Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File: sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier: mMYxuu9r/aHWgGKL0ADaJhvPPi1H/xb+fJtYKerBKVo=
Subject key identifier: 01:E8:72:EA:72:60:66:E4:67:5C:9D:7F:E8:D5:AF:2D:E3:32:3C:C3
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer: /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial: 0196794432559549EFCA140A6939EA6C8B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number: 034B
Signing time: Sun 27 Apr 2025 22:00:34 +0000
Manifest this update: Sun 27 Apr 2025 22:00:34 +0000
Manifest next update: Mon 28 Apr 2025 22:00:34 +0000
Files and hashes: 1: RLYBpjQJ_nWnvtQxzs5jpfZ53LI.roa (hash: WydSL9s2ghSAkXvNPUv+LZJE2s3aihvIV2UvrS6hIBw=)
2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: IiPMFeNiI0t2SE1WIGSLE07JcRg/8gxqq0IPBXP1mxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:32:55:95:49:ef:ca:14:0a:69:39:ea:6c:8b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Validity
Not Before: Apr 27 22:00:34 2025 GMT
Not After : Apr 28 22:00:34 2025 GMT
Subject: CN=01e872ea726066e4675c9d7fe8d5af2de3323cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:31:3a:d3:60:6b:4d:d6:c6:46:29:97:f2:
f7:24:7a:ac:db:bd:07:5c:a7:41:2f:5d:c2:03:85:
2a:87:be:56:33:90:10:0e:03:65:4f:de:ea:66:64:
f2:81:87:31:a1:de:3f:29:e6:0c:a9:07:5e:37:1e:
a8:0f:06:04:8b:11:79:4f:2c:34:ad:74:f5:7b:f6:
1f:0d:e5:c1:51:c6:65:fd:45:6a:64:49:f7:f1:75:
09:8a:5e:06:14:28:a2:31:3b:cf:f5:c7:7a:a9:71:
19:80:a1:14:f7:58:d5:50:44:dd:f9:16:37:f8:fc:
45:46:ff:3f:10:5a:97:64:83:69:d3:2b:74:f1:7e:
39:57:15:b9:fd:0f:49:5c:ec:7c:11:46:5c:5a:73:
f7:20:71:33:c7:09:fd:bf:1b:37:59:d6:b2:8f:5e:
d9:7b:7d:ef:cd:cb:d8:5a:92:e4:28:c6:68:05:36:
66:56:3b:96:3a:95:d1:b6:5d:e3:ab:01:31:88:20:
5f:f5:31:00:c8:08:3d:ca:0b:50:8b:fd:60:9b:43:
df:12:ec:36:06:d2:cb:67:b1:18:5d:f6:57:ab:93:
bf:b3:40:f6:ae:24:9b:8a:dd:02:e6:1f:50:27:f1:
75:83:4c:b7:76:3a:50:bf:31:2d:2e:13:a1:d2:01:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:72:EA:72:60:66:E4:67:5C:9D:7F:E8:D5:AF:2D:E3:32:3C:C3
X509v3 Authority Key Identifier:
keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:54:fe:6c:dd:f7:26:0a:e9:55:3c:97:d4:aa:a1:26:eb:5c:
4b:38:f3:9a:b2:a2:ff:f5:72:9d:e3:e1:8f:48:b2:c2:35:99:
29:b3:00:ae:a9:3b:d7:37:b3:ea:bf:6d:8d:1a:82:19:cd:83:
03:5d:52:27:93:f9:f7:45:61:e1:a4:06:76:3b:6c:08:d1:0f:
1e:1e:2f:30:30:e5:31:ed:5b:e5:66:d3:0e:ab:a8:14:2f:78:
90:16:67:f0:05:1e:ed:85:6d:de:76:d4:13:47:c3:46:80:d2:
0e:9a:4d:c3:2c:9e:7b:93:38:f7:56:d7:b0:65:ad:52:06:4a:
8d:92:c8:96:61:73:13:64:10:95:e4:a0:23:df:63:b2:7d:e6:
6b:10:93:bd:17:bc:2f:25:fa:4c:cf:ed:64:18:56:c7:86:d7:
c8:0c:01:86:19:b1:97:fc:17:d5:a7:aa:50:ff:f2:03:7c:ab:
e3:b4:41:6c:82:cd:8b:ea:f0:7f:1e:41:54:57:5a:97:9b:4b:
0e:5e:af:ef:ef:cc:09:45:3a:a2:53:67:41:77:a2:0a:f8:df:
d1:f3:da:a5:c0:8c:81:26:cb:38:3b:fe:82:20:59:8f:3e:d0:
91:2b:49:2f:29:63:bc:fe:18:7e:e2:51:50:c3:4e:89:78:ab:
1c:86:d9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:44 2025 by rpki-client