Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: 2LHZEnSA96eie53sbBUEXgp1SqkB7Rt5pQby+Y8/RSQ=
Subject key identifier: 9F:FB:D4:88:F2:A6:55:CD:00:77:91:BB:E4:5D:5D:C9:CB:2B:C3:C8
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019678D6129BAE0B26374472B5DE41D169DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 14C8
Signing time: Sun 27 Apr 2025 20:00:17 +0000
Manifest this update: Sun 27 Apr 2025 20:00:17 +0000
Manifest next update: Mon 28 Apr 2025 20:00:17 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: D+Qp+tvh911sSZxe4FP+o0FwydGxJFC5xDfy1jpIS20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:12:9b:ae:0b:26:37:44:72:b5:de:41:d1:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Apr 27 20:00:17 2025 GMT
Not After : Apr 28 20:00:17 2025 GMT
Subject: CN=9ffbd488f2a655cd007791bbe45d5dc9cb2bc3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:09:d5:c4:ef:7c:1a:6b:20:a2:51:37:dc:
67:06:f7:df:57:33:f2:3a:4c:81:41:ea:1c:3a:f9:
6e:19:3f:67:6f:0d:64:a7:ff:58:9c:56:15:15:ba:
42:06:50:bc:56:e2:9d:79:ef:c8:4a:6b:18:b1:fa:
19:1e:26:98:ee:38:ec:fa:d4:78:d3:d8:0b:46:b3:
b3:9c:0d:4a:36:40:d8:dc:22:ae:a7:f7:32:22:d9:
b5:18:ab:10:b9:05:f1:89:f4:bf:ea:df:7b:5e:5b:
20:6d:17:80:0f:41:b4:08:3c:d6:30:4a:67:ae:0f:
c3:c8:0b:76:b7:16:2e:65:93:bc:65:08:8c:c0:d5:
e6:c4:ee:14:de:69:da:ea:7b:df:5f:1a:17:22:0f:
7a:f4:53:3d:c7:aa:16:aa:80:b0:1a:12:ce:39:f6:
26:55:f7:57:f8:7f:49:0c:df:0a:fd:14:cf:e5:72:
27:35:9d:30:e5:8d:5e:d7:5b:1f:1d:8f:10:17:bd:
49:51:22:90:91:fd:1a:9b:a9:ad:ac:46:09:90:53:
f1:85:84:a8:0b:22:4a:f8:44:83:97:df:2f:4d:ce:
71:73:bd:20:90:df:b3:59:df:78:14:bd:3f:01:b6:
94:9b:8d:8e:58:96:cc:74:c1:67:b4:77:76:c3:a6:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FB:D4:88:F2:A6:55:CD:00:77:91:BB:E4:5D:5D:C9:CB:2B:C3:C8
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:24:b0:f0:e0:b5:ba:16:d4:7a:88:6f:2e:58:88:f6:6a:
9a:48:b8:f5:0c:82:1f:e6:a7:5e:0c:ac:bf:c8:35:9a:2d:f2:
1b:38:00:77:ad:75:a6:24:34:72:d3:4a:25:76:57:20:a9:68:
ee:46:68:dc:16:13:9a:54:5a:77:f4:7e:45:bc:e1:f3:35:c7:
11:ee:40:38:31:3d:f7:7f:f5:6b:cd:c4:6c:68:80:db:d6:21:
e6:7d:a5:bc:ac:b3:41:67:d3:65:15:91:f9:5b:e3:b3:f9:69:
5e:35:ec:a2:30:52:95:14:07:ff:a2:35:c6:79:8d:aa:f7:c3:
ce:7f:1f:af:b9:71:2a:e3:9c:1e:f2:bb:71:89:1b:2e:1d:2c:
40:8f:9b:cb:0c:87:83:77:2b:64:d6:b5:68:0f:25:e8:78:43:
44:5d:dd:3f:a4:95:7e:f7:d9:db:af:b1:2f:d4:b9:55:29:20:
81:b2:c3:95:46:b9:7a:18:22:60:93:68:62:d8:08:9c:0c:fa:
ac:1e:c2:8a:80:97:a0:e5:9b:81:63:47:d5:1d:73:ed:6c:2a:
ba:e8:be:50:0e:92:75:0d:97:7c:88:44:33:1c:7f:3f:08:60:
f5:e7:01:8d:d5:cd:fb:b2:9c:78:ab:92:01:c8:84:95:45:4c:
54:be:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:07:46 2025 by rpki-client