Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: aucgq+flHFap8Lw6TnhClkAMRjO8Dj55EIenqLsE2Zg=
Subject key identifier: F7:C3:56:DD:E2:34:2F:DF:48:10:7E:04:3F:FC:A1:DE:9A:78:76:35
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 01967DC596D8823FC3C2398617F6CEB07675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1330
Signing time: Mon 28 Apr 2025 19:00:23 +0000
Manifest this update: Mon 28 Apr 2025 19:00:23 +0000
Manifest next update: Tue 29 Apr 2025 19:00:23 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: esYRUwsZDrq1RLqhtX0wGnVfSuFT6NG0XmP+/kNc5wA=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:96:d8:82:3f:c3:c2:39:86:17:f6:ce:b0:76:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Apr 28 19:00:23 2025 GMT
Not After : Apr 29 19:00:23 2025 GMT
Subject: CN=f7c356dde2342fdf48107e043ffca1de9a787635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:9b:bd:34:26:50:14:06:f5:a6:e8:d8:8f:
72:6e:4a:a1:fb:36:b4:a3:8b:6b:fb:e4:f8:18:a9:
62:64:0e:a8:e0:c8:59:6b:cc:47:c4:ee:18:aa:90:
ad:a2:a8:1f:a5:07:f5:5a:6d:c1:7b:8f:c7:ec:8c:
6b:df:d0:da:9e:0f:cc:d6:da:dc:36:85:1d:f1:80:
c6:1d:68:bf:22:92:5f:05:27:14:51:37:f8:b4:c4:
e7:26:14:ff:ee:6a:b3:79:ea:32:e2:5c:2d:c7:84:
1f:60:6f:60:9c:61:d4:1b:a0:a2:17:f7:bf:db:0b:
6d:14:28:a1:22:a8:b4:6f:85:42:4b:6c:be:8e:d3:
34:1d:f8:ea:81:73:37:69:34:e7:61:fe:9f:1f:ef:
3b:58:5a:2c:a8:f7:06:20:5d:67:ab:ec:93:c6:7a:
b4:fb:7d:45:6c:d0:14:d0:36:b0:81:62:1c:55:19:
1b:50:77:47:06:0d:43:0a:88:8a:a1:28:88:87:1c:
36:05:2f:ce:01:5e:90:b0:2d:e9:de:ec:48:33:f0:
62:2f:38:c3:a0:e7:2f:dd:6e:eb:b4:31:73:24:a9:
42:3e:33:e4:4b:3d:63:c8:fa:f3:d5:d3:3e:bf:af:
1f:81:fb:a5:4b:a0:47:1b:8b:8a:f0:4f:7e:a2:3a:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C3:56:DD:E2:34:2F:DF:48:10:7E:04:3F:FC:A1:DE:9A:78:76:35
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d5:bd:33:85:b5:fa:fb:77:1f:69:a8:1b:9e:9e:ea:fa:cb:
00:d2:f7:a0:a1:7b:7d:01:bf:60:0e:17:0f:90:2a:38:8a:df:
d7:5d:e1:27:82:29:89:c6:7e:d9:cc:f8:8d:c8:14:e0:83:32:
da:34:1e:e7:ec:4b:a1:90:51:13:b9:db:ec:6a:a2:37:20:4f:
5c:6c:5f:78:fb:fe:50:90:0e:a3:2d:5f:85:7e:2e:20:46:bd:
88:76:c3:7b:8c:40:69:96:75:20:d6:db:db:17:34:de:5b:3a:
25:2d:02:89:ed:93:9d:fa:ae:7a:e4:98:76:9b:97:ac:45:ef:
fa:a4:52:fd:ad:3a:12:32:06:e6:c9:8a:99:bf:8e:e6:e1:97:
33:cc:4a:7f:77:e3:3f:2e:f5:e4:cf:b6:b9:42:bb:6f:78:fb:
ca:d7:23:52:a5:6e:05:3d:a9:40:4e:7d:a2:44:7e:49:40:22:
83:5a:29:fc:f8:55:f1:bb:0f:17:72:61:f6:42:c9:e0:fa:30:
d5:92:32:f4:dc:1f:04:4f:50:15:7b:7e:d8:74:f9:7b:a2:49:
bb:a0:25:e7:39:0c:12:cf:96:b9:0a:84:96:55:dc:43:2e:a5:
43:ba:66:e5:d9:0f:3c:05:38:03:8d:21:3d:45:85:5c:29:a1:
98:2e:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:36:07 2025 by rpki-client