Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
File: sNcTFlrGKE-0HV38gmV3_B2gtzA.mft (raw, json)
Hash identifier: pdWfSQHd/sMMpGEUFB+eWamRTDh8wWRcZCJAsAsnrz4=
Subject key identifier: 92:CF:88:AD:F5:A4:30:37:7F:FD:CE:BB:D3:67:4F:FC:D2:A8:57:A2
Authority key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Certificate issuer: /CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Certificate serial: 019679E8FDED7A5E56D89EE3A30E27A065E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
Manifest number: 1227
Signing time: Mon 28 Apr 2025 01:00:34 +0000
Manifest this update: Mon 28 Apr 2025 01:00:34 +0000
Manifest next update: Tue 29 Apr 2025 01:00:34 +0000
Files and hashes: 1: sNcTFlrGKE-0HV38gmV3_B2gtzA.crl (hash: aK9OYUjbsuIyl6+PuZ/r4ReaW760vICPAzmOL1bCZ9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e8:fd:ed:7a:5e:56:d8:9e:e3:a3:0e:27:a0:65:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Validity
Not Before: Apr 28 01:00:34 2025 GMT
Not After : Apr 29 01:00:34 2025 GMT
Subject: CN=92cf88adf5a430377ffdcebbd3674ffcd2a857a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:7c:c8:c7:e1:c0:fd:08:26:35:78:79:b3:
a0:03:c2:c2:2f:19:42:45:7b:5c:e2:c2:56:66:bd:
82:4e:64:f2:6f:4a:99:5e:29:43:da:d9:f3:67:c3:
3e:0e:60:2d:5f:eb:cf:e7:b9:68:1d:9c:61:b3:17:
15:d3:a6:28:f7:29:b2:7c:d8:3b:fa:80:a9:44:b3:
05:19:2f:cb:4b:e9:2c:b1:70:8e:9f:00:86:b4:17:
e6:ab:2d:6f:6c:ff:2e:51:c7:c3:49:4d:db:e0:5f:
28:ee:2a:36:d1:89:d7:a6:f0:c7:23:df:ae:f2:26:
ab:04:2e:58:a5:41:c7:47:8a:bb:7a:71:5c:e5:19:
a5:dc:4a:a7:da:94:0f:2b:a9:68:2c:aa:8b:b6:a0:
2d:9f:9c:cd:2b:d3:a9:7a:64:02:04:81:7f:d7:8b:
ee:a4:4a:ee:bb:81:44:51:3e:8e:5d:51:d9:4d:c1:
2c:54:0b:0a:2c:cb:cc:6c:d2:31:3a:b5:3a:11:66:
79:d7:55:ce:aa:d7:cb:d3:fd:d4:1e:26:44:93:23:
15:6f:57:c8:d8:82:c6:dc:67:68:10:04:10:85:1d:
b8:10:db:69:00:b0:6e:c5:59:3a:c6:bc:05:0a:ee:
c6:0a:56:17:da:08:70:ff:5f:0f:27:23:20:76:9e:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CF:88:AD:F5:A4:30:37:7F:FD:CE:BB:D3:67:4F:FC:D2:A8:57:A2
X509v3 Authority Key Identifier:
keyid:B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3d:be:ff:c0:b7:03:01:91:44:2a:b2:9a:ae:22:f5:2b:69:
66:cd:0a:d6:05:ad:be:16:fd:82:6c:e7:2e:bc:d2:f6:ee:de:
93:cd:f0:fd:c0:cd:ce:9c:27:c0:9b:cc:23:30:0d:36:ce:ff:
31:a4:f7:f5:48:a0:3f:95:ee:49:bd:24:1e:ed:23:1d:93:85:
c5:26:88:d0:79:1b:fb:59:dd:bc:c4:d7:c7:01:35:91:d7:bb:
63:8f:49:3a:18:7e:a8:17:2d:61:b7:b1:9d:59:d6:0b:bf:64:
98:3f:6e:2c:f9:bf:dc:cc:7c:09:54:5d:bd:29:1b:66:c4:e7:
dc:5e:22:07:6d:7d:ac:7d:04:f3:85:54:06:37:ec:54:ce:e5:
4e:bc:36:ab:57:93:ab:6b:ed:d7:6a:11:3f:1e:bb:85:d5:4c:
43:f1:88:7f:a1:9e:5a:dd:c3:9f:b4:c8:9f:b2:ff:ef:35:7f:
4f:f2:6d:01:85:f5:0a:ef:f4:9c:a3:9c:ba:7b:5e:f9:0b:80:
e1:da:f9:45:56:11:81:5b:40:2b:35:6f:78:eb:50:bf:d6:bf:
7f:f1:0e:52:5b:8e:be:dc:65:e9:ff:2f:4b:9e:74:2f:64:ef:
3b:e8:03:dc:ff:1a:2e:9c:ad:ec:f3:47:3c:98:ed:4e:a5:be:
77:de:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:49:20 2025 by rpki-client