Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: WOFN7MYN4/3eXu7rKI0LEUcNztYr6m3EpFJgDTaQuQo=
Subject key identifier: AD:F8:3A:C7:4A:15:32:46:DA:58:74:F5:87:00:17:67:4B:77:1D:38
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 0196BB5B3F7CF43DFDE3B5DF8C1D81AA0F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 18:00:41 +0000
Manifest this update: Sat 10 May 2025 18:00:41 +0000
Manifest next update: Sun 11 May 2025 18:00:41 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: n7u5+/YUFZlkb2fy+MbLJKLQZ9VigJy5uLugHTRCLEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:3f:7c:f4:3d:fd:e3:b5:df:8c:1d:81:aa:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: May 10 18:00:41 2025 GMT
Not After : May 11 18:00:41 2025 GMT
Subject: CN=adf83ac74a153246da5874f5870017674b771d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:e8:3c:ef:00:af:8c:9f:16:ba:9c:b9:8d:
24:23:fd:e8:51:d8:e7:7b:93:25:15:ff:18:eb:55:
c8:ca:20:ba:7e:a4:b2:98:a5:94:71:7f:95:0b:6b:
92:fa:0c:7f:2b:b0:72:23:6c:22:2a:c4:e2:1e:1f:
c4:ab:82:cf:24:93:f1:4d:b3:b8:8a:e9:98:21:94:
97:4c:a8:eb:fb:50:5d:cc:c2:da:ea:b5:34:32:48:
1d:ca:f0:e5:32:30:10:2b:22:a1:5e:02:ba:01:9e:
0c:06:41:26:9e:08:8d:cd:1f:0e:33:3e:4f:b3:0e:
3a:3a:87:6b:e4:a1:c0:b8:3f:72:0c:5f:f3:44:7e:
30:b5:bd:86:44:c7:c3:32:79:bb:95:8b:5a:8f:1f:
af:81:41:56:53:00:18:11:f9:cc:af:8c:68:66:85:
cd:db:5c:47:69:0f:f4:86:77:7a:31:5f:db:da:48:
31:c9:fe:81:bf:d5:28:86:f0:c3:98:35:ce:dd:9a:
b5:d3:27:c5:ba:60:3f:7a:69:ce:44:31:14:c2:5b:
9e:c5:db:51:a5:10:cb:79:31:fa:55:20:dc:17:fa:
d7:fd:8c:eb:d3:2a:d9:93:98:a5:55:d1:e5:aa:19:
59:56:69:c1:28:a3:74:7a:9f:90:65:d7:82:f5:f6:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:3A:C7:4A:15:32:46:DA:58:74:F5:87:00:17:67:4B:77:1D:38
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f4:b3:06:76:3b:77:f3:d5:8e:2e:9d:38:b3:f0:52:fa:42:
01:d3:02:80:d2:19:fe:c3:76:bf:7f:87:46:13:79:50:eb:b9:
10:b2:33:52:89:8c:98:28:9f:f1:b7:d6:38:7a:d9:37:df:ad:
08:7a:de:f3:66:01:f5:77:a7:0c:46:59:57:8a:2a:b6:ce:6d:
b3:a1:66:d0:f4:a7:1f:be:06:6f:2b:86:4d:26:45:10:af:ab:
a5:2c:d4:e2:63:1e:d4:68:9b:68:45:12:42:7b:fc:ba:9b:ad:
31:04:e8:34:60:83:97:dc:a1:a1:18:51:90:9a:86:f0:12:ec:
3d:4b:60:0d:ae:fd:d9:52:6b:67:fe:ee:10:a4:23:6c:31:fc:
f8:5c:5f:e6:e1:8f:ce:5d:34:f0:10:4f:29:73:4c:f1:2e:bc:
ab:65:af:6f:8b:46:19:58:d6:de:42:35:df:c0:36:ed:ed:d7:
32:10:36:33:50:57:9a:31:7a:66:ff:75:30:41:c0:b1:03:8f:
3e:6d:10:1f:1c:ad:f7:ac:9f:8e:9a:0f:1e:6a:52:58:a5:c3:
89:d4:dd:49:f9:72:43:d1:cf:d4:dd:ec:60:58:ec:c8:37:3c:
0d:10:f7:0a:b4:67:d5:36:bf:5e:a9:cb:67:04:36:b9:a9:a2:
d4:c8:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:04:16 2025 by rpki-client