Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: ugz9SC/wE+Br6JJIOGonpu6yjmnE7c1LHvipFuFtY68=
Subject key identifier: 4B:85:D2:FD:88:86:AA:D3:FC:62:A3:E7:9F:A0:E2:4D:CA:F3:4D:AF
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0196B8FEEC1256F57F5E55910DD16527C514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 153D
Signing time: Sat 10 May 2025 07:00:36 +0000
Manifest this update: Sat 10 May 2025 07:00:36 +0000
Manifest next update: Sun 11 May 2025 07:00:36 +0000
Files and hashes: 1: ANPP4Ri3K1e-3EB_llD87ewAVpI.roa (hash: BqjlpSKTmEfFLg6w0nu9ozK/+m//fsc6fhYWNto/nfI=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: EhNFC/+j4/lhbT67WtBihQzKd8k9dPxA7mqcdUq0nDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:ec:12:56:f5:7f:5e:55:91:0d:d1:65:27:c5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: May 10 07:00:36 2025 GMT
Not After : May 11 07:00:36 2025 GMT
Subject: CN=4b85d2fd8886aad3fc62a3e79fa0e24dcaf34daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:5d:0c:8d:ba:74:b0:7d:3d:39:c6:43:b4:
e1:64:16:fe:c9:b1:13:b5:fe:da:e4:df:e4:bd:47:
af:de:d2:09:26:59:aa:07:8c:2a:2a:55:39:52:17:
83:5b:c6:ec:6e:4e:bb:d1:31:0e:64:46:1e:ab:b0:
2e:9a:cb:0d:bc:04:f4:3f:b2:dd:12:8a:b1:e4:c9:
b3:bf:d7:6d:59:21:b7:1b:c8:c2:df:44:93:de:1a:
34:29:71:7b:44:39:2b:c9:2f:e0:4c:f7:e9:bd:8c:
2f:c9:a4:a6:d4:c0:8d:c6:a5:40:44:0b:14:dc:26:
08:a6:b2:72:31:ac:a1:54:ab:27:1f:26:1c:38:b1:
5e:b9:7f:dc:02:de:d1:4a:56:01:f9:6c:ea:ac:bb:
30:84:b3:bf:cc:fa:55:8b:4a:43:06:29:4b:78:d4:
02:a5:dd:06:ea:a5:fe:04:c0:e6:83:e8:c7:49:03:
3c:6d:5d:dc:6a:98:f5:d6:d5:4a:5f:23:19:6c:7e:
16:bb:21:bb:02:c3:fd:59:ef:e3:f0:4a:d5:5e:05:
f9:f0:dd:7f:93:0b:e0:9f:6f:88:ad:1e:6e:a5:87:
b5:68:7d:c8:cf:6f:7a:7b:00:07:af:39:aa:a4:78:
c9:38:89:fd:29:04:b7:4d:52:45:b1:56:ed:ed:9c:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:D2:FD:88:86:AA:D3:FC:62:A3:E7:9F:A0:E2:4D:CA:F3:4D:AF
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:29:41:42:b3:95:5c:eb:72:7b:1d:5c:d7:8b:a1:b6:9f:7a:
db:95:b9:4c:38:e3:e6:97:30:7f:02:12:8d:9d:85:a8:14:b9:
17:96:53:18:60:f2:37:be:a5:c2:8e:9e:d4:42:bc:e8:75:bf:
75:44:20:15:c1:82:87:f3:f2:71:ab:7a:af:81:cd:4b:ae:e0:
a7:30:0e:38:d9:5d:ef:5d:b8:c6:30:37:a5:ed:90:dc:69:39:
25:ed:76:f0:0e:1d:bf:cd:ce:c8:35:39:80:da:92:4c:4c:ae:
74:9b:c4:d3:2c:0e:b3:5a:58:8b:05:5a:13:94:72:60:ea:8d:
d4:0e:77:45:8e:97:8a:f7:bd:4e:a6:aa:6d:e2:27:b5:fe:58:
8f:22:ac:11:a0:5b:bd:4a:a1:9b:35:4e:a2:50:5b:1d:cd:c0:
bf:9f:2b:8b:50:40:77:76:51:74:32:9a:f3:6c:3e:2c:13:83:
5a:bb:4a:a9:76:66:0b:25:71:02:86:52:51:aa:d4:59:40:c3:
cc:69:22:d9:70:c6:52:b3:aa:1f:f4:4f:cd:b3:31:f9:8c:da:
96:26:bb:26:42:76:88:32:72:82:01:0f:b2:f9:c8:16:ea:b3:
52:36:f9:32:08:34:47:cc:06:38:f1:4f:bc:b8:0c:f8:40:f1:
99:d5:0b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:54:34 2025 by rpki-client