Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: 7FFBNIS9KoyzZDUVvgnD5AKVgzMRSKYBADrz868oErY=
Subject key identifier: 16:DF:45:FD:AE:D2:FB:5F:8B:B1:B5:7A:1F:31:8B:67:40:45:8D:F8
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 0196B2FC8DE0ACA608C0FFDFCD584343F40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 03:00:17 +0000
Manifest this update: Fri 09 May 2025 03:00:17 +0000
Manifest next update: Sat 10 May 2025 03:00:17 +0000
Files and hashes: 1: 6-IQUKyeOlnZ0n7k-mpTFfKu5nA.roa (hash: uwqOWT1eD0xXX0n+hN5F7B5Z9MhYA/dYHW/YSlQ6tT8=)
2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: ISMxdAk9tpAGrA4WJh4yVQ/IMiYWmucAVD3BJuFdg3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:8d:e0:ac:a6:08:c0:ff:df:cd:58:43:43:f4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: May 9 03:00:17 2025 GMT
Not After : May 10 03:00:17 2025 GMT
Subject: CN=16df45fdaed2fb5f8bb1b57a1f318b6740458df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:0e:1c:fa:08:b0:ca:61:76:09:c2:4e:c9:
84:d3:0f:1e:a9:dd:36:5f:34:3d:22:51:a0:25:b9:
7e:d7:e6:70:41:2d:b5:43:9c:0e:e3:c2:6e:4b:b5:
1c:a5:d3:d2:b0:1a:c7:ee:50:a6:87:a7:28:f8:07:
54:e1:a6:63:3d:08:73:83:92:77:6e:e3:e6:f1:70:
40:b6:53:46:4a:73:db:e5:80:e8:99:9b:e6:f1:21:
f3:97:79:30:7c:cd:d3:d6:4d:72:39:cf:d5:f8:23:
ea:20:af:8a:4c:5a:d6:71:b7:f7:83:b5:b7:85:fc:
86:80:ea:b9:9f:a4:47:b6:08:fb:c8:6d:b2:f6:90:
fc:8f:00:a7:12:cc:70:a3:e9:2e:ec:24:dc:1e:ad:
32:62:68:aa:e5:03:c7:4e:79:ed:c8:b5:a5:44:a7:
93:50:2a:2e:88:bf:7f:16:18:74:74:68:01:97:35:
6a:bd:39:32:8a:f7:a7:e8:88:b3:1f:61:5a:64:83:
37:96:1a:fd:4d:3d:56:3b:06:05:a0:2b:f0:b3:ef:
3a:cd:bb:c3:a9:08:e3:f6:2b:ba:68:7a:9c:28:e1:
4a:44:e4:51:40:fe:60:b8:24:a5:d0:8c:53:f6:81:
a6:6b:90:c6:2e:5b:b3:91:d4:2f:3d:2e:4e:32:c6:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DF:45:FD:AE:D2:FB:5F:8B:B1:B5:7A:1F:31:8B:67:40:45:8D:F8
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:62:3f:85:28:07:c6:99:2c:db:39:39:c7:00:f1:4c:a4:cb:
36:5e:c6:0a:37:2c:f9:4b:4a:6f:b7:13:c8:84:c3:f8:2e:55:
f3:50:82:2f:48:de:a0:2a:75:bd:6d:66:31:8d:d0:8e:a6:30:
3d:2b:66:0b:a7:22:de:c4:cc:57:cd:78:a4:83:58:77:51:f7:
0f:33:7b:8d:3d:3b:88:b1:3f:ab:4f:a6:f0:66:df:52:31:9d:
74:c6:d2:8b:ad:5c:1f:c7:5c:ca:d8:01:de:8f:75:a4:9c:4a:
8e:42:fb:98:d8:09:fc:25:d4:f0:84:5a:cc:bb:62:1d:6f:30:
77:89:3e:39:eb:f4:ec:f4:bc:70:35:b8:b2:52:39:6e:46:db:
2e:44:d2:90:b4:73:5f:25:94:87:a9:5a:c2:54:f4:d4:17:dc:
a4:6d:e4:e6:21:fe:84:06:48:5e:a0:e2:c0:2b:2f:51:fd:2b:
77:29:fe:af:14:cd:23:7c:ad:51:7b:9d:b6:d2:e0:96:ff:00:
0d:50:b1:33:5e:61:e5:ec:0e:7e:dc:3d:f2:f6:a6:3a:0d:8e:
03:26:bf:03:eb:93:17:a1:fc:d8:db:8b:82:d8:88:f2:d0:ac:
a0:c0:4c:88:55:76:3e:a9:80:3e:af:3d:af:93:69:25:3d:8a:
40:10:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:06:52 2025 by rpki-client