DF:E8:3B:5C:D9:9C:DF:BF:B1:30:A3:D1
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019679B1F5BA784669366F81ACDFEDBB1109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 0303
Signing time: Mon 28 Apr 2025 00:00:28 +0000
Manifest this update: Mon 28 Apr 2025 00:00:28 +0000
Manifest next update: Tue 29 Apr 2025 00:00:28 +0000
Files and hashes: 1: S8F_BqZIysXEe93wY7E7gYPrrEE.roa (hash: yxA+Gb1gegChlT9RImwWVjBq+UzqZu56Rk2vXQ11x70=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: DT24doryHdUTRzk9NNVGD/xiwMrsgCPrDrJSFz+0iJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:f5:ba:78:46:69:36:6f:81:ac:df:ed:bb:11:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Apr 28 00:00:28 2025 GMT
Not After : Apr 29 00:00:28 2025 GMT
Subject: CN=cfe892fa09a5ceafdfe83b5cd99cdfbfb130a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:09:78:70:22:9d:f7:6b:04:67:04:3a:54:
23:10:2c:d6:fe:c6:e4:59:25:40:00:c3:14:66:09:
3a:23:89:a6:4a:91:4c:eb:4c:7a:46:8a:8c:4e:ab:
9f:be:29:40:ba:a7:71:82:8e:d2:1e:e1:2e:df:80:
a7:d2:9d:75:44:2f:ad:40:1e:68:8d:fd:bc:dd:2c:
eb:1b:85:d4:88:2d:f8:2b:23:76:0e:8a:f9:cf:09:
ef:83:de:73:6f:d5:af:a0:2a:cf:ac:d4:f2:f8:3d:
62:6b:c5:fb:73:b2:08:e3:83:5a:c2:a6:3b:71:ab:
60:ed:b4:c7:eb:f3:88:80:93:fb:63:a8:a6:74:bf:
65:16:28:23:c0:39:de:09:55:5f:1f:7d:2a:f1:f1:
53:41:fe:89:da:1c:df:09:30:47:23:80:19:08:f9:
8c:e7:a1:78:49:66:e6:54:7a:03:80:ff:b0:ab:75:
27:a4:be:08:5f:54:cf:d3:b1:97:3c:e5:c4:95:71:
a3:f0:82:45:d9:4b:34:e6:1a:0f:6b:3f:2f:a6:86:
04:4c:8e:34:af:8c:95:1d:9d:f8:c3:7a:f1:5f:42:
29:51:97:56:74:0b:93:8c:d1:98:cc:38:c6:a0:fd:
7a:59:43:0a:39:d3:10:6b:27:e7:1a:b1:b5:72:b2:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E8:92:FA:09:A5:CE:AF:DF:E8:3B:5C:D9:9C:DF:BF:B1:30:A3:D1
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:53:7a:cf:34:7c:f7:ad:6c:f0:a7:eb:f5:a0:5c:f5:02:d2:
df:f3:e6:e0:fd:e5:88:85:c4:8a:f7:19:e8:88:e8:84:e3:81:
4f:ee:af:22:e8:d4:7b:a1:1e:fa:59:a4:43:d8:38:29:7a:b5:
1e:12:9e:e1:b4:00:33:ec:98:a4:f8:5a:6c:5b:90:88:0c:f2:
62:87:fa:9e:46:da:c4:4b:d0:30:81:c6:e7:63:64:d7:b6:55:
e9:ee:a4:9f:37:a4:ca:1c:ff:5c:49:de:78:67:ac:c0:d1:51:
e8:24:e5:d2:29:e3:fb:f6:f3:b4:75:22:68:b6:f1:f4:9a:33:
36:ce:ac:ff:b4:d6:66:f2:69:fe:a1:60:b5:40:b2:b9:d7:ef:
63:15:d8:58:7f:d3:0a:7a:d1:a4:90:e9:75:3b:1a:b4:85:f2:
13:cb:05:a7:de:08:93:f9:34:0a:9d:14:44:30:f1:a4:38:89:
17:ca:27:f4:47:1c:36:37:e8:24:c8:70:14:ed:fc:f8:98:d7:
ad:1b:bb:e9:b8:a0:a2:0b:f1:39:94:b1:03:af:7d:cb:43:c3:
a2:d2:23:81:52:da:10:52:02:28:d0:ae:64:59:35:30:49:50:
e5:0c:47:13:a4:6c:ec:4b:8b:a1:03:6d:08:c0:25:ee:aa:54:
1c:c4:e8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:48:54 2025 by rpki-client