Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
File: Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json)
Hash identifier: DmADGfYHSm0TO+i0wyeIIYSzPq5ObvncfyuqbJH3lX4=
Subject key identifier: 00:3B:DB:B6:B1:BD:B7:E8:60:2B:C1:5E:BD:37:48:BB:91:DB:52:D2
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial: 0196A051DD88225BAC608A7D54B88F555D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
Manifest number: 07A0
Signing time: Mon 05 May 2025 12:00:41 +0000
Manifest this update: Mon 05 May 2025 12:00:41 +0000
Manifest next update: Tue 06 May 2025 12:00:41 +0000
Files and hashes: 1: 8dRpFL3Tx6_eHYDV0GF9jVjNRKU.roa (hash: CYL1YeCCG8xFxfjQulVKl6xa2WJtFP2ORTHbcUggMA4=)
2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: YM6oUMJATWp3GP6is31XQVib/e7aU1ruc33Z3p5DRnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:dd:88:22:5b:ac:60:8a:7d:54:b8:8f:55:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Validity
Not Before: May 5 12:00:41 2025 GMT
Not After : May 6 12:00:41 2025 GMT
Subject: CN=003bdbb6b1bdb7e8602bc15ebd3748bb91db52d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:59:98:c7:6a:7c:c7:68:26:c6:85:96:e8:
8b:ce:2f:27:4a:73:7e:8c:59:d2:0f:06:da:42:6c:
6f:c6:43:b6:bd:b0:3f:89:17:f6:02:4e:b9:d4:bf:
fa:1b:f6:dd:40:17:a8:3a:51:2c:e6:be:56:63:44:
f5:62:0b:db:fd:6a:55:7c:be:08:4d:74:fc:71:9e:
e2:53:ef:42:38:1a:a0:6c:d3:08:54:41:50:e9:81:
bf:da:de:c7:73:f7:a8:69:3d:5b:c4:5c:2e:8d:51:
85:06:a9:b6:97:b0:3b:30:00:3f:32:f2:54:ba:b8:
cf:cf:00:12:2b:33:5c:9d:91:7b:23:aa:d7:49:cd:
37:e7:35:a4:08:5b:2b:85:7e:9a:a8:84:ae:7e:7e:
2f:ce:b3:8a:ef:57:5c:45:cf:6a:78:ef:89:5a:43:
ca:b0:2f:55:a7:3a:aa:c2:46:f5:62:8b:79:56:27:
39:dc:32:b5:83:38:4d:e0:67:fb:e5:1f:13:63:43:
e0:2a:84:af:77:58:d4:b3:97:98:b2:a4:13:54:04:
94:54:cd:36:9b:f9:84:29:a9:c2:05:09:2f:73:30:
9d:7f:e3:8b:fd:9f:17:bf:0d:2a:d4:89:4f:b6:4c:
97:87:80:57:d6:d2:1a:fb:c8:fc:49:25:0c:c7:0e:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:DB:B6:B1:BD:B7:E8:60:2B:C1:5E:BD:37:48:BB:91:DB:52:D2
X509v3 Authority Key Identifier:
keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:57:f7:70:d9:6f:ff:94:f6:7f:e0:9c:dc:0d:26:87:79:f6:
8b:eb:40:4c:cd:89:83:ef:fc:58:c9:cb:cb:df:8e:0c:1d:60:
bb:70:17:4c:b8:8b:df:0b:37:34:90:e8:64:62:d3:f4:da:b8:
dc:cb:3b:03:2a:c2:80:da:9b:93:3d:4f:83:74:99:57:49:3d:
35:37:12:d8:9c:ad:bd:e4:c8:6c:bc:84:5b:58:45:ea:d7:b8:
ce:c7:41:80:03:44:1b:00:27:dc:a1:a9:36:18:da:0c:ea:20:
2d:d9:8d:4f:42:26:06:d6:5e:b7:32:b2:44:67:93:75:2a:e1:
4c:80:49:b9:46:cb:b3:62:35:ba:98:39:00:cc:cd:22:82:16:
9b:1f:e7:7f:d2:72:51:c2:cc:bc:cb:c1:2a:ac:7e:8b:35:57:
e2:05:a3:36:cc:9e:92:25:a9:c5:7d:b0:fe:4d:7f:9b:7f:5f:
6f:6d:4e:ce:26:66:9c:39:d8:89:a4:28:d5:1a:b1:ec:a5:d5:
f2:50:25:69:a2:e9:1c:98:76:ee:fd:7c:98:dc:bd:d7:7a:ea:
29:aa:84:ba:74:6a:79:66:6c:ad:1e:d2:02:63:48:a9:48:d6:
6b:a0:66:e4:47:24:b0:d1:4e:b6:99:8c:7d:4d:d4:1b:5c:81:
9e:12:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:27:52 2025 by rpki-client