Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
File: sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft (raw, json)
Hash identifier: k5CE7Al9utaAHZ75nFr880/TcR9UcvAJ20P9W5neR5c=
Subject key identifier: 8E:07:8F:98:75:D2:23:9D:ED:1D:EA:D9:41:0E:E7:0A:CA:4B:A4:79
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 0196789FA387DD1F32B011B044F22E8B15FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 19:00:49 +0000
Manifest this update: Sun 27 Apr 2025 19:00:49 +0000
Manifest next update: Mon 28 Apr 2025 19:00:49 +0000
Files and hashes: 1: SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa (hash: Ka4bOW3Lwex81O0FRlMpa0sWUNlOOrrrXHeIztmbIBM=)
2: sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl (hash: tsZ+T9yWfGf27Wds7bxKhiUWh1Cw8L9KHeQRjnih5nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:a3:87:dd:1f:32:b0:11:b0:44:f2:2e:8b:15:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: Apr 27 19:00:49 2025 GMT
Not After : Apr 28 19:00:49 2025 GMT
Subject: CN=8e078f9875d2239ded1dead9410ee70aca4ba479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:43:70:84:c1:f6:80:24:c1:d5:ed:b8:1a:
7c:1e:a3:0f:0b:84:28:2a:16:e8:22:c1:bd:99:95:
50:1f:ac:10:c5:f0:e3:44:9a:68:6f:04:46:78:4a:
80:56:1d:6f:f5:16:ed:b9:c0:cf:ce:2e:1d:6b:95:
94:af:f2:3f:43:72:bc:9f:16:ba:6a:84:26:81:db:
95:d3:df:4f:6f:38:7b:73:69:c9:5a:7f:d6:b4:dc:
ba:28:7d:ae:8f:30:7c:ef:88:14:51:67:1d:ae:e3:
f6:56:9c:ed:13:9e:aa:13:dd:88:35:93:56:75:c7:
cc:ac:0f:d1:04:8f:58:b5:fd:bc:3c:9f:87:7c:3d:
5e:96:51:4e:ac:be:8f:22:3c:11:b0:38:32:47:52:
a6:df:06:5a:da:5b:c0:45:2f:14:0b:2f:5d:61:fe:
58:d2:88:b4:93:e3:80:72:52:98:a9:a5:85:ab:08:
76:d2:c9:c3:8b:f2:f6:a3:1a:57:e9:c0:b4:fe:bc:
ff:8f:98:d9:11:22:a9:67:de:70:4c:28:03:02:63:
a5:bb:d6:9c:a6:e9:0b:32:1c:e3:e5:9c:6f:33:77:
50:1e:e0:c1:d2:98:f4:dd:c1:86:c7:ae:54:3f:9a:
4d:a7:5e:10:d3:1d:08:21:2f:37:d3:f0:08:46:a8:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:07:8F:98:75:D2:23:9D:ED:1D:EA:D9:41:0E:E7:0A:CA:4B:A4:79
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fe:02:52:19:b3:ff:8d:cc:5e:43:57:85:ae:97:d0:2d:8e:
c3:8a:e5:73:69:1b:2a:3d:6c:1f:d0:be:55:ce:50:ba:0d:19:
af:e5:26:7c:2a:12:fa:51:ac:a9:a2:c1:5c:78:14:b2:5e:b1:
f4:d8:cd:7c:40:4a:60:15:3c:e6:8f:f3:80:03:31:8c:4b:d2:
0e:d6:d0:d4:0b:73:e5:1a:76:13:22:c2:50:02:8a:5f:01:d6:
53:62:ce:8e:ec:68:72:66:69:0f:f2:6b:81:c5:8f:06:44:f6:
a3:79:e9:43:75:bc:6f:e8:36:01:ef:6e:09:7a:dc:d9:05:92:
55:7d:4d:2d:53:1e:9e:a9:12:e5:0d:0d:8e:a7:da:2d:ca:ca:
40:f1:c7:37:4d:e5:09:5c:69:dc:52:8b:00:24:be:26:2d:58:
be:86:24:f8:18:5e:87:8a:07:3c:99:18:4f:47:3d:15:9e:74:
cd:87:7f:73:23:18:cd:5b:24:8f:73:47:51:44:20:fb:67:f2:
89:30:43:d1:fa:0c:2d:36:56:c6:4e:c2:ed:dd:ad:b9:cf:e0:
17:2d:23:4c:de:76:91:78:b9:0c:f7:5a:93:d8:1c:0f:df:1a:
14:ed:92:9c:90:2c:e4:7e:75:ab:ee:bb:25:76:d2:46:b9:f7:
8c:5a:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:56:55 2025 by rpki-client