Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: Q19e/v2hg4CdI4uQmAyahO8A45Fn2OPdOZ8E7N7LXdg=
Subject key identifier: 6C:07:1E:F7:A0:4E:DB:B2:0F:0F:66:D7:A9:16:9B:59:1A:F1:67:83
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 019677560F0968ED3C5C2E9C1464D8223384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 0FD3
Signing time: Sun 27 Apr 2025 13:00:50 +0000
Manifest this update: Sun 27 Apr 2025 13:00:50 +0000
Manifest next update: Mon 28 Apr 2025 13:00:50 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: zVsPE+q324nSOndk2dgS6fGJCruT8U6ZndTkQ+6VP8s=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:0f:09:68:ed:3c:5c:2e:9c:14:64:d8:22:33:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Apr 27 13:00:50 2025 GMT
Not After : Apr 28 13:00:50 2025 GMT
Subject: CN=6c071ef7a04edbb20f0f66d7a9169b591af16783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:06:b1:04:fa:ab:8b:c6:f6:f8:15:50:a4:
bd:8b:80:31:ca:8f:0f:08:28:5b:42:a1:65:37:ce:
b8:b8:24:a4:32:60:44:8a:ce:68:ce:61:e4:c7:60:
46:9b:d1:a0:61:d3:17:4f:b9:b6:d5:fb:22:dc:ad:
f6:d4:27:fd:7d:e5:83:d1:c0:28:46:5c:cb:e5:63:
2d:8f:d1:97:62:ac:8d:f5:a8:57:2f:3b:91:a6:8c:
b3:18:63:d9:d6:9e:29:2a:38:c0:2d:0a:4e:9d:d5:
2f:d0:58:4f:27:14:da:c6:b1:df:ce:06:1f:64:0b:
5a:88:c9:21:d9:76:60:45:8e:63:e8:fe:ea:a4:1c:
89:6a:7a:e1:fa:f6:7e:b3:a0:24:95:c8:84:71:7d:
8e:48:b5:ea:a4:77:72:44:01:8b:14:97:4a:e0:82:
03:11:17:3f:79:6b:7f:00:a6:83:1c:da:dd:b8:06:
b5:fb:c3:bb:54:82:37:14:0e:52:fe:92:9e:8d:5d:
16:bb:f6:0d:c6:c4:d3:ad:7b:a2:43:30:1c:df:80:
86:81:a5:29:af:f5:7d:32:60:32:53:18:d0:c4:cf:
cb:ad:c8:c9:5b:9c:6e:b8:46:b0:84:83:f0:6f:06:
23:7f:82:46:17:36:19:7b:da:54:5c:3b:2d:8e:2b:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:1E:F7:A0:4E:DB:B2:0F:0F:66:D7:A9:16:9B:59:1A:F1:67:83
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:cb:0b:e9:06:66:03:47:88:8e:13:17:b6:e4:a7:6b:88:
d9:36:aa:a2:fd:11:98:b0:7f:32:13:39:8c:71:2a:07:51:69:
a0:d3:94:c5:37:04:cc:e4:d2:ea:34:be:e6:e9:0b:f9:10:dc:
98:13:8b:99:9b:d7:67:05:c3:82:91:1e:09:0c:49:ed:e0:49:
d8:26:1a:84:ca:20:4d:16:3d:24:4d:b8:fe:2f:07:88:4c:93:
93:a6:2d:b9:6c:d7:58:fd:8c:f1:68:ca:72:57:05:6d:30:4d:
ed:09:3f:3f:1c:c0:4a:fe:26:0c:30:62:c7:dd:76:0c:ba:d0:
4e:ce:d8:d5:bf:55:07:fc:db:5d:d8:6f:4d:06:b0:e7:3b:fa:
6d:d0:14:68:41:69:f3:4b:1b:b1:7a:b6:b7:5f:60:b6:d3:0c:
fd:24:d2:7f:73:c7:92:d2:f7:fe:85:89:8d:a4:27:c1:8c:90:
8a:83:6a:d0:01:15:e7:a6:80:bb:5d:52:18:4f:c3:9b:2a:fc:
d5:f8:f4:2f:3e:92:b4:ee:4b:48:d7:eb:15:e0:34:cb:49:8a:
6f:b3:04:24:a6:5f:31:e3:a9:b5:0a:a2:fe:51:69:d1:c8:0f:
d8:e8:23:6a:44:6d:6c:76:b6:ee:99:4f:1b:c9:5c:bb:f7:14:
24:95:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:10 2025 by rpki-client