Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: WkclJ40iKq8wMpO6oWTXmH5FZXFbOAFwpUkkNUlMshA=
Subject key identifier: 13:61:C5:97:D0:F5:1D:EC:E5:DA:6D:FD:8D:C6:5D:A2:F8:9E:69:58
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 0196767A5B3EEB3C196980F09A9809C6F8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 0EA6
Signing time: Sun 27 Apr 2025 09:00:52 +0000
Manifest this update: Sun 27 Apr 2025 09:00:52 +0000
Manifest next update: Mon 28 Apr 2025 09:00:52 +0000
Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: 8VUFqKgsM80NTqiMamvClrX+2SphlpZbTVKM1i/fwzM=)
3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:5b:3e:eb:3c:19:69:80:f0:9a:98:09:c6:f8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Apr 27 09:00:52 2025 GMT
Not After : Apr 28 09:00:52 2025 GMT
Subject: CN=1361c597d0f51dece5da6dfd8dc65da2f89e6958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:a9:91:8e:cb:95:b7:57:0b:11:37:8e:9b:
79:76:70:b3:4e:c0:7c:42:d9:d3:d5:c2:a1:d5:43:
73:fb:8d:10:ef:63:bf:83:e8:48:b6:78:ba:79:33:
73:38:77:62:3b:00:17:4b:b7:3d:ee:f4:2c:15:26:
19:ff:ae:bf:aa:22:22:33:08:73:34:f4:38:96:93:
e1:54:44:4d:82:48:30:d3:46:9f:3f:5a:ce:04:d2:
94:46:df:0d:66:95:f6:ec:12:81:73:b8:95:42:c1:
59:c5:d3:59:d6:54:1b:77:e2:e7:0c:1c:df:2f:52:
29:6c:4e:19:56:e5:44:27:1c:df:ef:ee:4d:9a:92:
7c:fd:b4:e4:18:c0:e2:48:4c:0f:f7:50:49:6f:10:
a8:cf:ce:82:93:c3:d8:97:e3:0f:e0:e4:ee:f4:17:
17:79:11:c0:f3:92:ac:99:94:ea:a4:07:cf:d4:f6:
d5:f4:62:9c:b9:46:75:56:04:70:86:bc:8c:81:be:
a7:bb:c6:f7:b0:64:1e:45:d3:3e:eb:98:9a:ef:04:
9c:65:c4:06:ca:1d:ea:4e:90:bf:1e:43:c0:75:43:
87:87:c4:20:a3:d3:d8:60:b3:49:e2:20:62:50:b9:
f9:eb:98:e7:3e:ab:22:ff:34:cd:9b:50:b1:46:47:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:C5:97:D0:F5:1D:EC:E5:DA:6D:FD:8D:C6:5D:A2:F8:9E:69:58
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:23:6b:a7:25:ea:98:89:cc:30:7c:9b:63:bf:25:51:9f:96:
4f:18:ba:0d:7c:f1:3c:ef:b9:88:e6:ff:41:48:d8:11:7f:f6:
a3:aa:e6:da:b5:3f:11:26:84:7c:01:d9:5d:ef:d3:ef:ad:f2:
6d:8d:a5:f8:39:51:57:fc:66:44:b1:ee:16:2a:20:bc:fc:57:
23:c1:a4:78:82:57:ac:60:1a:a4:45:6b:21:be:d6:4a:8f:17:
3c:4f:0d:02:76:87:db:d8:29:6c:42:00:8c:fb:32:7f:fe:14:
8a:9b:c4:26:f1:ad:5f:44:cb:0f:fa:68:5a:57:72:a8:81:1f:
d0:45:20:b0:ec:a3:c4:7d:13:ce:05:11:24:5c:94:13:72:58:
9d:0e:d8:0f:bc:30:a4:1b:0f:e6:05:3e:f4:03:57:06:79:9f:
e2:96:42:cf:48:83:bc:7d:64:52:99:12:76:33:6e:6e:24:9d:
71:8e:66:4d:e6:6e:4d:48:6e:6b:35:f1:62:4e:02:bd:8d:81:
22:5f:cb:c3:e5:27:d9:cf:90:8b:bf:3a:d8:c8:f5:a1:ba:7c:
42:7c:bb:4b:15:2b:6d:83:08:91:ab:05:98:de:1a:e1:1d:3d:
f0:83:2c:01:cf:58:a2:28:35:e8:11:c9:68:52:be:02:05:59:
11:70:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:28:52 2025 by rpki-client