Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: QqNbR/RJIIIDRJ5IYzCMWCGNhCTtwxxTfwXenp8ce0g=
Subject key identifier: 21:0C:3E:83:68:29:06:75:A4:C1:F8:4E:63:6E:6B:71:A4:85:C6:06
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 0196C238ED4CB582E64B52C68D38287A360B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0C31
Signing time: Mon 12 May 2025 02:00:32 +0000
Manifest this update: Mon 12 May 2025 02:00:32 +0000
Manifest next update: Tue 13 May 2025 02:00:32 +0000
Files and hashes: 1: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: TSWqoNjllb1WBoyxf0DYxx1yhN3V90GN9r3q1JN4GkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:ed:4c:b5:82:e6:4b:52:c6:8d:38:28:7a:36:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: May 12 02:00:32 2025 GMT
Not After : May 13 02:00:32 2025 GMT
Subject: CN=210c3e8368290675a4c1f84e636e6b71a485c606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:45:27:d0:2a:95:07:03:cf:de:06:cf:e9:
e4:43:67:c1:8e:b0:73:ab:c5:f0:27:8f:d3:4a:73:
24:9b:a8:fd:15:cc:2b:56:8b:21:1f:fe:53:9d:b0:
d7:27:4d:eb:bf:7f:a8:68:97:86:5c:61:72:79:6b:
de:75:a7:d6:1a:13:74:d6:00:27:4e:ca:87:e9:ff:
6e:03:40:39:72:e2:01:e8:cc:d1:f5:0d:34:35:6e:
23:fe:7b:32:54:88:dd:9b:fd:dc:86:50:69:96:90:
f4:c5:4e:1d:b9:74:12:18:79:8f:67:58:41:3f:56:
14:a3:df:c7:d3:6a:b9:99:17:22:de:fc:8b:cc:a3:
f2:86:3e:65:da:72:ac:a4:8c:56:16:c1:d4:10:f3:
ad:12:9e:9b:ac:3f:de:db:23:38:2b:ff:1f:47:0d:
5e:f4:43:11:53:d7:3a:22:8b:1f:ec:ab:4d:eb:9d:
29:99:5b:dd:93:0d:51:3b:08:0e:48:3b:c1:59:e3:
fe:f4:5a:89:4e:ad:59:3e:d0:43:27:6b:93:83:3a:
b8:65:e9:37:1f:f2:82:f5:51:3d:ac:f5:ea:c1:48:
0a:8e:5e:09:f6:bc:32:0b:a1:65:6d:9c:4b:07:ce:
38:51:e6:fd:72:39:d2:96:ef:32:86:fb:96:3d:2d:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:3E:83:68:29:06:75:A4:C1:F8:4E:63:6E:6B:71:A4:85:C6:06
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4d:8a:8e:15:d2:99:cb:91:33:61:78:aa:7c:b2:88:a6:cf:
2b:af:5d:39:1c:b5:0e:cd:1e:9b:15:9b:5a:b6:23:8f:c5:50:
38:f0:bd:ed:27:09:d8:ed:fb:da:e9:f1:92:d2:ab:9d:48:ac:
d3:b4:c6:11:90:9c:f5:c8:7f:c9:01:9a:06:cf:9c:20:12:0e:
7d:88:2b:2e:69:5e:2e:c6:c2:09:1a:75:78:7f:6e:a4:a3:4f:
ab:19:54:62:9d:df:62:ef:14:e0:f1:b6:ce:f1:0a:b4:54:18:
a8:fb:49:de:b5:4d:4f:5a:ff:41:ee:19:2c:a1:03:a7:81:f2:
8c:53:1b:56:c4:d1:e7:9d:a3:73:76:18:61:f8:7a:51:a8:1d:
38:33:70:b0:a4:b2:bb:a3:6f:6d:89:4a:61:10:ef:46:14:91:
a2:11:2d:e5:b2:ec:4e:c2:50:85:f0:36:c2:71:ad:d3:ed:15:
e3:29:8a:22:b5:44:67:12:f0:f9:30:f5:ab:e8:25:12:68:64:
d8:f4:67:be:cc:f0:7b:16:c0:b4:1b:3a:3e:bb:b8:aa:27:d9:
70:84:ae:aa:2d:0c:b0:01:5a:8f:b1:83:fb:0c:99:77:fe:72:
cc:e6:fe:91:cc:4c:26:fc:51:72:07:51:4e:e0:1b:96:7f:84:
40:1f:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:36:41 2025 by rpki-client