Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: SVrgq0RM7kNJKRerxVL0gf1LF2TVxCnN2B2MhNrlKOI=
Subject key identifier: 09:ED:CB:54:0E:02:CF:58:3E:E9:60:C3:6A:09:FE:96:B5:9A:3A:CD
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 0196789F46B1547DED54D87759DF27D4DA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 096E
Signing time: Sun 27 Apr 2025 19:00:26 +0000
Manifest this update: Sun 27 Apr 2025 19:00:26 +0000
Manifest next update: Mon 28 Apr 2025 19:00:26 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: ls6EDqUla03uO37xOQvgZJSKCqj4Glr6Csl9HXvi/HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:46:b1:54:7d:ed:54:d8:77:59:df:27:d4:da:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Apr 27 19:00:26 2025 GMT
Not After : Apr 28 19:00:26 2025 GMT
Subject: CN=09edcb540e02cf583ee960c36a09fe96b59a3acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:cf:d3:98:15:fc:2e:86:36:e8:0f:cc:4f:
14:75:b4:7f:9d:7c:12:b1:c6:86:04:a4:35:28:fa:
b0:f5:9d:5f:c5:ca:1a:b3:cc:02:14:9e:6b:ad:e7:
97:53:7d:3a:04:2c:f4:77:35:d3:b0:45:b1:41:d9:
85:b0:23:75:32:8d:48:65:db:07:14:de:fb:ac:8f:
2e:51:6d:4f:32:51:21:ab:ea:dd:ee:d3:b3:c1:c8:
5d:26:59:14:d7:fd:52:16:e0:c9:44:05:92:e3:6f:
9d:e1:0b:c5:8c:fc:65:a3:5c:69:75:89:4d:01:a0:
16:48:42:36:d4:e6:1c:10:5e:91:ef:d8:0a:f0:1e:
8b:b8:de:2b:28:34:4c:db:b6:83:50:d9:23:dc:33:
4a:10:e9:98:47:72:f5:47:e9:5e:dd:53:08:6f:d0:
c1:6c:0a:d7:37:5c:3e:d5:46:a7:28:33:1c:1a:09:
e3:b1:f7:2b:5b:d7:bf:85:67:0c:eb:62:50:68:f6:
56:b2:57:06:0d:5c:d4:21:18:d0:87:da:0d:54:0d:
bc:ff:89:e6:51:ea:bc:b4:57:1a:b6:98:1a:ba:2c:
3c:dc:2f:a7:fe:37:47:9e:2a:d7:07:7b:01:53:9f:
78:c4:f7:df:84:ca:91:2d:e9:74:97:28:d8:e4:98:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:CB:54:0E:02:CF:58:3E:E9:60:C3:6A:09:FE:96:B5:9A:3A:CD
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8b:26:7e:7b:d4:b9:e8:85:31:3a:94:8b:12:52:4a:20:19:
3c:dd:f4:dc:28:d8:9d:79:4d:81:3d:f0:83:d2:7a:97:eb:84:
a5:fd:80:23:f2:07:10:3b:fe:05:6e:33:9f:a4:cf:3d:26:11:
c2:28:ba:40:76:b7:45:5e:6c:f5:dd:9a:9b:1f:3f:b9:3a:6a:
55:35:f2:ba:85:d5:a8:a9:78:08:32:cd:74:21:31:a5:ac:8f:
32:8d:bb:cf:da:24:5b:8e:24:e0:f5:36:5c:4e:ba:9b:41:d7:
ee:ef:81:cd:42:53:a5:0e:eb:6f:33:cf:6a:cd:5d:7d:11:9f:
63:9b:4f:1a:38:78:8b:7e:7d:ec:e5:00:ec:15:a9:b4:42:90:
a6:36:86:e4:6b:48:57:3c:54:ca:64:c1:13:be:df:a0:84:c1:
b9:a3:f0:92:8c:91:5e:6e:84:d6:aa:ac:0e:f7:63:dd:8e:17:
62:57:9a:d8:af:8e:62:34:b5:7e:18:e0:18:1d:c8:70:7f:e8:
00:98:a5:cd:16:95:fc:9f:5f:ab:1e:e6:3a:64:b1:a7:7f:2c:
bf:8d:bb:aa:fb:75:c7:a9:36:aa:31:b0:29:40:3f:ff:21:ae:
68:45:d7:53:62:5b:3d:eb:f4:72:85:b1:e1:f3:16:4e:d5:c0:
6a:dd:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:00:34 2025 by rpki-client