Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: 22S1pZ/5F0/0KzGitWW936s84hERypTIpk8QsTcY9GQ=
Subject key identifier: 96:A7:D6:71:B3:70:2D:B5:9F:5C:F9:0C:4E:6C:9B:58:14:8B:A8:63
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 01967ED8CE8720DF958A1A238496AED9E10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0993
Signing time: Tue 29 Apr 2025 00:00:59 +0000
Manifest this update: Tue 29 Apr 2025 00:00:59 +0000
Manifest next update: Wed 30 Apr 2025 00:00:59 +0000
Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: 1JXy6Mfm+AlEGEHRVlGQQbApZyjlo5fMVQ0//LrKBsc=)
2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:ce:87:20:df:95:8a:1a:23:84:96:ae:d9:e1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Apr 29 00:00:59 2025 GMT
Not After : Apr 30 00:00:59 2025 GMT
Subject: CN=96a7d671b3702db59f5cf90c4e6c9b58148ba863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:26:ab:a8:33:67:5b:6c:b1:62:68:f0:36:
62:60:f9:1f:95:41:49:e4:02:07:8b:cf:51:0e:d8:
01:07:f2:4e:d6:8e:f9:8d:95:47:81:56:02:5f:96:
02:4d:2e:36:24:8c:68:e8:eb:45:02:30:72:79:23:
dc:ee:71:20:a6:59:87:74:81:c7:c7:fe:2e:bd:a4:
ad:1b:06:c1:9f:eb:02:4d:2c:8d:c2:08:5d:37:de:
fc:a9:92:de:3b:5d:91:6b:d3:40:90:f0:04:bc:6a:
5d:00:4a:a1:9a:e1:44:45:e1:3c:fc:8c:c2:a1:40:
8d:f1:5b:59:ae:e8:1c:4f:89:3d:13:dd:35:dd:ea:
66:13:83:f7:f8:e1:f3:9f:ff:b3:49:48:70:e9:69:
c3:76:ea:7f:61:09:3b:42:11:51:5f:c4:35:b5:0a:
25:27:f4:a7:58:5b:d9:de:28:25:e4:22:b1:f3:31:
58:22:12:98:fa:06:75:6b:1a:59:eb:a4:88:fe:06:
bc:73:de:09:30:34:26:bf:be:4d:45:03:9e:fc:45:
2f:18:26:3c:87:63:e9:ff:55:67:65:d7:eb:ae:cb:
2f:72:30:39:29:9d:03:68:4e:3d:de:a7:77:d4:80:
f8:60:03:13:33:fa:f5:b1:b5:f3:1f:93:cb:b5:80:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:D6:71:B3:70:2D:B5:9F:5C:F9:0C:4E:6C:9B:58:14:8B:A8:63
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fe:7c:1a:3f:56:10:c8:7c:b9:3e:39:60:0d:17:cb:4a:85:
d7:cb:02:eb:27:a4:a3:13:53:51:bc:44:d3:9a:31:ae:9f:0b:
58:06:a6:5b:a5:bc:d2:ab:66:7e:48:20:96:96:d8:10:82:7f:
ed:05:fb:08:a4:2e:62:1d:1f:29:ec:bb:18:13:36:7e:75:ec:
63:4e:df:b6:3b:61:0a:02:60:12:32:48:76:3f:96:4c:aa:a8:
56:45:17:67:7a:b7:1a:40:31:fd:89:75:af:f5:43:42:8e:a7:
76:41:70:2e:60:89:35:f3:f5:6d:96:90:39:85:4f:2e:09:0a:
16:34:91:14:70:aa:63:16:51:2c:84:60:d5:7f:63:53:ab:b0:
26:a3:7e:97:3f:d3:64:45:7a:cf:be:66:d1:f6:ce:27:e4:c8:
9e:e0:08:bd:33:04:0d:45:d7:15:58:a4:5c:4f:42:ab:b2:43:
3d:a9:b4:a9:b0:d6:ad:ec:e2:df:93:ed:de:49:a1:40:b2:84:
5a:f6:a7:c6:0f:7c:69:a2:a7:83:9f:bc:e1:c1:53:6a:fc:3e:
76:e0:a2:c5:51:42:14:62:a9:02:03:33:af:73:14:e7:6e:19:
1c:46:de:42:31:67:24:98:c0:fc:df:ea:a5:1f:d9:bb:07:a0:
a6:f6:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:49:04 2025 by rpki-client