Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: iA+60fJl7FGJSZVE16wv3G1XSZPjxtJJhpuq+B7VNl8=
Subject key identifier: F9:A8:56:CC:09:CD:C1:55:11:27:DA:C6:20:11:2F:4A:B5:4B:99:5B
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 0196BFA5927EA022038B02F6D4251183D742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 056E
Signing time: Sun 11 May 2025 14:00:21 +0000
Manifest this update: Sun 11 May 2025 14:00:21 +0000
Manifest next update: Mon 12 May 2025 14:00:21 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: I8hDQuO8/YhmaQHxEVgQhxPA4HlPsSlQEdAYLJBqGuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:92:7e:a0:22:03:8b:02:f6:d4:25:11:83:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: May 11 14:00:21 2025 GMT
Not After : May 12 14:00:21 2025 GMT
Subject: CN=f9a856cc09cdc1551127dac620112f4ab54b995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:fe:92:e2:60:db:60:a2:fe:b6:c5:64:89:
f9:66:6a:f1:5a:3d:2f:03:95:e5:82:2c:be:d2:6d:
02:e3:a5:cd:37:23:0f:17:54:3b:48:e6:8d:60:fd:
4c:c8:66:ef:ca:5a:db:08:4c:ef:ec:6f:8c:49:f8:
a3:92:e4:f6:ec:a4:53:77:8c:60:0e:0f:a5:03:85:
35:1a:47:6c:ec:fe:0a:f0:d8:f8:99:45:17:3b:c3:
d8:8b:ee:24:c7:8c:fc:0b:dc:14:42:7c:55:c1:37:
ea:ba:af:d1:63:c3:3c:c0:41:3f:e7:43:10:21:92:
b3:a2:a6:79:0c:d5:9e:be:18:db:25:39:d5:91:16:
34:a8:27:66:28:f4:e4:4b:a0:91:f7:7b:44:0e:72:
a9:1a:ef:01:0f:81:3f:e6:88:67:a1:c3:e4:80:48:
b8:60:f2:f1:a5:8b:71:1d:0c:03:34:f0:ad:37:13:
d1:c8:04:97:5a:4c:24:96:e5:56:d3:0f:85:7f:e8:
30:03:d4:0f:7f:b5:f7:3f:37:94:e3:2d:7c:e4:5b:
71:6a:56:51:f9:c1:03:13:90:e3:f2:a6:57:10:42:
f5:19:49:66:d5:10:b7:25:fb:18:54:80:d0:68:30:
b5:58:74:14:cd:cc:eb:e3:70:2a:8e:bf:26:18:38:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:56:CC:09:CD:C1:55:11:27:DA:C6:20:11:2F:4A:B5:4B:99:5B
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:21:bf:98:a2:2f:8c:35:c2:68:ac:c4:78:8f:06:ad:2e:e3:
c6:76:9a:15:f7:ed:57:83:d7:63:15:21:57:cc:10:5d:06:26:
02:41:08:d3:f8:ea:0c:a9:1f:29:a9:bc:5b:43:3f:42:f5:bd:
de:75:55:c9:e1:78:84:be:30:c0:ac:ff:51:4b:3d:98:1f:91:
08:5c:7f:ee:ee:42:40:25:64:87:7c:a3:a7:de:6d:0a:61:af:
2a:7d:cd:be:c9:b2:24:47:f5:5a:cc:16:75:3e:9a:09:38:c9:
59:c1:ff:f4:ac:64:9a:f5:2e:58:51:ef:7e:92:b4:27:e1:d8:
b0:f1:19:9a:d4:ed:00:eb:0e:87:ef:4f:b1:39:23:84:a8:04:
4f:84:41:c8:9e:9a:fc:0c:e6:41:fb:d3:36:ca:74:ae:ed:d1:
a6:33:21:ec:2a:42:98:1c:fe:22:34:61:79:54:a5:6f:60:f3:
60:5f:28:d0:65:0b:1e:5e:f3:f2:d2:a0:d3:95:c5:49:4c:f9:
05:c5:c2:78:bb:ee:3b:52:d4:9d:7b:22:3b:10:3e:6d:19:74:
f9:8f:39:9d:50:b3:5a:05:ca:a8:f2:34:b1:94:f0:a3:c0:be:
c5:73:96:d8:d3:04:1b:a4:b4:58:ab:b5:f8:f2:0c:26:4a:f2:
6d:03:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:12:58 2025 by rpki-client