Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: xQz4KLGI0q4leDOX38IYJJA4buoS5Wl7rooeeYdxVPQ=
Subject key identifier: B8:BB:91:76:61:1E:FE:08:24:A6:E5:B8:23:29:B8:F8:94:D3:CC:AE
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 01967EA125DDC6645D863879E83A943E5059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 23:00:12 +0000
Manifest this update: Mon 28 Apr 2025 23:00:12 +0000
Manifest next update: Tue 29 Apr 2025 23:00:12 +0000
Files and hashes: 1: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: vnBtRFlCPSVHqhbt4PEQ6ZqcRfJQpEAYtSEDHHENLjQ=)
2: VDDxUy1rUQDxJYT3ATBjI69SbdQ.roa (hash: oF1hkO2cydZ9A84V2XohR++dZN8uh+qMwIFTNO+4W4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:25:dd:c6:64:5d:86:38:79:e8:3a:94:3e:50:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Apr 28 23:00:12 2025 GMT
Not After : Apr 29 23:00:12 2025 GMT
Subject: CN=b8bb9176611efe0824a6e5b82329b8f894d3ccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:03:86:24:47:ae:74:4a:cc:b1:6a:e3:a8:
28:c1:37:7c:0e:ab:10:17:b1:d2:e5:af:df:4a:fa:
e4:f7:3d:43:bd:ce:58:bd:bc:c1:a6:16:18:b6:6c:
26:e7:c3:47:7a:96:44:2b:68:c3:55:71:ee:d3:07:
85:4d:eb:ac:b5:15:36:15:dd:90:6e:88:ea:7c:5f:
97:13:30:61:db:52:a3:ca:68:6b:89:c8:4a:88:b5:
d2:97:3c:b6:81:ff:bf:ba:3a:94:49:94:03:a8:09:
59:a3:18:f2:53:f3:09:cd:15:1b:8b:a2:b4:f8:20:
e5:72:ec:62:01:a2:b5:be:94:d3:e5:87:e9:e4:71:
13:a7:ea:ba:d8:7c:a8:22:c1:ad:7a:ba:e8:7d:20:
d8:38:b8:fa:47:bb:bb:27:17:79:30:a3:86:a1:34:
17:5a:fa:b7:c4:6b:b8:64:85:3f:5c:aa:11:45:5e:
31:52:0d:31:7f:ef:26:02:96:7a:46:52:af:2f:89:
bf:fc:38:2a:c1:e2:bc:0a:9a:11:73:c1:e5:ba:24:
92:de:6a:81:76:c2:02:85:72:d6:62:e4:45:92:44:
fb:7b:c0:19:94:62:93:98:91:e7:a3:b6:b3:7c:be:
1b:12:ba:21:91:7c:cc:28:56:be:da:b5:07:2f:65:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BB:91:76:61:1E:FE:08:24:A6:E5:B8:23:29:B8:F8:94:D3:CC:AE
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0f:bf:fe:d5:02:da:8e:db:36:1a:cb:36:48:8f:6f:84:6a:
d5:4d:a5:99:85:00:77:2f:ff:44:1f:28:7f:97:46:2f:4e:00:
e2:ed:de:d0:30:05:80:d4:42:bb:4d:57:40:77:44:97:34:b9:
5b:22:c2:6b:ee:4e:7c:44:17:54:fd:64:48:6c:7b:b1:99:00:
f5:ae:e0:1e:01:b6:02:44:4f:3b:35:01:01:ac:20:f7:3c:91:
50:50:bd:86:71:36:cb:2b:ca:06:b8:a5:37:3d:7a:b3:8b:fa:
5c:a8:73:2b:69:4f:49:e1:c4:a2:22:22:bb:ca:ff:ae:12:03:
4c:0a:86:13:bc:24:3d:42:66:e0:75:03:98:95:4d:90:42:e2:
b3:45:07:d9:6e:81:24:d5:7a:ed:6d:3c:f2:dc:e3:4c:db:30:
56:af:53:8b:ca:80:44:69:49:1f:a3:41:d2:e4:18:00:33:1c:
f8:6e:d6:4b:15:fd:e0:83:74:28:f4:c1:be:da:6c:41:de:b7:
2a:c6:3d:7a:6f:0c:09:8b:48:5b:23:74:14:94:e0:56:3e:58:
28:a8:40:cd:98:94:2e:1f:be:3f:d0:a7:dd:6d:bd:f2:94:86:
b2:e3:24:10:12:80:68:0a:b4:bd:94:cf:de:08:20:c1:f3:90:
ce:61:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:29:35 2025 by rpki-client