Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier: MxVr7rnUIA40foenfWOf70kg5fO1wJ7nzJRFlVa6Lnw=
Subject key identifier: D3:8C:8B:B0:AD:ED:DA:00:90:21:57:04:3C:F4:E0:38:9B:73:00:83
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 0196B258DEA10E8A86536A485CF702CE1E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number: 1286
Signing time: Fri 09 May 2025 00:01:30 +0000
Manifest this update: Fri 09 May 2025 00:01:30 +0000
Manifest next update: Sat 10 May 2025 00:01:30 +0000
Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: dvQM9+2lgMWTkSSSViojEMV3HvlKoKgH0MCoUwlk1qQ=)
2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:de:a1:0e:8a:86:53:6a:48:5c:f7:02:ce:1e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: May 9 00:01:30 2025 GMT
Not After : May 10 00:01:30 2025 GMT
Subject: CN=d38c8bb0adedda00902157043cf4e0389b730083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:27:0e:8f:c2:4b:b8:81:bd:ad:b5:5b:bf:
3c:ca:79:3b:63:69:d5:b3:dd:24:b1:b1:ac:f5:29:
69:45:af:be:78:9b:69:41:36:f9:47:73:ad:09:1e:
0a:76:28:6f:c4:b8:71:b5:0a:80:4f:f5:80:57:ba:
bd:5f:e0:8d:0d:7f:84:60:6f:dc:48:c6:3b:f8:e9:
ad:23:2d:a0:b7:5e:45:a2:bc:a5:98:5b:f9:0b:78:
2c:47:cd:cb:9e:39:b3:39:48:73:78:63:6a:a3:5c:
b1:5b:08:3e:84:e4:59:f6:17:89:8b:e6:8f:d2:f0:
54:d9:72:3f:19:5c:ca:a7:83:15:6c:72:5b:c3:5a:
a2:88:f6:96:6b:d1:61:82:d1:92:64:f7:a3:7a:4d:
c5:5a:c1:9a:80:46:d7:1f:28:56:2c:59:f6:dd:9f:
79:8a:d1:78:bd:50:7a:42:b1:59:57:60:45:90:37:
2a:6b:5b:4f:50:a0:16:04:b5:3c:35:e1:6e:c5:e3:
eb:df:8a:50:3d:51:d8:36:f5:33:4f:34:3c:79:28:
5f:a8:41:45:85:c8:85:7e:f0:47:89:08:48:63:64:
e4:28:1a:81:e0:b3:35:f6:69:12:82:23:51:8f:6b:
cc:1b:49:92:3c:89:01:6a:50:4e:8a:22:7f:ac:a0:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:8B:B0:AD:ED:DA:00:90:21:57:04:3C:F4:E0:38:9B:73:00:83
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4e:58:43:e0:aa:dd:bc:1a:e3:f0:ce:6d:ac:44:c6:37:83:
38:50:dc:36:50:bb:14:18:ef:be:1e:55:6f:3b:72:1c:36:1a:
20:5f:f5:48:e1:16:ae:22:af:37:ff:9d:bd:fe:89:dd:3b:cd:
4c:4e:ae:e7:70:2f:13:55:dc:84:51:19:9d:11:4b:40:35:79:
c1:2e:30:c8:a2:50:ab:af:23:70:e3:6d:2e:c8:04:73:6e:00:
a7:d8:20:e6:66:1d:5d:27:5f:e4:fa:ce:8a:04:f8:1b:62:ab:
cd:0b:8c:59:69:d2:d5:f2:61:cf:2a:e6:5d:ef:34:10:8a:5c:
a1:63:8d:e5:28:16:69:fb:45:89:c9:ca:32:86:9f:13:31:d4:
72:74:86:dc:58:63:aa:80:fd:cc:81:6e:28:82:95:cc:95:15:
c9:8f:b4:de:54:d6:bc:09:6f:ae:0e:36:b8:d1:2c:e8:0e:db:
97:13:46:75:48:9f:26:e1:47:d3:79:ac:66:de:ca:0d:9b:61:
c0:a2:03:32:86:21:a8:53:f9:5c:53:e6:3a:d8:eb:f1:02:1e:
98:6a:00:3f:d8:50:09:ad:1f:e1:4f:11:2a:f1:0a:c9:b6:cc:
93:06:6b:0c:b4:4a:a6:41:50:f1:fe:26:08:d6:9f:44:06:9c:
c1:ea:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:01:09 2025 by rpki-client