Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: VV67YsGjYEVvf/r29SSVQNYrVk6Y1MtCcrYB3H6ilzM=
Subject key identifier: E4:E3:6E:F0:E0:CD:75:22:76:3C:E4:75:90:2F:F0:07:85:21:20:63
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 0196A208DF04C83EE5F24C66DD36FB7B6259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 20:00:12 +0000
Manifest this update: Mon 05 May 2025 20:00:12 +0000
Manifest next update: Tue 06 May 2025 20:00:12 +0000
Files and hashes: 1: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: xYM4RLqT3qsSwzJnU9SUmtaVOMyHJJRn1U2B62lf8+E=)
2: lSVuH4_qT7VO0FFfSg8D4f45UxY.roa (hash: 9ZtD0p1FuMWX60A/XbYYtr6hffE/KiTmy0aXZ7EMf+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:df:04:c8:3e:e5:f2:4c:66:dd:36:fb:7b:62:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: May 5 20:00:12 2025 GMT
Not After : May 6 20:00:12 2025 GMT
Subject: CN=e4e36ef0e0cd7522763ce475902ff00785212063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:4b:82:de:d7:91:0b:af:62:fe:bd:be:ad:
fa:26:c9:84:df:a1:14:f3:3c:78:94:ed:f4:a5:6f:
f2:d4:bc:57:9c:68:c2:48:65:d6:00:df:73:c2:b5:
69:85:34:2e:c5:20:13:70:65:7d:97:70:50:5f:94:
86:56:84:6d:05:65:39:58:57:f8:2d:4c:2f:8d:ab:
2b:af:4f:83:0e:6b:66:86:9e:98:06:5a:bf:7c:46:
76:e7:64:88:3e:6d:7b:22:39:6f:12:dc:cb:66:e2:
27:65:97:0b:41:02:cf:2f:20:9d:d5:ea:c4:9c:36:
50:ad:4c:3c:4a:71:9f:b9:ba:55:a7:e9:0c:31:8e:
93:88:f9:c1:fd:b1:ed:9e:65:d9:fa:a2:d8:e3:80:
81:25:f4:97:5a:2d:28:12:4e:c9:8c:69:8b:ed:93:
a9:d8:c1:c8:30:e0:87:b2:af:35:05:cc:9e:1c:42:
b7:ca:66:5c:4c:01:e5:32:36:7c:28:27:b1:53:18:
90:65:0c:ac:1d:8d:78:7d:52:9f:8f:89:68:35:3b:
b5:f2:bd:eb:7d:37:f0:52:8c:f6:0e:2e:af:0f:1d:
39:f0:35:11:26:f2:84:49:2b:0c:7a:7b:c6:93:86:
06:67:e5:cf:a9:04:34:c9:9c:30:aa:8d:37:14:aa:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:6E:F0:E0:CD:75:22:76:3C:E4:75:90:2F:F0:07:85:21:20:63
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d6:ce:70:6c:22:d2:b0:e1:87:3e:96:43:72:3e:5a:70:ca:
c8:c3:06:1f:79:95:c0:45:d5:fd:83:21:af:28:8b:96:ad:30:
66:17:d6:d0:ac:66:69:27:a4:f6:8e:1c:62:43:fc:f5:97:26:
98:3c:c5:bc:87:e7:8f:7f:d4:6b:58:e7:31:e8:d7:6c:8e:dc:
90:5a:cf:62:09:7f:05:76:c4:3e:e1:05:c0:3a:d7:eb:13:f2:
78:b3:d7:74:79:3f:b7:9c:9b:76:18:49:a1:4c:53:1e:47:84:
28:81:e2:12:4a:16:16:92:ff:42:d5:d0:e8:8d:14:d8:30:58:
68:fe:f6:d7:bc:3a:5b:39:b8:6b:44:f6:13:df:3a:01:0f:83:
51:75:d9:d6:e0:e3:ed:40:51:da:d6:64:92:00:f7:50:36:8b:
48:79:cb:30:fb:28:3c:f6:97:50:d7:f8:ba:0a:da:c9:10:a1:
90:10:73:1e:4b:2d:d3:55:97:fc:79:78:c4:cb:c8:8c:c7:a3:
da:b2:fa:92:d0:40:96:f9:3e:a1:19:99:99:1d:a3:7f:d6:82:
ed:97:a6:bb:29:a0:4a:b2:2d:9a:e6:1a:05:3b:97:57:12:9f:
d2:18:47:84:7e:c6:6c:b5:b8:4b:24:0a:b1:e1:9d:25:f4:b8:
2e:7b:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:57:31 2025 by rpki-client