Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: 3kFf8rNLGs6F6C0jIfE8SLwpFxDo9//wZwFNbHMZK3k=
Subject key identifier: 14:C5:ED:DF:A7:9F:B6:90:D0:3B:95:80:C9:BB:40:21:76:02:63:00
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 01968359A7971ADACC6612A59DDB64FF3590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 0374
Signing time: Tue 29 Apr 2025 21:00:12 +0000
Manifest this update: Tue 29 Apr 2025 21:00:12 +0000
Manifest next update: Wed 30 Apr 2025 21:00:12 +0000
Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: SZEshCqgPuOpbguQxInMe8zSWhQ+T8i3sG9FT5WIy/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:a7:97:1a:da:cc:66:12:a5:9d:db:64:ff:35:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Apr 29 21:00:12 2025 GMT
Not After : Apr 30 21:00:12 2025 GMT
Subject: CN=14c5eddfa79fb690d03b9580c9bb402176026300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:c5:46:52:a3:1b:9c:4b:b1:2b:fa:6d:23:
70:41:10:f2:5b:6c:61:8e:eb:b5:a9:ab:26:9e:9c:
54:b6:84:9d:d3:d8:0a:4e:39:3b:b7:9f:cb:1c:28:
be:31:d2:5d:8f:0e:df:73:8b:89:1d:11:c2:bf:83:
a2:0b:33:57:50:bf:74:28:5b:38:76:ab:31:d9:e5:
ec:8b:3a:90:61:5e:b0:9a:9b:ad:42:9e:18:0c:c4:
7b:ee:e0:a9:54:33:8d:e7:d5:a2:0b:68:7f:c8:9d:
49:4a:1f:fc:32:1e:bf:f0:3d:7e:37:96:3d:6d:ea:
c8:da:e9:d2:bd:44:f9:ca:71:3c:21:95:e6:64:a8:
12:af:db:94:84:b3:0c:fc:89:77:5c:c3:3c:1d:f5:
3a:0a:a0:8d:b7:04:14:be:be:73:70:ed:83:d5:12:
71:ea:52:49:0f:54:47:bd:eb:f1:f5:47:60:50:22:
32:85:0e:b9:f9:84:8a:c4:fc:73:a1:9f:de:d2:24:
f7:b1:92:a3:5a:d8:cd:bd:f4:19:97:6b:e2:63:35:
d5:79:53:b6:26:90:e9:da:11:b7:ac:03:80:56:84:
32:de:0f:a4:e2:0d:ff:65:b6:64:94:11:76:c1:c6:
23:21:50:b9:a5:41:d7:5d:5c:ff:37:4f:9f:4a:35:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C5:ED:DF:A7:9F:B6:90:D0:3B:95:80:C9:BB:40:21:76:02:63:00
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a4:26:3a:83:6d:b4:f7:af:cc:a1:af:c3:f8:69:4b:58:59:
0c:7c:a8:86:e3:98:9e:b0:ef:05:49:2c:2e:7f:12:4e:14:f2:
f9:da:78:e7:a8:8c:02:48:78:16:63:e7:54:21:70:fb:a8:f0:
40:b7:67:5b:38:ea:07:4c:37:cc:7a:75:cc:0f:e3:c7:22:a8:
6a:a6:42:11:43:39:46:69:38:42:95:da:61:e2:34:12:41:00:
bf:18:45:11:ab:cd:e2:ff:09:a7:b1:8b:25:a9:0b:cf:d2:ef:
6e:6c:62:28:20:30:6e:cf:c6:02:91:77:0a:0c:d8:30:b2:dc:
39:27:01:9c:6c:5c:32:87:6c:79:8f:24:de:73:90:68:9f:c6:
df:fa:7e:a4:c4:fb:b7:51:fe:4e:bd:99:fe:5f:41:25:5a:26:
20:ae:18:3c:b5:60:f6:f7:26:73:ad:ca:d7:32:b7:b7:41:8a:
f8:da:79:03:57:65:86:a9:7a:14:22:11:7d:58:3e:2d:9f:42:
13:f8:fa:5c:fc:94:d7:8e:e2:39:b7:39:2c:0e:45:b9:6e:26:
20:4e:70:db:ac:fe:54:80:06:64:30:26:c0:9c:5a:08:03:23:
e2:9b:85:2e:a1:df:64:71:2f:8f:39:94:ba:2e:98:36:95:fe:
07:45:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:10:30 2025 by rpki-client