Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: m/OeXk12oJdlHgA51KBG+IojG0whW9KP8VkLQJwqOcc=
Subject key identifier: B5:DB:8C:29:47:9D:CD:B5:06:92:FC:EC:7D:12:2F:EA:C7:AA:03:47
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 01969F3EF624BB5714D2747E87FBCE0DE08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 0F1F
Signing time: Mon 05 May 2025 07:00:25 +0000
Manifest this update: Mon 05 May 2025 07:00:25 +0000
Manifest next update: Tue 06 May 2025 07:00:25 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: XxxXFWabK1yopu7pDQoRiF1bFdeohmSlx4jMbH4Muu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3e:f6:24:bb:57:14:d2:74:7e:87:fb:ce:0d:e0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: May 5 07:00:25 2025 GMT
Not After : May 6 07:00:25 2025 GMT
Subject: CN=b5db8c29479dcdb50692fcec7d122feac7aa0347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:f5:4b:f5:cd:5f:36:dd:14:99:9d:c3:33:
eb:d0:db:69:6a:9d:a8:4a:60:d9:0d:e5:73:15:4f:
b1:49:17:82:54:f9:98:ef:2a:97:31:a7:f4:ef:34:
90:12:2a:ce:77:89:07:55:c0:26:8e:d8:b8:59:2f:
ed:b3:12:4c:11:f9:20:dd:88:db:f9:6d:ea:aa:77:
48:40:c4:d8:bd:86:29:ee:3c:f7:e6:ad:9b:7a:ab:
90:99:7f:a9:9a:55:5b:e3:4f:2d:08:f2:73:d1:63:
0e:4d:f9:a0:39:14:f6:c8:57:8d:19:d2:75:61:75:
ac:8c:32:9f:e7:8f:cc:1e:95:94:c9:1a:14:75:43:
3e:7b:37:6b:42:e2:55:96:4d:3e:68:29:10:96:ad:
7c:49:b9:8f:aa:ea:20:c0:b6:b7:f0:57:b6:ff:3d:
d7:0a:49:d4:a2:99:51:e4:87:a9:4f:ff:67:ec:06:
74:8e:95:d2:a3:cb:ec:b6:9e:05:54:d2:ae:72:78:
86:f0:cd:79:54:be:72:b3:95:80:1c:15:e3:ba:12:
a4:d7:27:2c:ff:c2:98:45:27:b5:2f:5b:d9:d8:b9:
48:cc:23:58:35:eb:6d:98:fb:7b:a5:82:a2:09:8c:
86:c1:d1:09:d8:eb:4d:19:1d:3f:71:3c:4e:b9:17:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:8C:29:47:9D:CD:B5:06:92:FC:EC:7D:12:2F:EA:C7:AA:03:47
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e2:9d:8a:ab:3d:15:2a:fc:31:a1:10:dc:5e:62:9b:62:01:
35:dd:b3:50:5d:f9:74:b0:56:84:a5:b7:77:56:a6:85:7e:0a:
0b:c6:a9:60:1f:80:39:b3:eb:eb:eb:fa:b4:7c:86:73:2b:3e:
68:61:a1:c8:48:c7:99:86:df:26:4e:f1:81:ad:1d:9e:17:99:
91:c2:78:f2:76:6a:cc:33:0a:83:60:6f:d9:34:e4:96:28:6f:
94:26:8a:64:7b:ab:1e:97:55:c8:c5:b0:b6:ea:bb:9c:27:82:
96:2e:4b:4f:6c:86:fb:4b:e3:25:3b:84:b5:7b:82:a2:b4:91:
fb:64:43:a5:f6:17:76:a3:41:af:7a:0b:b5:de:a1:3b:60:5e:
85:9d:25:6c:ea:d4:81:39:02:81:5f:fc:26:0d:0a:0a:79:f4:
d8:e6:1f:6b:5d:28:e8:6b:55:0b:fd:4b:df:b7:29:62:f8:5a:
34:ba:6b:80:31:be:d3:c7:e3:c4:d4:06:61:ea:07:ae:73:4e:
8f:a1:40:6e:72:46:79:41:f5:d1:26:08:5c:8b:86:3e:25:50:
c5:e6:2a:8f:24:e3:5e:c0:d4:ba:7d:a0:5d:12:b8:a3:9b:2f:
2e:16:4e:7f:30:6e:7b:a3:30:60:39:06:6a:d5:00:cc:19:c8:
19:84:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:30:20 2025 by rpki-client