Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: z9sHraYD0lsVteNMDZXgO5xLjWOsicrc6TviR9heg4s=
Subject key identifier: 11:C9:35:FD:D5:20:A6:1C:4C:DF:0C:12:64:79:77:77:97:33:DA:63
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 01967DC6B5E9EA1AA51D41FC7E34DA85510E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0851
Signing time: Mon 28 Apr 2025 19:01:36 +0000
Manifest this update: Mon 28 Apr 2025 19:01:36 +0000
Manifest next update: Tue 29 Apr 2025 19:01:36 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: 7rmMTkUNky/l5B7s+XsURXi3WREJf/RUrZKAJgs/jsE=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:b5:e9:ea:1a:a5:1d:41:fc:7e:34:da:85:51:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Apr 28 19:01:36 2025 GMT
Not After : Apr 29 19:01:36 2025 GMT
Subject: CN=11c935fdd520a61c4cdf0c12647977779733da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:f9:22:57:a2:42:e6:ae:3f:99:60:24:11:
48:51:27:19:4b:1c:e6:07:bb:8e:bc:a1:c4:9c:3e:
29:bf:d8:26:08:54:cd:7a:31:49:b4:de:bd:06:89:
66:7e:ba:b1:2d:53:6e:c0:f4:1d:90:25:ba:8d:b8:
29:eb:3e:95:da:3c:7f:c1:23:1f:1b:67:35:44:72:
0c:89:13:b8:ba:8c:7c:80:b2:36:ed:cf:dc:21:8b:
d4:22:70:fa:5c:c4:ad:1e:ff:22:bf:f7:06:4a:50:
1c:10:b9:a6:cb:73:89:fd:e0:bf:11:e2:7f:63:c2:
e1:af:55:83:3d:d3:32:5a:fd:ea:8e:5e:8f:df:e1:
dc:d7:95:17:b0:9a:bd:cd:c1:89:5b:85:94:96:a6:
44:5e:7b:a7:b3:c0:b3:45:da:94:09:fc:b4:15:75:
75:f9:f3:a4:76:de:14:f8:0b:5d:4b:ed:d0:6b:7c:
e0:63:16:b7:b8:b3:f2:20:4c:3e:86:19:11:2d:82:
bb:ab:a1:30:97:87:15:28:dd:62:47:08:f1:23:46:
7a:f1:b7:5d:6f:a3:24:77:d3:64:12:99:5e:d8:f7:
9b:59:c7:f5:10:70:5b:3f:f5:f3:08:56:f9:6d:b9:
00:ca:38:2a:43:1d:20:49:d3:f5:35:1d:65:47:72:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C9:35:FD:D5:20:A6:1C:4C:DF:0C:12:64:79:77:77:97:33:DA:63
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5f:a7:46:db:36:25:28:32:95:6b:81:20:c2:f4:8f:d1:3c:
dd:d9:b9:15:a8:0c:6d:ec:81:b1:7f:13:3e:2a:e5:e4:e3:50:
4a:20:de:20:9e:24:e4:35:71:12:c5:13:0e:9b:a4:68:aa:83:
13:05:e3:bb:92:85:29:fc:d3:08:cb:90:d3:1d:02:c2:0b:41:
a5:0f:de:57:7d:20:6e:e0:01:81:02:d7:67:53:a7:47:a0:56:
e0:1d:61:88:20:71:c3:28:d4:da:9d:cc:c6:f8:5b:f1:06:3b:
2a:c8:36:c7:59:01:49:da:17:f4:a2:9d:ca:76:98:36:0c:66:
58:37:a0:5d:e3:75:a6:4f:31:7c:98:5d:ef:71:8f:14:e5:35:
66:3e:65:0b:17:94:36:70:b3:7f:cd:4c:de:37:c9:19:64:1a:
ba:1c:37:5f:68:b1:05:39:39:33:3a:c7:73:43:38:3c:a7:37:
63:ac:32:02:34:5c:d9:fb:17:8f:a4:79:bd:c9:40:48:c0:02:
5d:28:2d:37:ac:9b:63:ff:e3:63:3c:fe:2d:a0:1a:5a:79:5b:
cd:51:4d:d9:fa:56:d9:bf:3f:d2:4e:38:da:ea:f5:45:19:b1:
4b:77:84:0a:ae:f4:06:77:e5:44:9b:89:e5:f9:7a:38:c0:00:
b0:70:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:36 2025 by rpki-client