Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: KQfCGHAt7EZVpI9eHs/WzVTVMd2zkEjyNLN7a1fIg+c=
Subject key identifier: 87:61:00:AF:2C:BB:0A:17:AC:48:FE:1B:61:DF:1D:CF:2A:63:1D:7E
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 0196B33398E3DF4A5B9B2CC68089DB1588AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0C15
Signing time: Fri 09 May 2025 04:00:25 +0000
Manifest this update: Fri 09 May 2025 04:00:25 +0000
Manifest next update: Sat 10 May 2025 04:00:25 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: rKkFnPa+EeAx2AYBSaRX/92zBjoZcstrI0e5QXGUrGg=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:98:e3:df:4a:5b:9b:2c:c6:80:89:db:15:88:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: May 9 04:00:25 2025 GMT
Not After : May 10 04:00:25 2025 GMT
Subject: CN=876100af2cbb0a17ac48fe1b61df1dcf2a631d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:24:91:51:f9:11:7a:14:0c:af:f4:f4:6f:
66:b3:cf:40:fc:3a:ef:0b:c7:d7:90:96:07:5a:ce:
b3:da:f2:0f:67:67:f8:85:8a:59:72:ea:ad:4d:ff:
52:a9:3a:aa:c7:34:47:e6:ff:9d:4f:31:1f:7e:52:
44:35:9d:22:c6:89:b5:90:87:9e:45:ef:bb:17:3b:
ad:e4:00:84:73:53:22:d9:82:a9:ed:af:61:51:4e:
b8:11:a6:a4:a1:e9:0f:02:ff:81:60:c8:16:d3:e2:
e1:b9:91:7d:d9:40:8d:18:46:d2:4b:3e:85:b5:5b:
ac:23:fb:61:e2:45:07:7f:37:97:36:04:68:a9:c0:
bd:a3:52:79:51:09:44:fe:24:fc:ec:55:59:be:7c:
e6:e4:19:76:88:d7:66:94:19:ce:26:6b:c3:28:2b:
58:81:e2:ea:13:48:b2:9e:f3:a2:5c:68:69:95:76:
ca:bd:ab:0f:9f:d3:71:6e:90:0c:b8:ea:cc:97:c7:
fd:39:0b:fe:32:29:79:e7:08:b1:68:bb:ac:c4:39:
d7:5c:2d:a1:c4:43:77:b8:5d:2d:1b:44:b3:49:02:
9b:82:56:a3:62:80:5e:69:f8:58:1f:25:66:d3:c1:
05:ce:d3:84:ba:ed:7e:7f:cd:e5:1e:bc:1c:d5:ca:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:00:AF:2C:BB:0A:17:AC:48:FE:1B:61:DF:1D:CF:2A:63:1D:7E
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b5:1c:af:e1:2d:0b:56:a3:10:cc:1f:10:0b:76:7b:f4:ad:
f7:78:ea:8e:3f:35:08:94:2a:66:c2:8b:62:1c:05:38:a2:50:
7c:5e:68:d5:0f:19:c3:6e:5f:84:f2:9f:82:aa:ae:01:c4:20:
34:0a:2c:6c:a0:ed:55:d5:d8:5b:64:4d:ad:f8:5e:7f:f5:53:
57:a1:2c:71:57:7c:0a:ee:11:18:76:4e:b2:b4:c5:bc:51:f1:
f0:c0:55:a5:e6:c5:3f:58:ba:7a:12:4d:63:3a:b3:e0:bd:51:
8f:d8:58:df:96:e2:d6:cf:32:ed:bd:67:3f:43:7a:30:a6:9d:
21:cd:e3:3c:4c:29:87:e8:a6:f5:55:c1:e4:1a:7f:9c:81:22:
1b:0e:64:c3:91:92:a2:cc:7b:fd:1f:f2:b7:18:3e:7b:7b:a5:
be:75:e4:d7:af:d7:76:94:50:9c:0d:3b:af:89:d5:ba:ec:f2:
60:5b:50:06:fa:23:b5:55:e3:76:ca:77:d9:6f:7e:48:38:01:
92:00:75:3e:4f:af:c8:15:fb:9c:de:73:d1:51:9a:7b:18:8e:
4a:20:d4:c1:7c:97:7b:41:b0:d0:48:59:04:18:4a:4c:1a:a4:
ed:8f:39:a5:47:f9:21:3c:98:81:7f:11:83:c5:f9:1a:34:a5:
f0:c2:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:44:15 2025 by rpki-client