Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: pyVU+BoRJXDRHEP2MnlRO/MDgM8+Xf9z6uBHkfOsdzQ=
Subject key identifier: 97:0F:72:8A:5C:87:E1:D7:F6:72:4A:A3:76:DE:FD:6B:3E:CC:21:EB
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 0196A0894A8E72E5AADBB55CF771933DED99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1342
Signing time: Mon 05 May 2025 13:01:14 +0000
Manifest this update: Mon 05 May 2025 13:01:14 +0000
Manifest next update: Tue 06 May 2025 13:01:14 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: bsyR0MOdJw9tint0Q2JVkG0hCYlaZ2d5XDoxXqbkRCE=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:4a:8e:72:e5:aa:db:b5:5c:f7:71:93:3d:ed:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: May 5 13:01:14 2025 GMT
Not After : May 6 13:01:14 2025 GMT
Subject: CN=970f728a5c87e1d7f6724aa376defd6b3ecc21eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:6f:f5:a1:3c:e9:0b:ea:72:42:57:eb:f7:
66:41:b1:90:87:86:ff:e1:95:8f:23:40:55:1d:a5:
7a:09:3c:1a:69:56:4d:80:9f:8b:83:4e:d0:7f:71:
a5:92:ba:a7:db:d4:e4:69:50:fa:df:e8:b8:96:cd:
bd:2f:50:86:d7:ef:7e:21:d1:84:33:31:2e:af:8f:
06:50:b6:52:12:be:86:2d:09:da:5e:a2:e8:23:f0:
ba:a2:cd:f9:ee:71:df:56:9c:53:90:c6:a5:8d:18:
0c:ee:4e:20:e0:e9:c2:b3:62:13:cf:2d:fc:89:63:
94:15:5d:42:17:7e:27:8d:18:60:f5:c2:55:b8:ea:
b0:5d:7d:db:b9:46:9b:d9:50:36:0e:a8:a2:17:80:
d8:e3:30:e2:a1:23:bc:70:b1:e1:e0:08:f1:f1:50:
37:cc:1d:32:43:7a:99:3d:3f:ab:88:7b:df:84:47:
02:89:80:1c:7a:c9:df:dc:13:2c:54:0f:c3:28:be:
11:27:f5:92:b0:bb:86:98:6c:f4:1e:6e:48:9b:cc:
3e:dd:a9:e8:80:18:f4:05:b1:8a:57:7f:3e:dd:f7:
e0:dc:17:14:52:19:e2:03:fb:77:07:1b:cc:ba:e1:
37:4e:d6:a1:0c:45:bb:70:7e:2c:fa:25:54:71:41:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:72:8A:5C:87:E1:D7:F6:72:4A:A3:76:DE:FD:6B:3E:CC:21:EB
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:71:25:c9:bc:15:79:3f:d7:fe:76:1d:ba:24:db:97:a2:22:
68:c1:c7:16:bd:1b:17:51:ae:da:35:ee:b0:aa:24:bc:ba:d8:
9c:40:24:71:36:44:19:ea:c4:6e:0b:ef:7c:f9:51:b6:b4:af:
38:05:18:e1:2a:30:b1:a9:0c:f7:b6:09:30:4c:24:e5:a1:d4:
a7:84:44:b1:82:b0:20:b8:27:f2:62:e4:9c:67:61:11:0d:27:
a4:b2:2f:2b:27:0f:db:7b:44:6f:0a:53:a9:49:a7:a9:c8:08:
40:de:ac:12:6b:27:8a:13:2d:c7:55:21:10:7e:6b:dd:4b:c0:
24:ca:9f:fb:a7:57:14:7b:13:9a:ae:9a:9b:ff:06:72:f5:dc:
df:c0:22:20:d5:7c:2b:c1:6e:19:5d:a4:70:4d:bd:a9:66:54:
48:05:fa:50:dc:cf:b9:b7:cb:64:87:4d:f3:bf:6f:5e:a7:a3:
4f:14:18:3b:bd:8e:f6:ca:86:3f:15:db:2e:38:09:b9:14:e6:
c1:dc:ba:52:0b:ad:50:ca:ac:83:35:33:29:25:00:99:30:ea:
f5:cc:1e:5a:21:78:e6:b1:75:d3:7e:7f:cb:7f:ff:76:00:a6:
41:49:d2:27:2c:49:16:ca:67:db:f0:49:9c:05:9c:89:85:3a:
5a:3e:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:27:09 2025 by rpki-client