Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: YRrcS8Bm2Bv/4f7VOGd06YTrvXPuEtooDvyzNOUPTHg=
Subject key identifier: 15:84:CD:B3:C4:2B:A6:6D:16:31:FF:04:C2:6A:5A:D1:90:13:5B:7D
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019679E92916925E4A03B354E66E5C62D327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0575
Signing time: Mon 28 Apr 2025 01:00:45 +0000
Manifest this update: Mon 28 Apr 2025 01:00:45 +0000
Manifest next update: Tue 29 Apr 2025 01:00:45 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: pXal9grhwKt5Z6dvXVJkV09pJlkuoK98maoohZy3xNM=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:29:16:92:5e:4a:03:b3:54:e6:6e:5c:62:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Apr 28 01:00:45 2025 GMT
Not After : Apr 29 01:00:45 2025 GMT
Subject: CN=1584cdb3c42ba66d1631ff04c26a5ad190135b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:ef:d1:05:a8:3e:bf:ed:43:ea:3b:b2:2b:
3f:5c:7e:5d:0b:66:0a:9b:51:6b:24:54:09:30:38:
fb:5a:28:7f:0c:cb:4a:71:a2:2b:54:9a:65:9a:9e:
db:7d:2a:81:eb:be:9f:3c:1d:1f:5c:6b:81:75:0b:
82:33:32:9d:1d:f6:4a:d7:8c:0a:2b:33:ce:15:13:
60:35:f6:25:e4:4d:2c:66:7f:ed:9e:5c:34:44:66:
0d:63:7e:e9:3f:e4:7d:31:fc:92:f8:49:86:d4:6f:
f2:96:1c:8d:f7:df:2c:a0:f8:81:f8:19:08:66:d5:
35:b0:49:e6:ab:10:e8:6a:4c:e4:dd:0d:bf:82:eb:
2e:44:d7:40:fd:4a:f3:30:a5:ec:a2:e0:cf:50:4c:
42:ae:05:2a:da:23:56:1c:9e:a4:ee:be:20:6d:5d:
01:8a:37:eb:da:d3:bc:99:8d:78:51:1c:84:20:f3:
e2:66:79:8d:25:f7:59:9f:5b:43:b3:46:68:f5:c2:
1c:44:93:4b:9a:8f:05:70:b4:52:02:63:98:26:b8:
c4:ea:98:31:12:8e:b3:ba:4c:c1:f7:35:7f:58:c2:
38:49:21:3a:e8:02:9d:5c:54:20:f4:cd:7e:d1:3e:
ae:81:3a:9a:c5:10:17:be:bc:1a:fc:0e:99:d2:5f:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:84:CD:B3:C4:2B:A6:6D:16:31:FF:04:C2:6A:5A:D1:90:13:5B:7D
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bc:d5:e1:5f:5e:7c:23:6d:67:a0:b8:17:09:ef:22:63:ed:
f3:89:1c:f3:ca:2b:26:76:16:96:4d:3d:9f:93:ce:fc:cb:ab:
a0:35:4a:03:b7:55:bd:1e:95:9b:d0:fb:97:68:67:aa:f8:66:
83:d4:b7:86:c7:3f:c3:cc:8a:20:2a:46:ce:97:63:c9:cd:ad:
84:53:30:f9:d7:d7:93:b9:60:18:44:fb:67:ee:20:5e:88:e8:
06:ef:e3:46:97:b8:23:3a:69:d5:14:d5:53:6e:23:fc:17:e0:
68:e6:08:bb:31:20:20:a9:92:d4:31:8f:88:d8:3f:3a:6f:17:
8d:9d:91:20:0f:92:20:a6:88:75:f1:38:27:9d:ce:2c:b8:b0:
bd:65:a4:8a:3f:6b:d9:79:8a:ae:89:5c:b4:4c:cc:25:77:ef:
bb:05:d9:40:3c:d2:89:bd:96:ac:e8:42:78:df:f4:23:ca:17:
9a:83:30:8c:e3:c7:35:5d:a0:b0:46:1e:c2:cc:85:a2:d3:63:
ad:da:15:41:58:90:18:2c:17:e1:a9:90:95:87:45:f8:6d:89:
ed:6a:e7:dc:ad:e0:f8:86:dd:cc:43:75:94:b3:e9:40:b4:f4:
ba:54:52:78:df:73:cd:4f:d1:a3:7b:b2:52:b9:91:25:c4:0f:
82:31:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:12 2025 by rpki-client