Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: RBpKycDRqBHSD06ASDMGu3ygmlQtSxvB62R3BO7lXz0=
Subject key identifier: B5:C4:91:2D:8F:AC:1E:F3:6B:2C:6D:91:6D:42:97:2D:02:5E:C5:16
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 019677C3CDFAE6FA15DA2EF43EBD8B3E0F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 0819
Signing time: Sun 27 Apr 2025 15:00:42 +0000
Manifest this update: Sun 27 Apr 2025 15:00:42 +0000
Manifest next update: Mon 28 Apr 2025 15:00:42 +0000
Files and hashes: 1: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (hash: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: MFvhbtb0Q9OAFIySALAKK9vzGm8olyaZhVCiuQKP8qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:cd:fa:e6:fa:15:da:2e:f4:3e:bd:8b:3e:0f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Apr 27 15:00:42 2025 GMT
Not After : Apr 28 15:00:42 2025 GMT
Subject: CN=b5c4912d8fac1ef36b2c6d916d42972d025ec516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:3e:0e:9c:43:86:6c:eb:fb:6a:df:8f:0e:
55:8c:31:79:27:b7:43:07:d2:81:6d:db:97:7b:b1:
b4:ed:1a:b0:72:42:f4:45:fe:21:e3:ee:cb:a3:80:
6a:13:55:b2:f3:f7:3a:c1:90:21:18:a8:3a:c8:a6:
d4:a3:23:81:b5:b7:e2:2b:db:64:43:05:88:78:3f:
68:5a:93:ab:bf:06:5a:b7:9f:72:09:da:02:e1:33:
ca:90:95:fd:bf:59:fb:15:e4:0b:fd:fb:78:ae:f0:
3f:db:5c:39:c8:77:d1:7f:fa:02:22:29:c0:94:5c:
0b:96:d5:47:98:7f:e6:6c:9e:55:16:b1:a9:d5:3b:
07:d5:a6:6a:c4:c8:0b:a2:11:4a:31:6f:99:9f:88:
cd:a3:aa:1b:fb:0e:ff:d0:92:0a:6c:17:b0:6d:8a:
53:be:77:e1:00:ca:84:2f:ae:5b:fc:c3:37:ce:ba:
99:12:d5:98:06:92:0f:1d:90:39:d4:ba:7a:9f:c7:
28:6b:c9:4d:17:94:92:94:03:e6:11:d5:8a:ef:cc:
73:be:3a:73:64:65:f6:58:22:74:e2:31:f8:84:76:
27:63:b6:76:3b:20:9e:91:fa:63:1f:a9:ae:3d:84:
34:dd:9f:11:58:e3:6d:9f:66:4c:b3:08:b0:d3:c1:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C4:91:2D:8F:AC:1E:F3:6B:2C:6D:91:6D:42:97:2D:02:5E:C5:16
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:3a:1e:ac:47:f2:5c:a4:df:10:0e:8f:35:67:e2:1b:16:
c8:6a:c0:2f:b3:1c:dc:99:38:92:83:ea:f0:13:50:aa:04:2d:
ba:fd:d3:9e:07:82:b9:76:15:8d:b9:32:36:32:7b:19:fc:da:
2d:ff:ec:b9:28:a3:e2:b1:50:55:1c:52:f8:ee:75:08:53:3d:
79:47:29:30:31:d3:d2:dd:72:8a:0a:89:c2:41:8d:ac:c2:15:
ad:02:ad:52:19:68:74:f2:0f:3a:57:07:11:9b:a4:bc:9b:44:
51:9c:4b:f7:77:b6:6f:9a:fc:32:c7:01:28:82:c3:16:da:2e:
da:a5:3b:72:28:8d:10:57:d4:8d:31:97:7b:68:c0:87:66:ec:
8b:d7:05:19:5c:b5:52:52:91:33:97:29:c6:cb:e5:bb:55:62:
85:ec:1c:2f:f2:9d:3d:0c:64:5f:37:57:17:29:c4:bd:46:41:
9f:6b:73:71:d0:31:8d:cb:fe:98:21:12:d7:b0:9a:dc:84:e8:
a9:d3:93:a3:b9:ed:b7:73:d5:a4:f4:77:3d:ee:d2:87:54:b5:
44:cc:32:aa:23:3c:62:95:8d:8f:90:1e:9d:3a:a5:17:c8:c0:
8b:42:f1:24:3c:0a:88:3e:92:a0:8d:24:d8:cd:94:bc:4a:c5:
30:a4:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:11 2025 by rpki-client