Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: 1ibI4BQGx2hwhHFOygHstPCd1M+pTlhltIufw0Y/lsI=
Subject key identifier: E7:3A:4F:BC:95:30:32:71:D2:78:FC:D4:37:F1:05:85:45:FA:7D:6A
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0196ADD6914DA14D9D2A729FAA3DFE74142D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0B8C
Signing time: Thu 08 May 2025 03:00:42 +0000
Manifest this update: Thu 08 May 2025 03:00:42 +0000
Manifest next update: Fri 09 May 2025 03:00:42 +0000
Files and hashes: 1: 49Fsu12Fj492gJ1KszGOf97nJnI.roa (hash: oKBHLdbt+fBL0mLzOJpTeuV/P3L3pNbkJdk4d/MuTbw=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: x13pspQFTc/b6SaVIdjBEjRsWuZPsZanDqUR5fvoqDc=)
3: nQWi6amR_qcuwksKUqZBYPI5MkQ.roa (hash: deAg4an+AFgHQs+zd8oYxOw/amzJmpB2JJ48YPqhCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:91:4d:a1:4d:9d:2a:72:9f:aa:3d:fe:74:14:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: May 8 03:00:42 2025 GMT
Not After : May 9 03:00:42 2025 GMT
Subject: CN=e73a4fbc95303271d278fcd437f1058545fa7d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:4e:01:8d:a8:66:94:f1:dd:4b:3e:60:e8:
3a:05:1f:f3:8b:1e:fe:7a:1a:3e:d5:5e:18:f2:8b:
cf:1e:cf:8c:f5:8a:79:5d:6d:ff:fa:61:c1:a0:94:
ba:6f:b0:aa:6f:5f:d6:41:ee:8a:73:65:24:f7:23:
a3:df:cf:95:9c:22:ec:b6:ca:ab:54:73:2e:c4:34:
ad:3b:1f:9c:db:b3:6c:28:bf:12:0c:81:b1:64:09:
04:60:ff:6c:3e:59:0d:dc:76:a8:c9:f5:b7:a6:75:
b7:b8:6a:80:3e:4d:76:c2:c5:0f:6b:22:8b:64:1f:
3c:7c:0d:6f:c0:8a:eb:53:4b:f0:4c:11:bc:ec:71:
21:f2:52:3c:3d:ba:54:34:61:e0:72:f0:21:e5:bd:
be:65:73:37:55:f5:ec:71:95:f3:cd:ce:e2:e1:78:
87:f5:c5:04:07:a4:6f:ea:f7:38:a5:ad:0b:c1:19:
64:6a:8e:4f:aa:6e:b0:71:30:5e:5e:16:4d:23:84:
8c:31:6b:32:00:56:7a:9b:61:17:ca:eb:66:4f:63:
b3:6e:27:72:55:e1:c6:fd:1f:77:f3:16:4c:71:4a:
fd:90:5d:a5:18:d7:b7:20:e2:f7:e7:3a:84:fe:69:
61:72:2a:16:95:ef:04:9d:7b:44:dd:63:04:be:ce:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:4F:BC:95:30:32:71:D2:78:FC:D4:37:F1:05:85:45:FA:7D:6A
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b2:66:b7:61:5f:1f:91:c3:ec:71:4d:4a:c0:0c:cb:dc:98:
9d:45:0f:7b:b5:31:f5:99:06:7a:bc:13:0c:51:88:ef:b7:8a:
42:29:fe:46:01:58:c4:28:28:23:a9:75:3f:fa:4e:64:6c:2f:
ed:c7:fc:1d:4e:a3:79:62:e0:03:e2:cb:ee:9f:da:ca:d7:08:
09:81:47:5a:0e:10:0f:b1:8b:cf:1a:82:24:e1:b5:0b:00:37:
0c:62:9d:ad:ff:b9:b2:31:34:eb:22:53:16:4b:0d:ae:1e:eb:
95:65:91:71:52:ed:a0:31:86:87:97:89:01:5c:09:ef:9d:53:
00:35:d5:c3:80:71:55:18:24:6e:b6:ed:4f:b8:cc:6e:38:d1:
9a:f5:02:5f:06:be:2f:69:cb:5c:f5:60:10:2a:1e:2d:0a:1a:
de:94:d1:1e:07:39:00:9b:8f:dc:cb:88:c7:cc:ee:1f:89:58:
b8:c5:9e:e6:a0:55:7d:e7:dd:33:77:ba:c8:39:7f:04:70:4c:
fd:53:6d:86:b1:3f:ed:77:e8:90:df:95:79:76:50:97:c7:91:
9d:4b:d7:d2:2e:2f:2d:37:43:0d:a7:73:26:60:d8:02:3d:2d:
d5:98:e2:6f:83:3d:54:6f:3e:36:4a:f5:d6:09:ee:80:c4:dd:
f6:bc:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:27:20 2025 by rpki-client