Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
File: SdA41NOnW7-ev-owZGh7Xjs0b-M.mft (raw, json)
Hash identifier: P2fOnnNwevYXc5enrd8InP7hs7rtSJYsVn9Gv0+VIv0=
Subject key identifier: 3A:1D:04:A6:3F:C1:CF:2D:02:54:F3:6D:B7:1F:4D:E6:9B:79:A6:66
Authority key identifier: 49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
Certificate issuer: /CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Certificate serial: 0196D4ACFD7BC8949A8C8391D2A9646C3D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
Manifest number: 0B61
Signing time: Thu 15 May 2025 16:00:28 +0000
Manifest this update: Thu 15 May 2025 16:00:28 +0000
Manifest next update: Fri 16 May 2025 16:00:28 +0000
Files and hashes: 1: SdA41NOnW7-ev-owZGh7Xjs0b-M.crl (hash: z0x+J7HAxYTkE2TJ3z7O2TWwVtPeZ2nVPIIWi+nev8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:ac:fd:7b:c8:94:9a:8c:83:91:d2:a9:64:6c:3d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Validity
Not Before: May 15 16:00:28 2025 GMT
Not After : May 16 16:00:28 2025 GMT
Subject: CN=3a1d04a63fc1cf2d0254f36db71f4de69b79a666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:e2:67:f2:50:64:99:81:e2:50:78:b0:e5:
60:1e:10:76:d4:6d:21:37:45:13:4c:51:6a:82:bf:
6e:1b:1e:53:27:84:34:d8:f1:0d:3a:75:5a:2d:d6:
a2:39:5c:f4:1a:d4:4d:8a:ee:8f:eb:d3:f6:c1:ed:
6b:39:10:f1:55:6f:c6:8b:26:4a:9a:99:a4:c7:5f:
4b:50:62:c9:f5:b7:fc:81:6c:3e:2c:4a:a2:25:b3:
a9:16:d1:77:8f:48:e2:33:5f:58:32:c4:11:ce:be:
08:c9:35:f4:ee:20:eb:c5:d0:5d:18:b4:9c:e6:65:
c0:72:49:7e:54:05:6e:e9:5b:7e:6a:ea:87:04:1e:
d3:1c:f3:5d:7c:1c:11:fc:55:8d:74:47:77:20:c8:
d5:10:b2:a7:b1:db:10:2c:51:84:d4:7f:de:fd:5e:
c2:7b:fc:09:a0:87:89:db:b3:28:07:fd:c9:a1:53:
e9:70:33:0b:66:5f:d5:38:cd:d8:15:ec:98:96:a8:
a0:8f:25:27:a4:f1:e0:cd:b9:1e:c5:3f:d0:50:36:
8e:b0:e2:5d:3c:0b:1a:64:bb:8b:2f:65:46:ff:62:
0e:0e:59:6f:b6:e5:71:2b:4c:fb:17:6e:dd:56:3f:
3e:b1:b2:52:6a:96:f8:e8:e3:cc:8e:d4:76:2f:b0:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:04:A6:3F:C1:CF:2D:02:54:F3:6D:B7:1F:4D:E6:9B:79:A6:66
X509v3 Authority Key Identifier:
keyid:49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fc:a6:50:d5:c3:48:23:b8:8b:ba:2b:15:bf:a6:22:d0:9d:
70:54:4d:bf:3f:a9:77:2c:61:4c:14:c1:02:d1:82:52:4d:35:
29:a5:fb:fa:0c:4d:4d:06:4a:3e:70:fe:0a:52:75:ff:5c:88:
bd:e9:a3:5f:c3:47:2e:ef:47:93:07:4c:9e:80:3f:6c:ba:c8:
40:61:dc:64:59:48:37:d5:7f:e9:b0:25:64:04:c0:b3:b2:27:
ae:42:a3:55:f7:cb:65:24:4b:af:50:12:bf:c7:b1:bd:a5:be:
06:ee:80:fd:3a:f5:77:98:b9:e5:d9:55:12:44:fc:96:32:f3:
f1:49:b3:f8:63:f2:a5:02:36:ef:f5:8b:31:8c:83:a2:cb:02:
a3:86:89:83:31:1a:ba:1f:b5:58:09:58:d3:16:d4:a6:f2:48:
ed:4c:c1:56:f5:99:1e:6c:63:ba:44:6c:33:9e:a1:5c:19:15:
97:c1:ce:08:28:f4:42:36:c5:52:bd:da:e2:e9:9e:e1:8a:e9:
5a:3d:b2:b4:d5:04:fd:d1:67:e8:ec:48:c8:46:7c:d2:a3:98:
67:ef:d4:cd:80:89:5e:8b:dc:d0:27:91:9f:62:80:ef:c6:bb:
1d:98:93:0a:51:fd:1a:7f:27:88:a7:72:5f:9e:c7:ff:0e:8e:
2d:0f:9f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:34:11 2025 by rpki-client