Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
File: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json)
Hash identifier: 7zJGZK8UBqYcSYSjpyp/WSm1fatzashiSj51PA4BQME=
Subject key identifier: 61:0B:45:55:62:AE:BA:24:7C:3A:F4:C0:A8:1C:9E:E9:29:F8:E2:4B
Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
Certificate issuer: /CN=492999fd50a69fd0412065490f5acc75a159deb7
Certificate serial: 01967B3293835EA150F7B0276A253F36A8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
Manifest number: 146C
Signing time: Mon 28 Apr 2025 07:00:34 +0000
Manifest this update: Mon 28 Apr 2025 07:00:34 +0000
Manifest next update: Tue 29 Apr 2025 07:00:34 +0000
Files and hashes: 1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: 3hIXw9f12yAA+cDmU6kiRTmoTWRCi+9bg4thgkyl3lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:93:83:5e:a1:50:f7:b0:27:6a:25:3f:36:a8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7
Validity
Not Before: Apr 28 07:00:34 2025 GMT
Not After : Apr 29 07:00:34 2025 GMT
Subject: CN=610b455562aeba247c3af4c0a81c9ee929f8e24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:9f:88:21:be:c7:6e:ef:c8:84:2e:05:ba:
28:98:f7:b8:e8:f9:d1:9b:23:c4:c1:2e:3a:9a:c4:
27:80:ea:c8:49:5c:aa:be:3d:9c:3d:95:29:dd:48:
9a:02:47:a8:71:35:fd:dc:1e:69:aa:3c:01:ae:18:
f2:c7:40:9f:09:2c:b1:94:b6:b4:ed:3f:75:f6:63:
42:59:73:b1:85:b0:a6:49:26:9a:44:65:e0:85:bb:
4f:7a:1c:e3:58:5c:31:e2:7a:34:59:d0:50:1c:df:
e9:fd:21:28:12:e7:ce:cd:d5:24:b3:c7:04:92:12:
ad:cb:db:c3:3e:53:d8:79:0a:72:ad:f3:f6:40:10:
d8:7f:2c:32:34:66:bd:9d:94:34:0b:0e:c6:d7:cd:
f0:f9:fe:a7:ad:3f:0f:e7:fd:8d:59:aa:67:50:20:
1f:58:71:20:a8:1e:d1:10:dd:1a:5d:78:b8:ad:b1:
91:58:a8:33:c8:ea:5d:c4:5f:34:fa:15:1a:ca:96:
7d:ab:c1:6f:65:ca:5b:96:03:11:1f:a3:79:9b:78:
bb:8c:c6:35:b6:51:b8:50:48:0c:1f:c3:3a:04:28:
d7:87:f4:92:dd:22:dd:4f:ed:6d:f0:e7:88:3e:e9:
3d:9c:e1:e2:91:d5:40:8d:b3:0b:28:67:8f:3d:12:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:45:55:62:AE:BA:24:7C:3A:F4:C0:A8:1C:9E:E9:29:F8:E2:4B
X509v3 Authority Key Identifier:
keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b8:07:b7:36:df:af:74:ab:2b:07:d0:b2:af:8f:b1:14:bc:
f1:27:b0:52:30:b5:e6:be:08:ce:fd:0b:79:fa:06:aa:2a:4b:
79:8b:1d:34:7a:77:2d:1d:e9:55:7c:59:0c:f3:02:67:3b:31:
aa:ce:23:26:f9:9b:d8:cd:2b:c5:2b:b6:eb:4d:e9:8b:b2:6f:
cc:d4:31:ca:f7:66:68:47:f6:75:8c:c2:d0:c8:30:fe:29:90:
64:41:99:50:d3:be:66:4b:63:7f:89:a4:7a:2b:db:3d:d3:95:
ac:da:3c:d2:7f:ac:46:3f:e1:0d:e4:f5:3c:06:70:c4:4a:c4:
9d:68:58:b4:cb:f3:fe:70:16:50:d1:2a:72:54:35:e7:9c:c5:
da:2b:8c:f1:c5:2d:d8:ab:f3:ee:e9:9a:6e:ad:42:21:bc:ca:
fb:93:aa:76:81:2f:7f:e6:ec:5a:ac:c9:11:50:21:2c:2a:3e:
39:87:9e:61:43:4e:94:d5:49:ae:e9:b0:dd:fb:8d:40:e4:ed:
ec:6b:97:32:02:7a:b4:a3:c2:93:12:6f:7a:eb:dd:e1:a4:9d:
11:c6:c1:ff:6d:95:05:98:c3:77:04:da:cd:3e:23:81:1e:cb:
b6:f5:b8:30:b5:ff:8b:1d:10:7d:f9:33:78:e0:35:bb:cb:31:
bb:45:22:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:08:29 2025 by rpki-client