
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
File: szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json)
Hash identifier: wUnwgFhEDEmiJ93/Y6XXKg3ES3QCFmhElRfofu0Om8I=
Subject key identifier: FD:CC:68:A2:E6:C9:24:3C:24:DA:C9:A9:6F:24:6F:EF:34:4B:23:66
Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
Certificate issuer: /CN=b334784aa4a199d7c36c73a265ed094b218381c3
Certificate serial: 0196A2E5636B99E19E2392CE4DC427F3F2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
Manifest number: 0CF9
Signing time: Tue 06 May 2025 00:01:04 +0000
Manifest this update: Tue 06 May 2025 00:01:04 +0000
Manifest next update: Wed 07 May 2025 00:01:04 +0000
Files and hashes: 1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: vrD4jXfLt3diTvIHpMhR8FD0KgKBpBMfnakPnOSAwjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:63:6b:99:e1:9e:23:92:ce:4d:c4:27:f3:f2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3
Validity
Not Before: May 6 00:01:04 2025 GMT
Not After : May 7 00:01:04 2025 GMT
Subject: CN=fdcc68a2e6c9243c24dac9a96f246fef344b2366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:07:1e:25:12:eb:82:cc:55:f3:56:0b:c4:
96:07:ed:55:8c:31:93:50:9f:fe:42:60:37:73:e0:
b1:75:31:7f:bd:85:2f:7d:0b:f3:f3:ab:28:93:8f:
8d:de:2c:fc:b3:9b:a9:be:e2:31:5d:7c:e7:b5:33:
dc:18:06:df:47:4f:4e:39:c1:fd:1a:5e:c6:6f:42:
55:8b:22:ac:60:c4:9f:9e:f7:5d:42:88:a8:ec:45:
e1:38:52:74:67:5e:94:fd:61:bb:36:2f:16:aa:af:
c7:5d:1b:5c:17:b0:4e:87:a1:38:00:0c:7d:47:6d:
ee:dc:7c:2a:4e:e7:8f:90:85:8a:96:b8:90:de:31:
1a:ad:49:72:60:8e:ee:3c:4b:59:a3:91:a8:dd:c4:
d1:0e:cf:50:b1:28:06:82:1f:3f:f5:93:2f:22:24:
e9:72:ee:83:6f:a1:0a:eb:39:b9:d9:bb:4e:fb:b8:
45:4c:ea:aa:2a:af:37:3d:d0:11:df:70:62:94:6e:
d1:79:20:21:4a:84:2c:d1:80:f3:bf:d0:27:4e:c8:
44:e2:52:4e:e0:d5:0f:d3:c2:e3:58:66:17:07:12:
f5:e5:c3:5f:28:43:b1:53:74:5e:87:a4:01:31:1a:
e5:67:c2:45:d9:6f:6a:f4:30:9c:88:af:a8:ca:f7:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CC:68:A2:E6:C9:24:3C:24:DA:C9:A9:6F:24:6F:EF:34:4B:23:66
X509v3 Authority Key Identifier:
keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:80:8d:4d:10:35:3f:16:8f:d7:4c:b9:dc:da:4c:84:5c:
4f:6c:e2:bc:37:1f:50:36:f0:40:7a:89:b6:7e:ae:b9:c2:11:
89:a4:0e:be:50:62:29:50:83:ef:75:e4:42:13:bc:93:27:d6:
fa:df:64:fe:11:d3:ba:e7:a6:af:09:3e:10:92:f6:d6:90:9a:
85:de:2b:13:a0:04:47:2a:8f:80:c0:1d:9f:d3:61:36:5b:02:
6a:56:b1:8a:d9:a8:11:29:2e:c3:99:a5:d2:92:ea:17:93:31:
80:95:32:57:0b:ea:b2:28:fd:9b:eb:0f:e1:19:e7:58:12:c5:
2f:ea:51:38:be:50:33:55:2c:7d:14:30:24:2d:2b:b8:1c:fc:
18:ae:35:d5:4c:9a:7d:a4:e8:23:b9:1a:fa:59:b5:ba:3d:43:
eb:2e:45:44:af:4b:77:ac:0f:49:00:e6:a8:b2:05:68:b8:97:
46:98:47:2b:db:ae:7d:d9:f2:a8:d0:9d:0f:f4:44:19:e5:c6:
92:a6:0c:26:54:6d:b8:7e:7f:fc:d2:59:bb:42:da:8a:10:96:
a0:95:2a:df:02:b8:90:b3:4a:16:6b:d0:54:41:23:29:51:c6:
cf:59:6b:f4:8c:7d:a9:78:1a:13:88:57:e3:bd:35:98:fc:14:
51:0c:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:21:37 2025 by rpki-client