Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: 6RDkA+LYArJ8MAJH+/UF0GxU7yYAsO5tRpnLU8ddopU=
Subject key identifier: 98:A2:EB:4A:D1:5E:BC:FE:0C:5F:21:D8:9C:CD:B2:4E:73:73:68:01
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 0196C83B3CFC37001AF35750CAC3DE69B0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0828
Signing time: Tue 13 May 2025 06:00:47 +0000
Manifest this update: Tue 13 May 2025 06:00:47 +0000
Manifest next update: Wed 14 May 2025 06:00:47 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: 9+w+7Bh4JEIUt80qpHIdl0QySc3DnAugNEeJnToS71w=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:3c:fc:37:00:1a:f3:57:50:ca:c3:de:69:b0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: May 13 06:00:47 2025 GMT
Not After : May 14 06:00:47 2025 GMT
Subject: CN=98a2eb4ad15ebcfe0c5f21d89ccdb24e73736801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:2b:2c:3c:06:22:77:f2:39:53:50:14:3e:
ad:dd:58:57:ea:dc:e9:99:58:bb:fa:2b:85:ad:c3:
aa:78:6f:88:df:45:d1:02:6f:40:29:05:f2:d4:d6:
84:ce:88:22:2a:22:6a:84:71:6c:7c:66:30:81:51:
92:c2:9d:73:4d:9d:cc:21:49:09:a7:74:bf:ed:ef:
45:ee:fa:07:85:b9:0f:8d:c7:a5:95:82:23:23:7e:
92:23:64:51:d3:eb:e6:e5:69:31:a1:44:cf:26:3b:
d7:c8:4f:74:51:75:8b:df:25:b1:f1:34:62:6e:a2:
5c:7f:30:2a:99:9c:5d:c8:09:2a:c5:71:39:8d:80:
e0:70:ea:af:04:e2:7d:f9:6c:f7:31:a7:66:78:04:
27:36:48:8d:55:6b:ae:af:34:5e:80:f2:99:10:f3:
82:39:b9:f2:04:1b:96:d3:41:c4:3d:0b:1f:98:9f:
12:a5:62:e5:ee:d7:00:39:d6:87:dd:0e:50:94:1d:
ac:89:60:2a:4b:e5:61:c7:a5:1c:49:d6:e4:c7:89:
b8:ab:fd:c0:15:8a:23:e2:72:0d:e5:0a:99:90:b4:
8a:bc:41:eb:e1:8e:6e:77:d6:29:b9:77:3b:7e:19:
f0:5e:de:1f:88:cd:03:2c:8b:09:34:03:39:c8:24:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:EB:4A:D1:5E:BC:FE:0C:5F:21:D8:9C:CD:B2:4E:73:73:68:01
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:89:76:d9:ea:82:c3:5f:8f:89:84:49:33:5f:7b:ae:9d:f1:
4f:68:fd:74:88:dc:fd:45:68:2e:b9:b5:1f:ff:28:36:a2:fd:
33:97:d1:4a:a3:02:0d:bd:04:d9:ff:2e:c8:39:9f:2c:0b:4f:
b9:74:1d:54:59:d9:ed:26:a1:c9:b4:6a:a8:3f:1c:ac:31:43:
50:7b:96:fc:1b:c4:00:f6:03:65:e5:47:27:03:4d:bd:5d:67:
51:2f:d0:78:a2:22:a1:00:4b:88:ed:a5:87:be:20:a4:ed:69:
ef:2a:da:95:39:1e:0c:fe:59:40:91:97:4c:3c:25:f4:92:ad:
75:58:64:a5:a9:20:44:b5:9b:62:49:27:9c:e5:83:37:85:4b:
6e:d7:ca:be:a4:2b:56:12:c8:bf:48:af:a2:35:29:f4:2e:8b:
c9:dc:74:54:86:c9:6e:91:f6:21:d0:f4:39:c9:46:f2:e7:e2:
d7:bd:56:e6:04:e1:91:a4:bc:ea:ed:80:12:ad:b4:ea:07:31:
d8:66:20:c9:a0:36:71:57:73:6c:91:f3:59:45:3b:80:a1:9c:
4a:b6:6c:3a:4c:d3:2d:56:cb:48:24:62:53:92:07:e7:9d:5a:
a7:62:0f:f4:0a:e9:5b:07:15:44:71:86:02:29:b6:40:d0:65:
84:2f:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:16:53 2025 by rpki-client