Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: XI5o0PueU7Wf9+UopZL80yHX9LVb3d8T6hlabXSyUVA=
Subject key identifier: B3:75:03:CB:05:3F:C9:EF:61:B5:70:6D:22:AE:08:E5:77:40:3F:90
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01967A8DA73CA64D19219C3E6EB13E4CA010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 1003
Signing time: Mon 28 Apr 2025 04:00:25 +0000
Manifest this update: Mon 28 Apr 2025 04:00:25 +0000
Manifest next update: Tue 29 Apr 2025 04:00:25 +0000
Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: RHE3Ig8cGzb7fMRsZ6pArJieRGYsfv/9Fd0qnVAg5j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:a7:3c:a6:4d:19:21:9c:3e:6e:b1:3e:4c:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Apr 28 04:00:25 2025 GMT
Not After : Apr 29 04:00:25 2025 GMT
Subject: CN=b37503cb053fc9ef61b5706d22ae08e577403f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:b8:aa:5b:04:21:50:51:d8:ff:88:27:20:
b3:58:3a:88:f5:bb:29:dc:17:15:f1:16:88:2a:1d:
fe:ab:06:2d:f3:14:92:74:9c:fa:ec:8c:32:c0:a4:
23:5b:c6:02:c9:55:29:66:97:e4:2d:a5:7a:eb:82:
72:a0:75:d4:17:3c:5a:e6:09:3e:f0:a5:fc:18:5f:
bd:5f:4a:1d:b4:e8:97:4b:9c:50:3d:2d:80:ea:d7:
9f:2e:6e:53:5a:de:30:64:3f:6c:36:a0:0b:47:2b:
f0:6f:24:9c:fe:b3:38:63:90:ed:79:2d:75:9a:8d:
e7:42:1f:c0:b7:d9:10:75:00:b0:f9:9b:cc:77:46:
82:92:0c:2c:11:4d:a4:3a:f7:15:c7:d7:9f:94:cf:
de:9f:1b:42:8b:08:8d:7d:ac:e7:3b:c2:45:72:6b:
35:54:65:ea:bd:f8:90:99:b3:17:2f:a3:9f:d5:ec:
2b:45:8f:f8:62:53:9b:e0:78:22:ec:9f:89:11:e7:
66:70:05:68:19:bd:5b:61:30:9a:3e:3b:7f:e5:e3:
b7:aa:40:e6:d3:43:fd:5c:a2:4e:4e:89:79:cf:09:
52:15:b0:bc:ae:e8:cf:7c:aa:5f:6a:1e:16:bd:14:
36:47:45:8c:dc:36:db:d9:c6:98:94:1a:fe:81:c3:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:03:CB:05:3F:C9:EF:61:B5:70:6D:22:AE:08:E5:77:40:3F:90
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0c:53:c9:0b:ef:e4:e8:9a:bb:e5:55:a9:ab:15:f8:5f:3f:
df:59:1b:c5:e1:90:df:b4:53:1f:5e:cb:2e:25:23:b0:fc:51:
cf:ae:22:b9:f1:f6:fe:68:48:d7:fc:1c:e4:e3:42:c2:37:f9:
fc:c5:c5:46:b2:1f:e3:ee:98:f9:ec:b2:90:08:1f:82:5e:1b:
fa:29:28:0c:5a:16:10:d8:b7:b7:19:bb:0f:1a:12:7f:db:e4:
7b:53:87:e8:c8:06:b8:27:d6:21:8d:1c:85:21:89:4e:8c:ad:
fa:19:b9:c9:8d:7c:3d:18:2c:87:b5:b3:05:d0:e1:29:fb:8e:
4b:df:2d:df:a0:ea:39:58:ac:24:da:5b:86:67:51:da:1d:cf:
f3:cf:ee:81:8c:6f:31:0f:e9:c8:a2:31:9e:2f:50:0b:fa:dd:
80:7a:cb:b3:f9:63:f6:27:26:54:8e:01:ef:75:1d:14:4a:41:
de:85:6c:c9:db:6d:79:8f:31:6c:d2:64:5b:5c:d4:a1:18:c1:
30:c3:90:e1:ac:4f:0f:71:87:cb:c6:92:19:68:b1:cd:a1:df:
68:06:fa:e5:35:79:95:4f:3b:e4:8e:9c:c5:53:30:16:88:29:
c2:dc:fc:11:fa:3e:5b:81:7e:04:89:6b:e7:1f:0b:72:d6:42:
d2:1f:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:32 2025 by rpki-client