Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: a/sg0hooyLaOYXq6qCbh50dXM3fDcTOhE6Dr3LEpJNY=
Subject key identifier: 7A:24:64:1C:19:C6:8E:0F:29:F1:91:B5:81:67:C1:2D:76:72:12:C5
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019672662B17D0A89034844A7CB5308DAE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 14:00:20 +0000
Manifest this update: Sat 26 Apr 2025 14:00:20 +0000
Manifest next update: Sun 27 Apr 2025 14:00:20 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: gibBrRpkZdMXZdhAb+Ko7Z8YNrM94M8ojqRNy+TFSe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:2b:17:d0:a8:90:34:84:4a:7c:b5:30:8d:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Apr 26 14:00:20 2025 GMT
Not After : Apr 27 14:00:20 2025 GMT
Subject: CN=7a24641c19c68e0f29f191b58167c12d767212c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:40:c5:33:d6:dc:79:65:00:15:55:b4:99:
60:02:bd:d8:08:9e:59:83:90:c7:a3:8b:c6:da:b0:
80:89:dd:09:5d:35:e1:f4:d8:a3:c8:a5:06:11:47:
06:a9:8a:ae:54:58:de:c3:d1:1e:23:b3:51:98:06:
8d:d2:bb:a3:ee:3d:38:34:ba:87:a0:fa:5e:b7:fd:
0a:3c:af:48:c2:24:4f:a6:56:f8:6f:56:2d:40:2c:
fc:54:66:59:fa:b9:a7:04:33:43:72:cf:53:d6:86:
9e:40:3e:46:e8:14:a6:4a:f8:6b:0f:fc:f4:4b:36:
f3:d5:71:5c:ac:0a:19:87:fd:72:b1:51:26:53:81:
61:53:85:39:77:d6:1c:c8:3a:fe:4a:75:49:e9:03:
6e:77:2c:17:c5:67:9d:d5:11:86:b6:80:ff:1d:5b:
8f:12:3f:12:1c:c7:99:b6:c0:31:7e:17:28:0d:9c:
53:1b:52:82:44:b2:1b:ec:e2:a1:5e:8c:a2:ba:3f:
97:70:b5:d9:a5:b8:3e:74:ef:ba:ed:8c:3c:26:aa:
19:bf:c7:a6:53:71:b3:e8:2f:93:38:7c:03:cc:b9:
8f:b9:19:6b:8c:2c:9c:09:d9:50:ca:6e:0c:fa:48:
fb:d3:92:92:d6:77:9d:d8:3d:1b:82:44:82:aa:77:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:24:64:1C:19:C6:8E:0F:29:F1:91:B5:81:67:C1:2D:76:72:12:C5
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:a3:5f:f4:f7:51:a4:a4:92:13:c9:0c:8b:46:b0:b3:d8:
0e:dd:86:a4:fa:c3:6c:54:0d:f2:32:a5:9a:39:6a:a4:70:32:
a2:5e:ba:b5:58:0c:0c:22:31:77:8a:30:bd:ae:79:18:42:50:
e4:03:b0:45:a4:01:36:f8:50:d1:e4:33:de:40:20:87:91:28:
93:d9:9b:ec:a0:32:73:c7:db:b5:c3:39:66:18:3d:81:ce:19:
0a:7b:5b:1f:0a:78:eb:f6:13:da:86:9c:44:65:86:c5:bb:85:
b4:c3:5f:b6:10:9a:67:52:e3:7e:d4:2b:4f:89:33:6b:d4:c2:
c2:4d:e9:4e:85:ab:68:d3:f8:f5:06:7c:5f:55:93:d5:56:25:
f3:04:ca:b2:6f:bd:ae:7f:a5:e6:ef:a3:3c:ee:90:d4:ab:de:
d6:f1:99:8a:10:5b:84:c4:2c:18:17:a3:b4:9f:50:4a:a3:73:
80:59:f8:d6:c5:4b:99:9e:c4:a9:30:3e:91:0a:a1:a2:f9:55:
91:df:66:c4:27:af:28:5d:ce:3f:34:f5:2c:e8:98:62:b1:09:
27:99:e1:d7:42:30:7a:6e:51:40:f0:72:0a:c6:78:f6:03:35:
f4:b8:7a:ce:e9:c1:7d:50:c6:d3:95:f0:22:b4:c5:40:10:17:
7b:16:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:08:08 2025 by rpki-client