Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: GU0QRqnTkU8l607pTQp0s3oLK8YK4LQrM8Feo6GcL1g=
Subject key identifier: 99:C2:52:F7:11:DF:75:40:AE:76:9B:13:A7:3F:9D:4E:5C:AF:B7:31
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 0196C9851ECA1BD23BB93F9EB2DDB65D5BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 0D84
Signing time: Tue 13 May 2025 12:01:06 +0000
Manifest this update: Tue 13 May 2025 12:01:06 +0000
Manifest next update: Wed 14 May 2025 12:01:06 +0000
Files and hashes: 1: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (hash: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: AugyUbE0ZMvqxOtG75FZqnifAgSLAP704+wxZWhrsro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:85:1e:ca:1b:d2:3b:b9:3f:9e:b2:dd:b6:5d:5b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: May 13 12:01:06 2025 GMT
Not After : May 14 12:01:06 2025 GMT
Subject: CN=99c252f711df7540ae769b13a73f9d4e5cafb731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:9b:aa:c3:09:3f:5c:37:97:ba:18:2c:02:
b6:5b:df:95:0b:3d:f4:d5:72:a1:8c:fd:4a:c1:9c:
f2:4c:60:3a:88:ba:63:14:16:37:45:45:1c:54:63:
15:3e:27:75:3e:08:35:f2:b7:6b:bd:46:98:c8:f5:
ee:5f:59:0a:00:26:f9:2b:1a:3a:7d:72:53:0e:e5:
3a:37:c4:b5:85:93:e0:31:4f:a1:e6:7b:ff:d5:a9:
0a:13:8b:fc:2c:37:02:e0:a5:5f:db:87:e6:cd:47:
8b:de:54:9b:ff:e6:50:bd:59:81:e6:cb:88:a2:22:
cc:7b:e6:09:2b:7b:37:fb:3f:73:42:59:c1:e6:98:
67:78:d9:3f:54:ad:51:9e:94:4f:b4:59:e9:0d:84:
59:e5:38:61:ae:34:49:4a:a2:25:48:fe:13:43:7e:
2d:52:fd:66:0b:3b:3d:0c:35:fb:cd:01:95:a8:15:
2f:ba:f8:32:08:25:5d:9d:db:56:18:49:f7:c7:e6:
90:2d:89:c0:39:bd:d6:81:15:df:4a:b0:9f:b4:d2:
63:42:87:bb:20:0d:ac:e4:8c:bb:4a:03:21:85:5f:
e2:89:67:b8:cc:e3:d4:37:0d:1d:09:96:77:a1:91:
1d:3d:63:9c:4e:b5:4d:57:85:cf:e3:92:6c:b1:0e:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:52:F7:11:DF:75:40:AE:76:9B:13:A7:3F:9D:4E:5C:AF:B7:31
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c5:af:53:ad:c5:12:ad:32:6c:d5:81:ef:61:bb:00:2d:c6:
ff:85:2e:ba:f7:f1:57:57:4e:e2:00:9d:a0:98:fb:a5:ae:6e:
a2:45:85:36:b1:15:9e:dd:fd:52:6c:c2:38:e7:7c:5e:ab:0b:
f8:57:4b:b5:a0:5f:0e:a1:39:a6:e5:96:a1:32:92:d7:63:80:
39:7c:c3:7a:d7:2f:51:44:0e:3b:45:bf:f3:cb:63:67:52:0b:
92:23:ee:e9:74:59:51:71:b4:e6:e3:1b:3e:ec:9a:11:0a:6f:
a7:9e:1f:c6:30:0d:34:37:2b:d2:31:be:9b:77:2b:5c:2d:31:
98:ff:a9:40:0d:19:be:06:5d:d0:65:51:f9:93:4f:3a:83:6f:
1c:36:f8:10:72:62:cb:04:79:3c:d5:18:8d:30:8b:fe:97:65:
a3:15:82:09:38:45:d1:6b:7e:58:e0:e1:e7:e2:50:d7:ae:11:
c5:bf:ad:80:f3:79:6b:31:fd:1d:d0:c9:55:1d:28:66:77:71:
71:9a:cc:8c:df:71:de:7a:bd:45:1d:da:b0:fe:2f:59:37:86:
fe:ca:e1:3f:8a:5c:cf:b6:4a:e4:d1:c5:ec:88:d1:99:2d:13:
29:db:6d:4c:9c:8c:93:f7:8f:e2:6e:56:5e:4f:ce:7e:9b:2e:
1e:0b:07:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:36:08 2025 by rpki-client