Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
File: sKVpmgjHv9cHz7BtMhP1ysvyglc.mft (raw, json)
Hash identifier: ahh8CrrLk+oi0SpeULDdBUr3LRTYDezde5N6N5Ae7e8=
Subject key identifier: FA:FF:46:93:50:34:D0:B5:45:2E:FA:10:67:DA:DE:DA:3A:30:77:43
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 0196D1ACA3604A00B1CB611B10687AF2A352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
Manifest number: 056D
Signing time: Thu 15 May 2025 02:01:14 +0000
Manifest this update: Thu 15 May 2025 02:01:14 +0000
Manifest next update: Fri 16 May 2025 02:01:14 +0000
Files and hashes: 1: 0Z-sHAnSl4bp7AfPwuyFGmDsZbs.roa (hash: Qd7UsFgJxINuR8Lxz3kq3vgAmJnbsTZmvzg3tBE1gSg=)
2: PLGff91PpnIaKhW2uDOuQAHfxZI.roa (hash: tVtdUbnR9K0LDd3rO9R8lG1IenCOkCUAxrqcCPMKhz8=)
3: sKVpmgjHv9cHz7BtMhP1ysvyglc.crl (hash: eWt8HkeT+zj1A0/ChjJB1OaZFUCILvJEWqGAqE0d7F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ac:a3:60:4a:00:b1:cb:61:1b:10:68:7a:f2:a3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: May 15 02:01:14 2025 GMT
Not After : May 16 02:01:14 2025 GMT
Subject: CN=faff46935034d0b5452efa1067dadeda3a307743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:9e:b9:a3:4e:43:65:82:b8:09:b4:ba:9c:
91:2c:d1:53:8d:49:f1:e6:6d:2f:f8:4c:c6:c1:29:
18:dd:27:d6:1d:59:ac:03:1b:7f:08:56:79:77:5c:
13:a4:f1:96:c6:1b:39:88:f4:2b:62:87:aa:75:13:
c0:13:b6:fe:82:03:ad:1d:0f:09:f7:ba:2b:83:73:
2d:e6:16:51:de:3e:73:7b:82:c0:ba:e8:44:0f:a9:
8c:38:6b:e3:2d:12:c0:9a:5b:b5:96:64:83:3c:66:
f2:33:93:71:72:5f:d5:3f:d1:a1:94:ea:c5:aa:3e:
d1:8a:e5:ed:23:97:30:76:e5:c2:d9:08:bc:19:c8:
5c:13:36:ff:8f:9a:fe:1f:83:e0:92:b3:c5:1c:ba:
69:2a:87:be:5c:a3:ad:7e:db:80:cd:f3:89:43:e3:
6f:18:e6:88:3e:88:aa:b6:1f:30:b8:f3:2e:2f:16:
eb:7f:12:28:ad:a8:22:86:9f:f8:03:ce:88:25:eb:
78:15:13:8b:02:d9:28:4e:21:04:33:f5:90:ed:54:
d0:0e:be:93:55:8f:58:cc:7a:d6:bf:7d:66:0f:01:
3f:71:b1:b7:56:df:7b:24:84:9f:1b:81:aa:00:6f:
77:98:54:4e:9c:39:51:71:55:72:d2:a1:5b:73:2b:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:46:93:50:34:D0:B5:45:2E:FA:10:67:DA:DE:DA:3A:30:77:43
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8c:db:ae:e5:79:68:6a:a9:b8:17:6f:24:b5:49:a8:98:47:
2c:84:68:63:9e:e3:79:4f:d3:dc:98:d3:6a:68:20:43:d4:23:
70:46:7c:0c:f9:c7:b6:57:a6:05:a0:f3:58:4a:2d:33:19:cc:
9c:ec:09:bd:da:3c:71:0d:81:20:20:1d:5f:02:69:dc:b1:cc:
e2:64:83:b7:8b:a5:fe:02:df:16:98:4e:8b:2c:99:d4:00:74:
5d:cb:0b:4c:4e:71:66:62:ed:c9:8c:fd:7b:ec:66:fd:67:81:
0e:64:b1:d0:66:ad:df:e4:32:b4:e2:cc:b7:5e:b3:20:8b:cf:
48:3b:49:84:9a:1d:66:4b:ad:36:23:a1:4d:14:36:8d:f4:bf:
58:67:3c:36:a6:58:a4:fe:9e:44:c3:b8:32:d0:75:2e:33:6e:
ee:c6:ee:6c:aa:f7:8f:d6:bf:e6:f3:d8:a7:dc:0e:61:a7:de:
74:75:98:a2:dd:bd:a9:8c:9b:4a:c0:e2:ed:e2:7e:af:cc:92:
e6:31:c2:4a:bf:62:36:02:7a:0f:96:0e:ce:cb:cd:84:18:a5:
36:36:27:db:70:3a:36:0b:44:1a:e9:33:c1:0b:01:4d:9f:af:
f3:a1:49:dc:ac:20:2e:ab:a8:84:44:1b:6c:10:0c:f2:8c:8b:
d7:1a:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:53:39 2025 by rpki-client