Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
File: SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json)
Hash identifier: V8HPam7mZ4kAWx5iMGTYdqWJAp1IFeFH/xQMlpZ5AQg=
Subject key identifier: 53:45:C4:B1:E6:EC:EC:E0:BB:B6:EF:B9:D5:5E:9C:79:23:92:D2:FC
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial: 01967DC6216A65ADB1875FED2AA0426B7374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 19:00:58 +0000
Manifest this update: Mon 28 Apr 2025 19:00:58 +0000
Manifest next update: Tue 29 Apr 2025 19:00:58 +0000
Files and hashes: 1: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: rAPkHf1t7tW0qh5B9m3W/X9xSm1LmBra+u/zyWuoCJ0=)
2: aCk5yRvbKuue3ENXzksiDKszHOM.roa (hash: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:21:6a:65:ad:b1:87:5f:ed:2a:a0:42:6b:73:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Validity
Not Before: Apr 28 19:00:58 2025 GMT
Not After : Apr 29 19:00:58 2025 GMT
Subject: CN=5345c4b1e6ecece0bbb6efb9d55e9c792392d2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:a5:32:07:fa:2d:75:e8:97:73:eb:52:78:
11:0e:71:cf:bf:0b:aa:9b:65:51:de:7b:01:6a:70:
ef:c9:7e:06:95:93:ef:79:8e:f6:ec:d0:15:68:44:
ee:bc:6a:8b:bf:80:b2:65:b7:bf:22:45:2c:1c:27:
f5:0f:d3:f6:04:c3:c8:93:fc:c8:04:50:1f:a5:23:
50:54:cb:9f:75:a4:87:08:82:c8:29:81:eb:4c:92:
8e:42:cf:2b:d4:9d:13:3e:dc:a5:dd:dd:f9:18:5a:
01:72:0f:e4:ad:0a:09:73:1a:0f:ea:14:89:f1:0e:
2e:7b:5d:97:85:7d:fe:f5:4b:bb:9e:19:0e:d4:60:
87:18:5d:8b:ac:7d:a5:86:46:20:2c:28:c6:14:0d:
12:a2:41:4c:80:df:7c:65:d8:f9:3c:4e:8c:61:35:
0d:c1:ca:0c:76:2c:70:82:45:c5:ce:46:85:e5:0e:
b5:95:b7:c2:47:3a:1f:4b:29:07:38:fe:91:86:9c:
44:cf:f4:54:ff:32:06:ed:99:f7:f1:03:73:e8:4d:
34:e7:bb:9d:5e:02:28:33:e7:36:0c:c2:8a:f6:69:
88:cd:4a:5c:b3:2c:98:5b:f9:ca:3d:cc:e8:ac:47:
e6:2c:d0:34:b1:03:76:ab:7e:b3:50:d8:dd:18:48:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:45:C4:B1:E6:EC:EC:E0:BB:B6:EF:B9:D5:5E:9C:79:23:92:D2:FC
X509v3 Authority Key Identifier:
keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:23:60:ba:18:b8:7f:5e:b3:18:2a:44:02:e4:90:7b:a3:c9:
8d:42:a1:70:6a:da:e1:5e:5b:25:eb:5e:ba:9d:27:8a:6d:e1:
68:3c:03:e5:55:5d:69:94:f6:94:21:ef:a7:62:2d:28:fc:7b:
92:09:65:16:55:aa:ee:d5:54:4e:7d:74:ba:e3:d6:9c:cd:68:
7b:73:fa:d3:c7:1b:86:98:b9:4f:b4:ba:ca:ea:de:7a:ac:40:
93:46:2c:75:13:c0:b7:8e:7a:ca:6f:08:a4:9d:ff:d2:52:d2:
d4:f5:b9:2d:d2:72:92:22:75:cc:e5:1a:7c:81:5b:8c:0b:f4:
a4:bb:52:29:d3:e5:a0:d4:1d:ee:ee:3a:1a:0f:ab:c2:ba:2c:
2a:cc:37:9e:5d:1e:64:66:9b:ab:f9:11:46:19:19:b3:0f:3c:
25:7d:66:65:66:0e:34:41:01:a4:d2:73:bf:04:79:f7:77:b5:
3a:34:5e:9f:52:97:e7:61:b8:de:52:09:65:0e:f7:3b:01:74:
e2:7f:97:38:21:ce:36:43:6b:78:67:9a:5b:67:36:da:22:fe:
de:af:81:d6:b8:0d:ea:37:71:ee:13:64:34:96:72:ba:35:86:
7d:19:02:a8:ec:3a:70:c3:fd:e9:c9:1a:61:3b:38:63:c6:e5:
8a:3d:dd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:10 2025 by rpki-client