Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: bXsnqQLUrJ+GG6D8L4bRzYRknzH0tle2MrRnp+MJ3fM=
Subject key identifier: FC:CB:E2:C8:79:CB:CA:C2:B7:B6:CF:43:9D:A9:41:E2:6B:52:11:75
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 019680FDFE1E363233158B8332EF648B97F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 10:00:51 +0000
Manifest this update: Tue 29 Apr 2025 10:00:51 +0000
Manifest next update: Wed 30 Apr 2025 10:00:51 +0000
Files and hashes: 1: Rdx8XfheQK9SaYz_CldryphH9T8.roa (hash: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=)
2: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: 5GiZvxRGzJvJpO4lTLkNLyIEvBdyndKRndc3LyzGpPc=)
3: fUKc1eWdHmKeTh30S5pWd_dRf4M.roa (hash: GDoe187PYSy+m1pOUWwfwziOM1L2+4EiEEfpzL06VQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:fe:1e:36:32:33:15:8b:83:32:ef:64:8b:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Apr 29 10:00:51 2025 GMT
Not After : Apr 30 10:00:51 2025 GMT
Subject: CN=fccbe2c879cbcac2b7b6cf439da941e26b521175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:25:1d:1b:86:0b:0c:80:9f:bc:c5:b3:81:
73:d5:96:51:c8:2a:a9:66:f5:7b:b9:16:8b:e1:db:
2e:80:da:2e:a7:83:6a:7d:36:a9:05:80:e6:c9:a6:
8a:df:68:66:9f:a6:33:1a:09:8e:20:01:03:0c:52:
87:50:dc:28:29:64:c6:4b:dd:be:bf:1a:6d:d2:67:
da:b6:8c:c8:3b:3a:47:98:8d:ff:4c:75:58:7f:35:
b5:93:67:cf:51:86:46:c9:b7:10:a9:29:ac:05:f1:
f9:09:5f:2d:82:5d:af:c1:4e:6e:50:eb:a8:15:c9:
da:33:f6:13:60:24:10:66:08:67:bc:6b:e0:5b:f7:
cd:1c:79:36:61:94:52:91:19:54:91:1c:19:ad:83:
7a:57:3a:15:41:6a:b6:21:8b:32:9c:45:2e:69:97:
94:56:99:55:e7:9c:99:46:fe:3a:76:0c:84:a3:3f:
ba:c8:7a:6a:db:d4:50:50:cb:8f:db:02:91:57:2f:
42:cb:3e:c9:65:8e:02:40:4b:f9:69:06:ee:e6:c7:
70:9b:1c:b4:4a:fa:87:cf:ba:fa:be:36:a7:9b:17:
b1:4d:cb:21:79:fc:8c:73:bf:1e:7a:69:6b:61:11:
42:32:4e:ee:9a:34:bd:f7:03:f6:4b:a3:be:85:c5:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:E2:C8:79:CB:CA:C2:B7:B6:CF:43:9D:A9:41:E2:6B:52:11:75
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:38:e2:31:82:d1:88:c9:99:2f:d0:39:44:a5:34:1b:9b:42:
8a:d1:30:c6:12:dc:30:38:98:47:32:5c:ee:79:c4:bd:69:5c:
27:71:9e:b5:63:09:99:97:bf:c8:55:95:40:6c:ee:c9:a3:bd:
cd:67:b3:17:1c:f7:7c:28:a9:45:ae:a0:ee:1d:7d:9d:27:97:
30:03:4b:07:b6:8e:1e:bc:08:1c:4c:a8:9a:9d:0a:15:d9:fd:
3a:93:2e:7d:e1:04:9b:1f:d0:c5:f2:25:2c:06:d6:26:a1:1c:
c3:28:1a:34:68:44:48:51:e2:e1:53:cf:1f:95:66:49:75:06:
af:14:6d:69:6c:b1:bb:94:41:f4:3b:4d:9e:ae:3c:ac:cf:9b:
c1:c2:02:90:87:06:ca:40:0b:01:f5:91:4c:ae:dd:5c:27:57:
42:4b:b9:d0:fa:0b:5b:e0:a1:54:3e:a5:96:ce:19:ef:1b:af:
2b:2d:94:27:fd:46:dd:2e:92:27:97:b1:bd:8a:50:d1:7b:cc:
9e:ff:f3:63:28:b9:8a:58:d3:b5:4e:f6:15:58:27:95:68:cc:
39:aa:6d:41:fa:7f:5e:ee:8a:23:cc:d7:88:60:38:69:c5:60:
2f:27:bd:58:77:60:1e:d5:f4:b8:6c:69:c1:94:15:da:3c:61:
d2:16:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:37 2025 by rpki-client