Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File: SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier: xjsDO8jSwygKDOymHdySqEXKlaPnIb/PO1iWAgcjUJk=
Subject key identifier: BA:91:DD:F0:91:8F:4C:8D:92:3A:37:17:CB:CE:BC:62:EC:A9:9B:F3
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer: /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial: 019676E80A6C135D7B5CC29849D7ECE4C49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 11:00:40 +0000
Manifest this update: Sun 27 Apr 2025 11:00:40 +0000
Manifest next update: Mon 28 Apr 2025 11:00:40 +0000
Files and hashes: 1: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (hash: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=)
2: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: f5I+VYYBSR9Ibxjl59X2uNqJL9SAurofkEnwIzCkmsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:0a:6c:13:5d:7b:5c:c2:98:49:d7:ec:e4:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Validity
Not Before: Apr 27 11:00:40 2025 GMT
Not After : Apr 28 11:00:40 2025 GMT
Subject: CN=ba91ddf0918f4c8d923a3717cbcebc62eca99bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:d8:66:b1:69:37:a5:bb:b7:76:80:1c:53:
7a:91:ff:8a:49:f6:20:c4:7d:12:a2:f2:8f:8c:dc:
bb:96:4f:4b:39:35:fb:7b:2e:7f:88:9f:0e:cf:a7:
25:97:1d:ce:3f:06:c8:eb:e9:fc:74:b9:a8:42:4a:
8e:8c:60:64:5b:76:b3:a7:03:fd:6e:65:0c:17:77:
89:50:ac:7b:48:5e:9b:7a:b0:0a:5c:f2:c4:28:25:
b4:b8:43:b0:d3:97:4d:1b:56:ab:2a:bb:17:1b:84:
88:13:58:8e:38:0e:cb:f3:bd:81:b5:79:d0:79:2b:
02:4b:99:42:c6:12:06:a6:b4:ff:37:ea:09:3a:7d:
94:18:21:56:a8:73:a0:04:c0:fd:c8:32:2d:fc:fe:
08:97:74:dd:3a:df:c4:f0:d6:74:3e:70:62:c2:48:
20:5d:06:ee:81:7d:3f:05:7c:07:50:b5:84:2a:11:
c9:49:be:8c:b4:8e:28:c0:9c:43:6d:49:aa:81:bf:
2e:7e:a7:f0:e3:6d:68:4f:ee:c1:20:da:67:84:d9:
cd:00:3d:76:2b:00:88:4c:18:7d:65:9e:f6:96:8e:
f3:ff:78:64:06:26:8f:36:ac:1b:9c:b7:c5:0e:99:
9d:fe:2d:04:24:45:b7:ea:5e:eb:4d:75:53:0f:9f:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:DD:F0:91:8F:4C:8D:92:3A:37:17:CB:CE:BC:62:EC:A9:9B:F3
X509v3 Authority Key Identifier:
keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:60:ea:ca:4e:57:6c:35:e4:ad:9a:af:91:a3:67:ac:4d:a7:
0b:b2:83:56:3d:05:f9:e3:1b:41:c4:bd:05:d5:f0:7a:1e:57:
85:01:b2:1b:d0:27:14:95:3d:b4:0e:a3:78:ed:c1:8e:1b:b2:
68:e1:5e:2d:61:6b:31:7d:d8:1f:8a:d0:52:45:23:4a:64:01:
fc:09:e6:00:b0:ef:ec:6b:ff:5f:cc:79:d7:24:54:b3:bc:50:
b8:26:b8:a8:7f:62:97:83:e6:f4:d3:88:4d:6c:9f:e1:55:6c:
6d:20:34:b1:c8:ea:4c:12:ce:a4:ea:ec:16:bc:7f:e0:3c:7f:
82:64:f9:8d:19:5e:41:6f:27:31:12:1a:bd:36:36:2d:cc:71:
59:d3:d7:b5:64:57:cf:62:f5:c1:d4:1b:93:49:2f:90:f2:37:
75:76:5d:27:c0:eb:c6:57:2f:a9:b6:74:5f:ed:9c:4d:7f:2d:
cd:5d:5e:9e:89:be:3b:0d:8f:7a:f5:c8:49:1a:68:f5:89:7a:
2d:5d:4a:dd:20:95:32:3e:9f:f4:a3:67:9a:80:1a:cf:c3:ae:
6d:32:5a:ff:51:a8:ea:19:e1:8d:75:1d:a5:6f:38:0f:ac:01:
f5:1d:6b:39:ae:cc:57:c5:1f:fb:6f:84:cd:95:f8:83:8b:50:
7b:29:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:47:19 2025 by rpki-client