Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json)
Hash identifier: vijKpNdThLOyr8GSiw5tOmQyGmlbBRCRMkbXlvpFL54=
Subject key identifier: 84:E0:0D:5E:C9:03:EF:66:86:BF:6A:BF:ED:8C:FF:C1:A3:2A:9C:04
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 01967CEA43BCAFC58BA70B37F2FCA25FFBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
Manifest number: 3B
Signing time: Mon 28 Apr 2025 15:00:49 +0000
Manifest this update: Mon 28 Apr 2025 15:00:49 +0000
Manifest next update: Tue 29 Apr 2025 15:00:49 +0000
Files and hashes: 1: AD-andXzbsJQ6-EJVFm7YfqJqyA.roa (hash: EQKBZSFz17cerT07f9V2gKbXedpsxOfFN/33BYuE0nE=)
2: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: OjuVNGUePKcSE7GYXVIXs7uELdO3fJkok4sR49eRYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:43:bc:af:c5:8b:a7:0b:37:f2:fc:a2:5f:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Apr 28 15:00:49 2025 GMT
Not After : Apr 29 15:00:49 2025 GMT
Subject: CN=84e00d5ec903ef6686bf6abfed8cffc1a32a9c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:58:f3:ca:db:24:37:c2:e2:c1:34:e5:71:
a2:21:5c:5e:b9:40:40:11:97:77:bc:fe:33:4b:9b:
a5:40:79:18:aa:d1:7f:30:77:d6:d9:be:56:a6:d9:
78:75:c3:e9:f1:80:d8:80:4a:1a:5c:05:d9:f4:14:
c7:e1:06:b6:a8:00:c6:45:07:ca:76:69:82:e7:7f:
2b:03:cd:5f:b3:df:b9:f1:38:3a:07:da:bb:66:b4:
de:e8:fd:8b:d9:64:28:77:d1:4e:9c:ec:fc:1a:47:
55:d5:43:bf:85:4b:81:76:2a:4c:14:69:86:b4:7c:
d7:33:70:83:96:d7:d9:cd:25:d0:8c:00:0e:22:2e:
a1:3e:51:03:5b:11:fa:70:66:99:8c:20:1c:8d:f4:
50:e0:75:8d:97:ab:59:0d:18:07:ff:65:b1:7e:b6:
1e:e9:90:3f:cc:33:d5:fe:b4:c4:98:2e:8d:5e:bb:
86:59:e9:61:48:ac:7a:84:f9:89:82:e2:a8:02:88:
4c:e5:a3:08:ea:20:a6:91:64:b0:30:e7:06:3c:89:
54:8d:94:85:d1:5a:5a:45:b9:4f:fd:4f:39:4f:bb:
88:29:1f:38:d0:98:dd:03:0a:07:3d:01:4e:f6:7a:
9a:18:d6:14:a5:7d:f5:58:1e:e3:ee:03:f6:4a:a6:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E0:0D:5E:C9:03:EF:66:86:BF:6A:BF:ED:8C:FF:C1:A3:2A:9C:04
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:31:f2:47:5d:e3:3f:d4:94:52:23:6c:03:b3:5c:0c:83:58:
b2:e3:96:cc:2e:0d:43:49:f3:e1:21:57:e5:5e:21:65:dc:ff:
0f:ff:29:06:66:3d:fa:c9:c7:d5:2d:f7:32:99:be:61:c2:d8:
b9:2a:0d:8e:4b:14:f3:da:5f:54:1b:83:3e:ac:2b:aa:ec:b7:
ad:97:93:b0:d2:8d:da:b7:56:9e:53:49:4d:55:37:a1:02:e7:
66:e0:59:6e:ab:db:13:62:37:19:4d:eb:81:b5:ee:5a:fc:31:
c3:d5:cc:40:7b:97:9c:ce:93:16:c9:7a:31:b8:a7:f4:b6:63:
16:e7:cd:b8:fe:cb:82:73:c9:89:6b:2c:71:57:7c:87:2d:c0:
2d:8d:fe:4e:56:50:cd:70:fc:c5:69:80:ba:0e:77:fd:6f:5e:
c2:19:1a:a6:b8:d7:29:75:d1:0b:c6:69:59:ce:69:e8:5c:ee:
49:33:35:95:54:eb:5a:01:bd:c3:d3:e9:b4:53:8d:86:de:7a:
0e:f9:ca:83:ab:44:b9:a4:cb:2f:99:66:30:16:b7:f7:1e:a4:
09:64:2e:e5:58:a1:32:58:0a:82:13:e1:9b:d9:3c:97:0d:fd:
50:de:87:9e:cf:f7:de:3f:b8:d9:67:9e:e1:56:c2:4b:39:7a:
35:e0:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:22:44 2025 by rpki-client