Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: GlqC2oeJtlBglR9IP91hSlJZkPj00Pw4Nh+UtfNYgRQ=
Subject key identifier: 70:EE:AB:12:23:8D:39:48:89:B0:30:91:5A:96:93:51:CB:CF:30:D9
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0196B8C80EC77600F768C30A9201AD306FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 0254
Signing time: Sat 10 May 2025 06:00:40 +0000
Manifest this update: Sat 10 May 2025 06:00:40 +0000
Manifest next update: Sun 11 May 2025 06:00:40 +0000
Files and hashes: 1: GdWQO6-P47cktCmKKEisZrhfGfE.roa (hash: Z6nlvl00PmRVPP4gBIIOTo5OQ+SqW4m3DvYkZPEOmzk=)
2: qVO6LhE7z2bZkoKlkX0beS7hTAc.roa (hash: XTXUYf4gL001nX+kLZ++ZcjMPFy332S2u/yOlN4Emdo=)
3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: ZkLrSMgLBMDmrvaclbpjhPIt1m5ZSZoYRO/plqZKhlI=)
4: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (hash: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c8:0e:c7:76:00:f7:68:c3:0a:92:01:ad:30:6f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: May 10 06:00:40 2025 GMT
Not After : May 11 06:00:40 2025 GMT
Subject: CN=70eeab12238d394889b030915a969351cbcf30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:64:41:70:2e:e6:6a:64:91:2c:ba:16:02:
16:c0:db:24:fa:91:d3:30:1a:31:cf:97:60:d4:42:
b3:ae:ec:18:79:59:c4:e9:09:17:24:32:45:ac:67:
00:20:db:14:1a:c0:59:fb:28:a6:c8:48:c2:6a:60:
2f:f3:d2:ef:2d:27:19:db:7d:13:cc:32:24:8f:97:
48:e8:b6:a4:4d:dd:e6:2e:e1:37:43:e7:e3:e7:0b:
f8:66:0e:72:d8:a5:f7:65:95:38:97:ee:8f:1c:30:
5d:f8:3c:e1:07:3a:50:57:c2:0c:73:e7:ce:2d:d6:
be:54:1c:e8:26:3b:f6:91:fd:43:db:9d:70:31:b5:
38:38:e6:d1:35:bd:b8:98:6d:42:01:bd:c6:91:a5:
d9:4f:35:af:0c:c5:6f:70:b1:9b:f5:25:ac:44:8a:
d5:a4:09:e3:8c:85:b3:ee:ef:4d:54:e8:07:9b:93:
0d:23:1f:cb:b7:5c:e4:85:b4:54:3a:7f:b8:17:51:
56:dd:f4:75:85:fc:30:75:5a:c6:8f:b3:15:a6:9a:
75:b5:b7:04:1f:2b:d6:ce:50:ea:9f:cf:9b:eb:1b:
1b:70:4e:d1:e5:f6:f8:39:66:bb:9d:a0:b8:68:62:
62:4b:63:0d:64:41:ff:62:ea:e4:dc:9a:ac:b1:e5:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EE:AB:12:23:8D:39:48:89:B0:30:91:5A:96:93:51:CB:CF:30:D9
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:66:11:ea:0e:ba:44:af:70:fa:dc:a8:b9:02:3a:cf:a5:3d:
1c:fe:e7:0a:79:bd:b9:d2:a2:18:55:ac:3d:1b:e4:4d:6d:1a:
c8:27:7a:0c:d0:ba:3c:0f:23:61:19:67:5e:aa:66:b3:fa:57:
17:c6:a4:7d:80:cd:a5:5b:2c:92:ca:2b:54:ff:03:46:62:66:
ce:ed:a8:d7:d2:85:8e:4b:62:2b:9f:2f:d5:c4:7e:7f:74:35:
b7:96:fe:d1:8f:c4:67:4f:37:63:b1:33:fa:ef:e0:52:26:d9:
1d:15:a1:88:b5:1b:68:6a:3f:5b:d4:fe:bf:3c:89:5e:ca:71:
8f:5e:79:39:96:81:8a:4c:a7:e0:c2:f1:dd:d2:ea:fc:da:90:
84:7c:61:03:35:d0:65:a5:ac:0d:4e:0d:7a:8b:91:b1:f0:da:
71:57:ba:c7:c6:6a:b4:2e:6f:15:83:35:48:d3:76:f9:6a:2d:
42:8a:1d:25:90:78:54:a1:8e:5e:92:c3:dc:a6:c1:d7:18:33:
53:75:85:8f:a4:53:d2:79:ed:85:62:8f:45:a9:3a:d3:94:8f:
22:76:fe:33:9b:da:d9:95:c1:8d:fc:9b:d8:ec:b7:3f:4d:a1:
54:8b:9a:e0:7a:af:17:9e:cc:aa:1a:99:f7:27:f7:68:eb:06:
b5:5a:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:23:32 2025 by rpki-client