Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: kIrPi/kq3++Hc0wzDj0LtypGIM/XzCi6c2IgcADjJgI=
Subject key identifier: BB:C8:42:F0:5E:12:12:3B:C9:3F:0E:16:C5:C0:6D:2C:02:60:AE:72
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019684DA3F37DC813FDB265791AC8EC0E55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0A1E
Signing time: Wed 30 Apr 2025 04:00:17 +0000
Manifest this update: Wed 30 Apr 2025 04:00:17 +0000
Manifest next update: Thu 01 May 2025 04:00:17 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: QGwMZVbT2aXNuxXnpXjfWsfjjesUD/+/dWTF557xGNg=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:3f:37:dc:81:3f:db:26:57:91:ac:8e:c0:e5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Apr 30 04:00:17 2025 GMT
Not After : May 1 04:00:17 2025 GMT
Subject: CN=bbc842f05e12123bc93f0e16c5c06d2c0260ae72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:41:e5:8d:f3:65:98:77:cb:3d:ba:f1:8c:
07:bd:07:c6:07:67:17:1e:e1:1b:44:f0:83:bc:fc:
bc:d7:ba:a0:52:0a:92:88:7c:db:75:d2:3a:7e:7b:
61:71:26:72:e9:6a:7d:e1:86:46:87:97:53:d4:c8:
8e:d5:3c:e9:4e:38:f5:ad:b5:39:56:75:b2:9c:98:
7c:ea:e9:b1:eb:77:d1:e2:71:26:f0:ff:e3:89:f1:
38:01:a7:98:e7:0d:08:2f:1a:fd:09:d7:88:4b:d1:
b4:e1:96:32:93:a3:f9:f6:04:8d:ad:29:5c:68:3b:
e6:dc:1d:6c:45:bf:9f:c5:18:ee:3d:8f:a7:1c:ca:
ca:3c:5f:1a:45:5d:c8:4e:c0:43:3f:52:52:9b:40:
de:51:65:38:58:09:29:92:3d:53:b2:27:4d:a4:c3:
2c:c8:12:2e:5e:e8:5a:92:03:32:89:de:86:77:db:
76:f2:0c:4d:a7:29:62:13:eb:33:69:02:fa:c2:ac:
b4:e4:e5:f2:d0:6e:e2:db:35:32:07:76:a0:a6:4b:
14:b0:0a:1b:20:f7:10:76:5a:6e:b5:ca:98:89:bf:
d3:e0:27:54:d9:4f:3f:26:72:3b:be:6c:ee:38:29:
6e:4e:00:eb:d8:d5:0f:d7:29:46:05:c2:24:7d:13:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:42:F0:5E:12:12:3B:C9:3F:0E:16:C5:C0:6D:2C:02:60:AE:72
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:76:18:7e:91:5c:b1:56:24:93:36:ba:61:2d:9a:20:66:da:
b9:02:79:14:95:e5:b5:57:69:6f:b0:1f:9e:35:4d:ca:2a:28:
70:24:f2:32:99:1e:c2:88:4c:a0:e6:ba:f7:ee:3f:00:61:fb:
61:2e:0f:d6:8d:27:00:99:51:98:bb:a7:9d:c6:7d:7a:60:d8:
19:18:e3:7e:93:2f:e2:59:50:c5:7d:3a:b8:3f:1e:91:fb:2d:
16:04:98:dc:92:48:0a:6c:a2:03:1e:c8:77:87:77:49:1c:49:
8c:61:61:da:3f:a7:4c:c1:c4:a8:bc:11:97:0c:bf:b3:a3:8c:
79:32:b3:2b:d4:84:40:55:c1:a0:d9:7f:a4:db:f5:10:bc:d3:
96:04:fc:c0:09:46:1f:71:95:38:2a:f6:15:2d:0e:0e:f6:9d:
6e:03:e1:c8:2b:26:20:7c:dd:3a:77:ed:c5:95:6f:6b:15:12:
66:8b:59:58:1c:6e:d9:f5:d4:72:ab:d6:35:c9:fd:ea:03:d4:
0d:58:8a:79:f9:99:c7:6b:30:db:3b:05:69:bf:1c:bf:49:6f:
fc:e1:5f:97:2e:62:6a:90:50:f9:7c:d0:f5:b1:3f:c1:e6:84:
21:2e:8e:b4:83:af:2f:43:2a:1c:b0:5f:c7:db:4c:cc:c8:11:
2c:03:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:23:03 2025 by rpki-client