Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
File: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft (raw, json)
Hash identifier: 7TJqcY7LXCNaz63NXtgWYUSZxlRfGQIXygyExuJqZFw=
Subject key identifier: 7E:6D:68:1F:B4:7E:86:08:20:2B:3F:C7:9E:18:35:A7:60:EF:45:66
Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Certificate issuer: /CN=4a1d20be77e12232323c1422fb5198fea0086034
Certificate serial: 01969717F02BE243C12B756CBE429EA0F3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
Manifest number: 1520
Signing time: Sat 03 May 2025 17:00:50 +0000
Manifest this update: Sat 03 May 2025 17:00:50 +0000
Manifest next update: Sun 04 May 2025 17:00:50 +0000
Files and hashes: 1: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl (hash: hwQYDBBCMYXzkL5wNOw7SpJhD1QfnxfgxzKpCvg8Yr4=)
2: mN2qB1BO4S5r9HWkXJU36eJQAJo.roa (hash: CEQM9W3lMs7LPoWAqhYjN1IkeHCfM/C5tJypbGgHYt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:17:f0:2b:e2:43:c1:2b:75:6c:be:42:9e:a0:f3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034
Validity
Not Before: May 3 17:00:50 2025 GMT
Not After : May 4 17:00:50 2025 GMT
Subject: CN=7e6d681fb47e8608202b3fc79e1835a760ef4566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:a7:0b:1f:26:c2:6e:f5:ce:cd:b6:30:3f:
4e:9e:8e:4f:74:3f:da:6f:ac:fa:b7:01:a6:19:d6:
7b:6d:be:35:d7:e4:e4:7e:f7:cb:5f:bc:31:d7:d3:
7e:b8:51:29:c9:6a:99:43:98:ff:f7:3a:17:ab:26:
29:e5:be:f6:72:eb:73:e6:fc:a4:a7:3d:37:03:48:
dc:ca:ee:44:6d:fa:f9:10:48:1e:42:96:de:ae:58:
31:01:f6:ef:ff:ef:c7:ce:ea:f6:50:92:1e:01:bf:
88:de:ac:b6:45:ba:36:77:43:62:3b:69:88:2b:4a:
c2:11:2b:a7:25:ac:18:a5:75:a8:83:ef:7d:bc:1d:
cf:17:8c:94:c9:bf:cf:87:06:5e:df:e3:17:63:02:
5a:87:e6:c1:11:0a:9c:6c:b7:ed:2a:76:56:ea:ec:
7f:81:b9:47:53:aa:62:de:72:04:2c:83:d0:aa:f3:
6e:06:86:b3:78:79:0c:1d:d4:8a:6f:f0:5d:d5:c9:
b5:85:62:bb:b1:ba:8f:92:69:09:79:cb:16:74:22:
6a:2a:c2:ff:23:37:f8:48:a9:28:4f:9a:84:74:d8:
a4:5b:b4:9b:97:d2:b6:7e:c0:1b:41:f5:90:bc:1b:
74:0e:cd:62:33:b5:e6:cd:0a:52:3b:d3:4d:40:2c:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6D:68:1F:B4:7E:86:08:20:2B:3F:C7:9E:18:35:A7:60:EF:45:66
X509v3 Authority Key Identifier:
keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a0:a7:05:14:20:37:9d:c1:90:9a:00:17:4d:11:d1:e7:39:
f2:aa:90:f1:ab:b7:7a:e0:fd:a7:0d:f9:b4:e8:8f:62:7c:73:
54:61:0c:2b:d2:8a:7b:77:9f:b4:de:48:0e:31:f5:31:9b:ad:
20:e5:6b:b0:aa:c4:9a:ee:c3:7e:d5:a5:e7:f7:0d:62:9a:de:
af:6d:24:0c:53:e1:8d:50:b8:1b:f6:fa:19:ac:6c:e8:fb:df:
4d:57:8f:99:a7:6e:d6:df:ba:82:44:51:b6:02:37:a6:0e:1b:
24:8b:5b:58:fd:63:41:cb:1e:2f:6d:1f:e0:cb:30:c4:60:eb:
6b:58:ad:35:a2:0e:ba:1f:e5:fc:d6:8b:8f:88:f5:c2:5c:ab:
4f:e6:8e:b1:8a:4d:0d:3d:c7:fe:11:7f:64:78:16:3e:cf:cc:
9b:f8:44:9c:40:bc:24:a1:31:15:cf:84:86:31:d8:e4:b9:0c:
a3:b6:e4:69:53:60:3a:74:ec:59:5e:39:d6:81:94:fd:80:eb:
74:a7:18:ff:ef:5c:04:6b:03:d4:29:0d:ad:d5:56:28:28:26:
72:aa:c3:f0:7f:76:0f:72:8d:fa:84:b3:f5:43:58:a7:2b:ba:
77:01:01:ed:7e:f2:86:f2:23:d6:d2:e5:9b:9f:cd:18:97:1e:
f0:bc:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:12:13 2025 by rpki-client