Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: O7tBOxGYZ9cD1aZZLYwA5Ciw5FcLR7iYtzFudLMyP1s=
Subject key identifier: 0F:EC:09:5E:9A:BC:F7:57:AC:9B:A9:04:21:2C:0A:F5:5D:76:3A:44
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 0196BA11FA5F7775757A794B01CFE206E462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 0FEA
Signing time: Sat 10 May 2025 12:01:02 +0000
Manifest this update: Sat 10 May 2025 12:01:02 +0000
Manifest next update: Sun 11 May 2025 12:01:02 +0000
Files and hashes: 1: F_5jyI70I8rVjTf2ep027mY2RmU.roa (hash: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: RqQHLk24fNfETswMXyOLRM0R+CsJ3zd6gDcmNoGQHDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:fa:5f:77:75:75:7a:79:4b:01:cf:e2:06:e4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: May 10 12:01:02 2025 GMT
Not After : May 11 12:01:02 2025 GMT
Subject: CN=0fec095e9abcf757ac9ba904212c0af55d763a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:5c:fe:ab:e4:1a:c9:24:73:43:6e:74:5b:
18:da:ba:e1:48:03:46:f7:9f:97:0c:40:20:71:fa:
c9:d2:57:54:d3:18:82:bd:da:d1:fa:e1:db:27:26:
b5:c7:a9:7c:11:09:60:f0:d0:f0:b6:dc:bf:77:8e:
9f:0d:1d:e5:63:77:83:97:07:5c:2f:65:50:36:ad:
6c:9a:3c:66:21:63:0e:8f:94:46:35:16:05:e3:98:
d4:19:00:77:e8:2d:d0:f8:2e:20:ee:53:0b:3a:83:
ae:77:1b:26:2a:18:d7:5a:93:e3:24:87:ac:10:c0:
9f:9f:42:3a:70:ff:2d:49:0f:25:ae:67:b9:4f:b6:
2a:40:66:f0:75:5a:e7:e6:6b:fe:54:06:3c:47:1c:
79:8d:cd:9e:09:9d:8c:d7:8d:6a:6b:6a:3b:87:74:
ff:06:0f:97:8b:db:1c:24:55:d5:c8:63:c5:b8:0e:
db:73:23:f4:a3:dd:5d:05:e8:04:90:00:39:f4:7a:
87:18:67:5e:26:7a:a4:8c:f7:f6:d1:8b:1c:33:c3:
d3:fa:97:d7:7e:78:5c:3a:4a:eb:45:e3:c1:03:f3:
63:6c:e3:ce:86:ed:02:53:8f:9d:5c:10:6e:02:14:
06:77:05:fc:b2:79:a9:c5:a8:32:aa:8b:04:d5:7b:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:09:5E:9A:BC:F7:57:AC:9B:A9:04:21:2C:0A:F5:5D:76:3A:44
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:b3:03:5a:3c:02:85:4a:79:57:f1:5b:93:86:39:f5:8e:
18:26:7c:61:70:2b:dd:62:74:d5:9d:aa:79:73:e4:db:48:63:
44:34:4c:2e:a1:11:e8:50:74:cc:b2:d3:67:d5:a6:9b:a4:f4:
f5:29:3e:4c:a8:d6:35:aa:61:49:e1:ac:7e:02:03:88:7c:39:
86:32:7e:c2:80:e9:6e:b3:f3:a1:89:b5:a0:b9:72:15:f9:2b:
4d:0c:7d:e8:9c:3f:22:98:e2:e7:a9:5d:29:39:4a:02:72:9d:
54:08:c2:6e:3a:72:5c:76:21:fa:5a:34:4a:36:f0:59:16:7b:
90:5d:a0:27:39:ab:a6:38:0b:92:20:d2:e9:55:3a:11:50:06:
9d:83:03:86:7b:06:a4:79:1b:3b:7c:11:6e:bc:2f:cb:48:b0:
c9:42:0d:33:99:59:eb:43:2e:5f:af:1a:74:51:8f:c5:d5:35:
c4:ee:95:70:38:2f:3f:42:25:db:6f:15:b2:02:f5:eb:d6:16:
5f:62:48:27:84:9e:6f:b5:51:ca:36:98:21:70:a5:5c:95:9b:
d9:c9:77:1e:e7:b0:a4:b0:57:dc:57:50:80:5b:7c:a9:48:03:
be:7b:0a:88:0b:68:ac:5f:6d:fd:dd:b5:e2:b2:39:8b:47:ab:
5b:e8:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:29:05 2025 by rpki-client