Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: +LXiQkfLyBjTinIj1KwNQMmhpHpNpvr05U8bls7CgtQ=
Subject key identifier: D0:F9:A0:1D:82:14:C6:A7:C3:66:FF:59:58:F8:CD:C5:EF:1D:B3:4B
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 0196C64C68CF8ADB63A54110A12E005ABC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 14CB
Signing time: Mon 12 May 2025 21:00:18 +0000
Manifest this update: Mon 12 May 2025 21:00:18 +0000
Manifest next update: Tue 13 May 2025 21:00:18 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: KUbfNSDbdIqvyrMkO+EWoU6XDSYLr4gUOgjY0gt71qI=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:68:cf:8a:db:63:a5:41:10:a1:2e:00:5a:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: May 12 21:00:18 2025 GMT
Not After : May 13 21:00:18 2025 GMT
Subject: CN=d0f9a01d8214c6a7c366ff5958f8cdc5ef1db34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:88:55:6f:c5:cf:2d:29:27:a4:47:07:42:
10:f3:fd:70:dc:57:5c:79:55:a2:52:8c:48:19:e8:
51:36:b3:4c:e2:d8:eb:ce:8b:36:1e:7b:1b:ba:18:
ed:2f:6c:9d:ab:92:92:5f:8e:1a:bb:13:40:e2:c5:
73:bc:ae:04:e5:0c:cb:f4:9f:3f:37:b4:34:91:2a:
5a:e0:6d:a7:7b:bc:83:c1:62:b8:6b:50:f4:c0:ac:
d7:87:f7:01:59:f9:de:5d:fd:55:30:8e:44:a7:c5:
a4:3a:4b:4b:db:d5:ec:3f:cd:0f:60:39:db:fc:24:
38:f6:fa:f3:cf:e0:3b:39:5b:61:5b:f2:ae:ac:53:
bb:dc:bd:8c:ea:d4:5b:b9:9d:35:65:16:7d:e8:95:
ff:2e:24:b7:d5:7d:13:bb:6a:c8:1f:5e:3b:f1:e3:
4e:ad:74:d9:0f:15:18:80:38:fe:eb:04:66:5e:89:
37:b5:3a:aa:96:53:cf:c3:01:3b:ff:7c:d6:d7:1b:
03:ee:15:58:94:25:29:5c:06:4b:06:0d:e1:14:ae:
26:fe:c8:dd:aa:0f:2a:fe:5c:3b:0e:a4:8a:7d:52:
a2:f7:38:8b:6f:fe:9c:2e:61:f3:fd:02:e3:c6:85:
cc:9a:5d:f2:9c:94:71:7f:f4:c2:1b:8c:9f:76:1e:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:A0:1D:82:14:C6:A7:C3:66:FF:59:58:F8:CD:C5:EF:1D:B3:4B
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:81:b6:fd:96:0a:7c:48:52:4e:a1:c5:68:36:f0:b0:29:8b:
0e:34:af:fd:09:fb:82:27:d4:24:e5:00:3a:2d:ef:40:84:d3:
7d:2f:15:ee:42:59:07:e7:cb:c9:62:a7:eb:69:f5:85:ae:8a:
74:da:15:48:25:f1:68:04:f0:39:ea:c2:76:0c:90:38:44:82:
10:e1:0e:19:12:15:41:2b:b2:cc:5b:9c:88:af:19:d4:9f:3f:
99:98:1a:79:60:ed:1d:6a:6d:4c:43:56:5b:f0:41:dc:1d:c7:
f0:d9:12:8d:b0:31:cc:2f:24:1c:1e:41:c2:fe:72:5f:d6:d7:
10:f6:d7:50:d8:2f:24:b8:5a:a5:52:6b:7d:79:18:9e:af:c9:
12:c6:7f:da:36:ca:c9:2e:f2:cf:e0:6d:72:59:2b:25:5b:e0:
e9:5c:82:22:83:f6:8a:54:9a:e7:3b:33:e9:48:65:53:03:2b:
56:29:a8:ac:4d:da:f8:5d:0f:2b:a8:46:a1:ef:bc:51:f2:08:
07:e3:5e:e4:a9:0e:9a:96:27:27:af:86:37:97:8f:9f:47:c7:
94:be:55:c6:43:66:43:38:06:45:af:e2:ba:fe:cf:27:58:2b:
80:98:db:5b:61:83:90:9d:e8:87:cf:de:ce:87:cf:65:d6:5f:
ec:fb:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:36:31 2025 by rpki-client