Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: 0PTtZlE/VQ1TbYO0038ONZfvaiYDK6J+QABghoLdPUs=
Subject key identifier: 8B:D8:82:CD:F9:62:7A:83:64:9C:D7:23:60:F6:7B:DF:9A:74:00:99
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 0196B7EC5B72FCBFC2495DF330A5C9271CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 02:00:42 +0000
Manifest this update: Sat 10 May 2025 02:00:42 +0000
Manifest next update: Sun 11 May 2025 02:00:42 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: xhuy7IbnTRWw0sG2q27885s8nTdq/bOFNRYF3y1SKmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:5b:72:fc:bf:c2:49:5d:f3:30:a5:c9:27:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: May 10 02:00:42 2025 GMT
Not After : May 11 02:00:42 2025 GMT
Subject: CN=8bd882cdf9627a83649cd72360f67bdf9a740099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:09:1e:c2:62:5d:b4:54:48:ca:e6:aa:c6:
b3:85:7c:58:ad:b0:e9:f5:98:4b:5d:c0:ba:c0:50:
37:e9:0f:0a:d9:e9:23:41:ae:22:5a:88:6a:83:a7:
c5:79:98:d8:90:92:d0:df:14:4b:51:81:a1:a1:4c:
78:f9:48:36:fb:eb:db:59:32:40:cf:d8:21:c1:f6:
0a:16:22:b9:bb:93:38:f7:b3:ee:d4:1b:9a:91:d4:
ab:7b:e1:f3:0d:fe:59:ae:34:8f:f4:a7:85:a4:63:
19:da:d6:a3:83:c8:93:49:d4:89:fa:29:c7:30:26:
14:67:37:19:8c:c6:eb:b9:b1:7e:07:8c:73:96:93:
61:39:ea:17:27:31:36:59:2c:b7:a7:3d:b5:05:f5:
25:a6:76:e3:54:f1:be:eb:10:dc:6d:df:cc:5b:30:
31:c9:42:ca:47:28:10:f3:49:ff:c0:d0:17:f3:82:
9b:2d:88:9c:a7:f9:08:03:1c:93:d6:f9:e8:c7:a3:
34:3b:47:79:d8:66:fe:5b:69:7f:e2:9d:0d:33:1e:
b0:37:11:49:bc:20:4f:3f:0f:6d:9a:29:dc:20:ca:
b6:f1:9a:c4:a6:eb:33:05:bb:3f:e0:26:eb:0c:72:
01:4d:68:26:df:e6:1d:35:da:41:c9:aa:34:96:a8:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:82:CD:F9:62:7A:83:64:9C:D7:23:60:F6:7B:DF:9A:74:00:99
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d6:ee:8c:4e:12:44:d5:09:40:fd:b8:e5:74:30:65:51:2c:
a4:c3:68:bc:5f:76:52:20:4d:69:b8:75:e0:fb:b3:ba:66:d4:
ba:8e:5f:24:f8:6d:76:88:c6:21:43:e6:05:13:58:0e:3b:2a:
ae:86:cb:19:6f:80:de:ff:d8:03:45:44:23:e1:af:b0:ff:bf:
e9:6e:10:05:cf:c9:12:6c:20:74:e2:88:15:c1:8b:fc:21:a5:
86:f5:75:06:dc:1d:67:07:eb:d8:53:66:97:74:cc:af:48:04:
2e:88:d9:69:89:f5:9c:11:57:2f:a1:46:63:00:70:c2:f3:00:
71:f9:c7:97:91:8e:e8:53:e8:86:f1:87:ec:89:6f:fa:5e:9e:
ee:84:8f:68:33:a9:a0:72:ff:00:98:1d:b1:07:66:6b:ed:1e:
0c:a7:83:ec:4c:84:02:9d:ac:1a:1f:b4:84:8a:2f:60:a5:7e:
5c:fb:68:30:f6:d8:1c:8a:4b:5c:72:7d:f8:dc:cc:d9:39:b7:
fb:43:05:6e:33:15:07:92:75:f7:e1:b5:f4:c8:1c:a3:82:3f:
19:ac:b9:10:4f:60:e8:88:70:3f:0c:5b:66:00:09:5c:fe:e3:
1a:a7:17:bc:76:a1:6b:cf:5d:0a:b5:ee:a2:0a:37:cf:32:d3:
34:8c:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:33:16 2025 by rpki-client