Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
File: sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json)
Hash identifier: wv63zGtioKJlIyDOV4CFNJF0PwhG8dY5LOvGvdwneUQ=
Subject key identifier: 23:64:0B:BD:B6:EF:0F:9D:A9:9E:D6:DA:6D:DE:B4:F2:D7:BD:DE:24
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Certificate issuer: /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial: 0196B52229198BDCA7E73EFADB3F5CDFD6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
Manifest number: 14C3
Signing time: Fri 09 May 2025 13:00:36 +0000
Manifest this update: Fri 09 May 2025 13:00:36 +0000
Manifest next update: Sat 10 May 2025 13:00:36 +0000
Files and hashes: 1: _vqUTJBaKVA__-YzImtaOgUdlPc.roa (hash: WjwzW+i6IqptZA1G2R9oYtf2Xiry6o+GVW/+RmHCnfA=)
2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: X7jSQgaxP75M3lYgRgvejlE4h78+B3Ke7baTfmvNqHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:29:19:8b:dc:a7:e7:3e:fa:db:3f:5c:df:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
Validity
Not Before: May 9 13:00:36 2025 GMT
Not After : May 10 13:00:36 2025 GMT
Subject: CN=23640bbdb6ef0f9da99ed6da6ddeb4f2d7bdde24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:6f:d9:87:74:c5:bc:02:63:55:1b:c2:09:
8a:fe:d7:e4:c2:3c:9c:a4:38:e7:46:e7:2a:78:0c:
d3:81:c6:2b:cc:77:81:13:b0:4d:19:53:3b:d0:9d:
10:1f:24:2a:a0:b8:7b:3c:53:fb:a8:51:bf:cd:f6:
76:95:cb:e6:ce:08:d0:c7:08:18:e3:0e:fa:0f:cc:
7b:af:c2:aa:76:e2:60:5c:57:7e:bf:e4:95:e6:fb:
34:cc:3b:81:0c:b8:24:e1:5d:ab:a6:f0:ab:37:d6:
d8:e9:8f:bd:c4:37:a7:b6:6d:9c:7d:94:fc:1c:8d:
51:11:a3:d3:c3:e2:ae:ee:de:47:81:dc:36:54:a7:
d1:0b:c7:78:f4:3e:86:07:fd:b4:d4:07:10:01:e3:
8e:56:1e:35:50:ae:da:78:f1:c1:f7:d6:76:c2:7e:
d8:f3:c1:48:a6:1d:c7:8d:f0:a2:11:be:05:d6:1b:
bf:97:96:be:1a:49:14:f3:72:e2:88:34:00:1c:ce:
b1:7c:e8:00:bd:a0:18:6e:6a:18:5a:d1:3b:e7:58:
0d:35:aa:d5:3c:c0:2b:a1:e0:dd:73:17:70:b0:9c:
77:4b:e1:94:bd:2e:9d:a5:27:f7:c7:15:ae:90:c2:
8d:b6:ad:b7:70:75:27:b2:cf:56:d3:2a:06:40:81:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:64:0B:BD:B6:EF:0F:9D:A9:9E:D6:DA:6D:DE:B4:F2:D7:BD:DE:24
X509v3 Authority Key Identifier:
keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8a:01:ca:96:7b:69:c3:59:0f:b0:83:94:e2:1d:df:af:b4:
b2:20:30:63:2f:e1:99:43:0a:72:8d:5e:f2:15:99:e3:3c:f4:
c4:94:ab:8a:2c:5e:24:3b:89:52:1d:27:d7:ca:61:60:0a:94:
74:93:01:57:53:62:c3:6d:15:94:4a:68:29:8f:19:f1:26:8f:
6b:ab:51:1c:84:d4:d2:aa:70:b4:ea:49:ba:8c:96:99:6f:75:
7c:f7:e3:31:6e:95:c9:1a:8d:de:0f:a4:62:1c:a7:38:56:19:
43:67:2e:57:ab:59:7c:4d:71:66:b8:aa:33:b7:79:83:d0:2e:
63:57:a7:91:d4:5a:ac:16:fd:01:6a:dd:88:37:0f:d2:fe:a5:
87:ca:80:4e:a5:0b:13:a2:24:aa:66:0f:fc:fd:eb:bd:64:6e:
bb:b8:0b:14:08:88:60:4f:93:86:cd:05:81:f2:ad:03:be:2c:
5f:23:c7:49:66:78:f9:71:1e:66:90:cf:b6:b6:9e:9a:ff:e5:
2b:32:78:70:b9:8f:35:aa:14:8c:d9:5f:f1:64:68:0b:d2:fc:
ed:ad:63:5f:19:35:3f:b5:1e:63:01:4a:57:31:27:b6:e8:f4:
0e:84:26:bd:30:47:16:c5:8d:f9:20:ab:c8:e8:f1:c9:49:b1:
58:a3:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:54:33 2025 by rpki-client