Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier: TIWMDM/y8JGVPkoWQ2kB8ebvRg5E2oUxhxPfuu01AGk=
Subject key identifier: 54:63:1F:B7:6B:42:30:8F:4E:5A:84:77:C8:A7:FA:87:7A:65:E7:13
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 0196D7ADDC37F54356E79803286AF0041609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number: 0B85
Signing time: Fri 16 May 2025 06:00:17 +0000
Manifest this update: Fri 16 May 2025 06:00:17 +0000
Manifest next update: Sat 17 May 2025 06:00:17 +0000
Files and hashes: 1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: u1ha004jBfn+h2PW7Ygn1UALyWH04Zbz+AKHtVpjwRs=)
2: gREff1tF-BFgfiQMOqwC-JywERY.roa (hash: s5MFDeOQrL+EZevqGRhg/WJb2VH0jOYXkHrjmynZzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:ad:dc:37:f5:43:56:e7:98:03:28:6a:f0:04:16:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: May 16 06:00:17 2025 GMT
Not After : May 17 06:00:17 2025 GMT
Subject: CN=54631fb76b42308f4e5a8477c8a7fa877a65e713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:be:4b:24:6d:c1:f0:96:9f:11:30:a9:69:
46:64:be:90:99:00:f8:34:54:c7:ea:97:b0:9e:8d:
60:91:09:2a:96:1a:70:86:1e:6e:3a:04:84:fd:40:
6f:b8:b9:1b:80:70:08:f1:03:b7:80:0f:59:12:04:
b9:6c:c8:17:1c:78:ba:52:e5:ea:75:9d:8c:96:c2:
14:10:7e:e3:31:7f:1f:cf:57:22:f6:03:5f:ed:1d:
86:17:bd:33:5e:94:66:f2:9c:0b:22:fa:3f:70:31:
f3:34:f7:7f:a4:92:61:7e:d3:72:19:db:3a:d2:87:
fd:75:46:be:38:82:76:1d:8a:c2:90:d7:9a:ac:2b:
5f:f2:27:21:38:c6:22:16:77:88:14:47:85:bf:4c:
66:83:e3:3a:72:6a:1f:fc:74:ec:c1:0d:dc:7a:5f:
a6:66:3c:27:3a:32:ab:83:30:dd:4a:49:a0:c8:48:
39:fd:3a:46:46:2e:1f:3f:1a:f6:ca:a1:0a:9f:2f:
14:cd:9c:93:c4:23:b4:7c:c1:5a:81:27:03:02:6f:
05:1b:3e:e6:52:18:a2:a4:e5:13:94:b5:3b:bf:8c:
43:f1:fe:1a:ea:02:b2:e4:61:3b:70:77:a4:9f:4b:
39:2d:69:d6:dd:60:e6:69:36:60:5d:44:a8:e1:8e:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:1F:B7:6B:42:30:8F:4E:5A:84:77:C8:A7:FA:87:7A:65:E7:13
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:29:c1:aa:a1:df:c1:36:a9:9b:09:e8:65:9e:17:ec:47:fd:
f8:ee:37:4e:77:a2:27:bb:63:78:01:38:1f:3e:34:a6:cd:d1:
a1:04:23:c0:e8:72:f9:d2:90:7e:0d:a4:93:f9:b4:04:ef:3c:
47:41:88:6b:0b:08:f6:62:9f:fe:75:99:ef:ce:2f:13:74:c0:
ed:7c:7b:12:8e:3d:60:84:f3:af:7c:a9:af:43:83:ae:c8:39:
99:0f:ac:65:b5:a0:59:ac:26:f2:31:5e:33:4f:c8:53:ec:fc:
11:e7:fc:ea:66:62:24:9c:e1:50:ce:cf:3e:59:a6:76:11:3c:
9d:ea:22:c8:51:3e:a9:62:d5:94:e7:d0:ef:77:29:bf:62:88:
2a:1e:f9:44:3c:c3:12:66:d9:62:6a:0b:43:dc:e2:4b:3c:46:
6c:11:cc:36:93:d0:50:ea:03:3b:e5:67:de:66:68:5e:97:15:
96:05:9e:b5:71:9e:10:ab:2c:69:45:bf:02:1f:c4:95:f8:f4:
c6:80:16:3a:75:2a:b4:c6:1f:49:2f:ba:29:e1:5b:9f:6d:27:
94:d0:b1:ca:0c:0e:2c:47:22:a8:b6:33:3c:65:0b:b9:64:5c:
d4:6d:17:b3:a2:4b:1a:d5:79:00:20:6a:d6:e3:a5:45:14:d1:
25:d0:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:22:50 2025 by rpki-client