Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File: snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier: PAlvmUVKQYlV1W/Da71RPVPFGTguITTNhYCjV9Dq9Z4=
Subject key identifier: 96:01:52:5C:F1:9F:A5:A1:48:12:23:44:86:C8:6C:93:38:72:D6:02
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 019677C380640281FAF67AD278B5344446BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number: 0F68
Signing time: Sun 27 Apr 2025 15:00:23 +0000
Manifest this update: Sun 27 Apr 2025 15:00:23 +0000
Manifest next update: Mon 28 Apr 2025 15:00:23 +0000
Files and hashes: 1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: dqgxm55ktHP37zWa49vaGizNS5acSEi1rmB1yVB3aZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:80:64:02:81:fa:f6:7a:d2:78:b5:34:44:46:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Apr 27 15:00:23 2025 GMT
Not After : Apr 28 15:00:23 2025 GMT
Subject: CN=9601525cf19fa5a14812234486c86c933872d602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:db:b6:e7:c2:8f:ba:06:be:e4:eb:49:7e:
0e:82:a2:61:6b:92:c2:6f:b5:ef:b2:b7:24:1a:63:
54:b8:cf:5a:62:ac:fe:e9:cd:18:b0:47:2b:cc:8e:
fc:09:41:d8:c4:a8:9c:c8:db:25:8d:b0:3d:b0:4a:
ff:cf:2e:72:15:13:9e:5c:1c:88:0d:19:99:bb:f3:
73:73:34:a9:08:ab:0a:7e:65:6d:21:36:43:78:20:
eb:8a:ff:c3:40:d0:ac:68:c4:ec:da:6d:9d:19:58:
4f:6d:6e:7d:ac:05:87:e4:f4:fc:77:c9:91:c0:8d:
f9:9c:ee:a7:1d:82:8b:f5:f6:c1:05:82:c7:99:dc:
7f:12:bb:09:9c:3d:93:7c:8a:03:20:5a:24:d9:c7:
a7:46:1f:4d:66:ae:6c:3f:b0:e4:32:e8:6e:0d:8e:
b7:f0:da:98:be:3c:2f:02:b3:c6:35:40:7e:36:9e:
03:9e:65:60:05:83:53:a3:bb:46:b2:72:a8:06:cd:
d2:91:d8:70:ce:f0:84:65:9c:18:b2:3b:47:b6:ae:
27:58:ac:55:7a:fb:f3:7e:d1:49:94:5a:fd:2b:f3:
de:bb:0c:62:51:7f:c6:f2:11:30:74:46:08:0d:58:
b1:cf:b3:7a:29:ca:18:bd:39:e7:45:81:db:1b:61:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:52:5C:F1:9F:A5:A1:48:12:23:44:86:C8:6C:93:38:72:D6:02
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:e3:ea:49:b7:85:c5:12:03:b6:c7:0d:bc:d5:9b:69:16:
e7:55:ea:73:cb:3c:44:03:eb:12:2d:c3:cd:b0:bc:cf:c0:ed:
02:7f:64:d7:96:58:cd:b4:5c:aa:54:e7:ac:07:e1:12:2e:60:
4a:a9:64:6b:a8:74:7a:0f:a3:b1:90:41:9b:be:14:2e:09:87:
35:ad:c8:f2:86:57:87:07:fb:5e:84:98:39:29:64:19:77:3d:
4f:3b:11:31:79:ca:34:f5:1d:14:12:1b:37:23:e4:9c:98:82:
22:ad:d7:e0:7a:24:74:7f:a4:23:31:3e:6e:56:80:d5:24:b6:
a1:94:05:d2:47:3e:b1:f9:5f:c1:57:e0:63:07:fb:ef:e5:cc:
48:ea:4c:43:1f:c2:51:1a:b9:4d:66:52:94:fe:e1:50:83:0b:
39:2c:49:4f:bf:26:ee:8c:b6:b1:3a:9d:7b:87:cd:0e:32:51:
df:56:fb:e6:22:4d:57:15:08:0e:8b:8d:49:10:20:d5:1a:bb:
4e:4a:28:8d:01:37:69:06:02:0f:47:33:8c:bc:17:4e:9f:10:
3d:35:51:b1:21:83:ea:22:fb:36:29:48:ee:a9:e7:d9:6c:ba:
de:ea:4c:ba:ca:ba:c4:2b:59:9e:ab:58:97:59:7a:41:51:f9:
7b:a3:fc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:34 2025 by rpki-client