Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: oUfE4EeZ7Gp15GlJlutnHY/Dm3slywjnSrpstGqug/I=
Subject key identifier: 45:7C:53:CE:9A:C8:B7:89:17:3C:98:DE:4E:C3:CA:53:7E:1A:65:52
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 01969D876FDC4824276E96C9ADC4DE69AF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 10D6
Signing time: Sun 04 May 2025 23:00:20 +0000
Manifest this update: Sun 04 May 2025 23:00:20 +0000
Manifest next update: Mon 05 May 2025 23:00:20 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: Vpr7uu9jVfJ3aKqqz1FhXX+BLSIf+zYkzoue7f+fShw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:6f:dc:48:24:27:6e:96:c9:ad:c4:de:69:af:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: May 4 23:00:20 2025 GMT
Not After : May 5 23:00:20 2025 GMT
Subject: CN=457c53ce9ac8b789173c98de4ec3ca537e1a6552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:06:1d:96:5e:ea:ad:ac:5a:3a:89:e7:41:
25:99:e0:15:70:cf:44:d1:37:04:5c:14:18:56:54:
8f:d8:d3:b2:34:0e:d1:37:1c:19:0b:2d:a9:c8:bf:
2f:28:26:ba:7f:cf:9c:09:f1:3a:72:44:c4:4f:6a:
9f:bf:67:8e:14:ad:28:19:d2:30:ad:04:6b:92:93:
b6:f2:b7:86:e5:71:d3:ce:2a:15:c1:13:78:5c:ee:
dd:d7:06:a1:bf:c0:0f:2e:01:28:18:cf:ab:17:c3:
63:ff:bd:5c:96:5a:3d:a4:e3:e9:71:ca:34:ca:69:
44:f8:ec:c1:ac:5a:7b:51:c7:db:a8:50:2e:ad:d4:
1b:50:28:c6:0f:d0:c1:a6:7b:c8:57:1b:12:fa:d4:
c8:9b:8f:1f:0b:9f:57:73:e8:19:e1:27:a3:b1:44:
fd:89:32:f1:01:61:a9:38:54:04:5f:9c:d7:16:52:
0d:e0:22:60:40:a6:e5:05:88:12:c5:f4:c9:5f:d9:
81:57:7b:1e:2e:f5:49:71:b2:ed:83:72:c6:df:26:
da:d1:a0:47:53:0e:a8:e2:95:0f:2a:b0:63:2a:6a:
e2:2c:59:c5:89:ce:e0:f1:28:6f:c8:45:d6:e0:10:
39:60:48:4a:f0:c7:72:d5:eb:79:c9:44:ed:9d:1e:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:53:CE:9A:C8:B7:89:17:3C:98:DE:4E:C3:CA:53:7E:1A:65:52
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:40:7e:09:e3:d0:99:27:89:e8:27:a7:cc:9a:f7:28:bb:8f:
f9:93:aa:d9:77:b2:61:91:5f:d5:99:56:90:1b:9b:db:34:bf:
b3:50:ab:4d:b9:a1:27:9a:2c:92:64:a8:1f:bc:1c:30:85:79:
7f:25:9a:19:af:f1:b4:2b:41:7e:98:fc:b7:46:2c:f5:46:6b:
d5:b0:0f:53:bd:75:8c:eb:ce:14:ad:3b:ae:a5:09:1d:3c:0c:
ba:db:f2:0e:de:f3:5e:08:49:23:08:7c:16:27:2e:72:8c:53:
eb:38:c3:b4:88:4a:b5:26:40:c1:d1:b7:d3:6d:86:f7:c4:0d:
bb:75:31:f9:90:68:14:e9:e6:87:4b:5b:c7:ce:e2:94:d8:fe:
15:82:c0:40:d5:bc:aa:fd:e8:4a:53:c2:bc:76:ce:c1:cd:4d:
f0:72:15:11:7f:8f:5d:21:6e:07:e4:0e:c0:63:ab:ae:65:9b:
61:ec:7b:4f:0a:11:c2:81:67:8b:2a:5f:be:5f:ab:70:24:a1:
68:c9:84:cc:b0:a6:ec:22:1f:06:f4:f9:51:cd:5e:34:60:3c:
cf:4a:17:df:d0:82:10:68:c3:64:1a:15:f3:9f:6d:ff:35:d9:
ba:30:67:45:7b:2c:a9:00:34:42:10:a6:c0:57:71:84:bb:d7:
d0:37:17:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:04:28 2025 by rpki-client