Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: xmYvp6JDWlKQwgfLNkFoVZ3vT7xqFLdyogh1PdqsLiU=
Subject key identifier: F4:95:3D:F5:24:A4:4C:09:11:74:98:25:E8:39:04:61:BA:6A:FE:92
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 0196C34C0977185065D381DD08893385F6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 08C8
Signing time: Mon 12 May 2025 07:01:02 +0000
Manifest this update: Mon 12 May 2025 07:01:02 +0000
Manifest next update: Tue 13 May 2025 07:01:02 +0000
Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: 70j7Jc9RyzUfNnfQ7yjdYeuff++Ocpe6Oxt9VxU2tFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:09:77:18:50:65:d3:81:dd:08:89:33:85:f6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: May 12 07:01:02 2025 GMT
Not After : May 13 07:01:02 2025 GMT
Subject: CN=f4953df524a44c0911749825e8390461ba6afe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:ce:d3:3f:b7:f3:bc:b4:aa:97:44:6b:e4:
25:d2:8d:ac:5e:a1:02:ac:08:3b:af:2f:b0:2d:30:
13:06:0f:97:fd:36:9a:d3:34:66:c9:d6:b9:62:df:
41:c7:fe:d9:7a:fa:e3:58:2f:b0:e0:eb:82:ae:2b:
40:4c:52:d1:a4:3f:a2:e6:83:c5:db:3a:20:36:67:
a5:32:3e:1e:88:93:54:3b:ff:6e:6d:cc:2a:91:1a:
55:13:78:38:5e:5b:77:7d:53:1a:bd:42:8f:7a:68:
31:b3:03:3b:1b:04:3c:54:8b:24:9d:8f:36:0d:4d:
db:de:07:e7:fe:52:1c:50:c9:94:23:f4:94:61:63:
3b:62:04:e8:e1:72:4b:00:7a:8c:77:fd:86:a3:8f:
26:89:8a:5d:ca:71:62:c7:36:cc:4d:28:e0:d6:c1:
be:f6:5d:dd:94:0c:cc:58:bc:5a:ad:83:78:9e:0c:
13:67:0f:da:37:e3:ba:5e:cb:5f:88:bf:4a:ae:a6:
b3:a5:d2:5f:00:0a:fc:35:ac:08:65:9c:eb:3e:28:
23:49:4b:05:9e:ad:3d:53:28:53:66:ac:eb:8c:85:
8b:ab:70:cf:ab:80:5c:ce:9d:dc:43:c8:b1:a1:84:
0f:7b:e1:b9:04:0c:4a:ca:2c:b7:d6:d6:da:f9:9b:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:3D:F5:24:A4:4C:09:11:74:98:25:E8:39:04:61:BA:6A:FE:92
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6e:af:cf:20:fa:47:f3:2c:d6:26:60:b2:33:01:bf:a9:c1:
99:e2:1b:52:3e:fb:2d:c3:2d:f2:b5:98:0e:13:22:52:cd:6e:
de:7d:0e:90:1b:54:f5:ff:6d:0a:8d:87:6d:34:21:0c:01:96:
f0:80:14:4b:f3:ef:8b:3b:32:68:76:5d:68:f2:3d:50:4e:18:
e7:8f:f0:c7:9c:3e:fa:31:fc:d3:11:60:10:bf:fc:d4:29:46:
f9:7e:a1:9e:2e:6c:19:c6:53:29:28:60:96:2c:2b:80:21:0f:
9d:e3:75:ec:27:b2:a1:01:7f:fa:f0:8c:8e:96:e5:34:ec:80:
7e:97:2c:0c:99:1a:67:79:ef:6e:0d:b5:c5:9c:f9:be:3d:aa:
3b:3f:7a:96:03:e6:44:24:29:ac:ef:59:4e:f4:84:4f:1a:cf:
eb:5b:fd:ec:0b:50:88:9e:93:f2:8c:17:dc:6d:41:bd:1c:51:
8f:0b:37:9d:43:2f:7a:8e:d4:a6:6a:17:10:0a:ac:40:7e:fe:
98:b1:9f:06:78:6a:01:0a:40:c3:3a:ad:84:8e:9c:82:c0:4e:
7d:17:10:27:40:a6:f8:be:c5:d7:ae:f1:cb:a0:b9:64:96:08:
3c:f8:16:b8:a0:92:48:34:7d:d5:93:4c:88:f5:1c:4f:12:be:
6f:9b:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:53:24 2025 by rpki-client