Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier: POipdfNoyMyx6F48zK2TBJvJ6JdF5cBOKfMalTi6Ykk=
Subject key identifier: D0:5D:69:92:79:7B:AE:80:D8:8C:F2:E4:FC:F5:3A:CE:D6:9A:4F:38
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 0196C081AB1CA9CE360D02FF830686D17F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number: 128C
Signing time: Sun 11 May 2025 18:00:45 +0000
Manifest this update: Sun 11 May 2025 18:00:45 +0000
Manifest next update: Mon 12 May 2025 18:00:45 +0000
Files and hashes: 1: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (hash: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=)
2: MErMEgT0Mlg4NzXbifAxY_vYJ18.roa (hash: kZo3foZgB/DZe3VgEb3C47cfvC/YSEn388ZX35kgFPI=)
3: RUJrM9R2Q01CiiseZx6BuCkPhi8.roa (hash: ud9fyI+JnGNFQZazgaWgNO5UTDdn2ppqyRqse6KTBD4=)
4: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: RAR5dcvvG7GREphwfPti0TiVVBZioD+3hP9f36HNHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:ab:1c:a9:ce:36:0d:02:ff:83:06:86:d1:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: May 11 18:00:45 2025 GMT
Not After : May 12 18:00:45 2025 GMT
Subject: CN=d05d6992797bae80d88cf2e4fcf53aced69a4f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:b6:a1:98:81:0c:67:7d:f4:4e:07:42:40:
83:24:b8:c0:c5:b9:07:98:61:c7:78:53:9e:17:e8:
16:d8:e5:90:56:3b:cc:58:f2:a2:a5:92:f3:7f:92:
04:1c:08:73:49:98:f9:a2:c2:2a:a7:d2:d3:9f:c4:
c8:8d:ae:39:b2:e2:6c:f7:21:8b:a8:64:e0:43:55:
63:3a:c9:9a:61:eb:72:0d:b1:ba:f5:c1:a8:76:2f:
91:df:7f:ae:00:39:fa:52:19:57:87:cd:a7:b5:f3:
a2:29:5b:59:d1:c9:43:5e:80:92:a9:96:3e:40:72:
4a:fb:36:85:b8:59:8c:32:d6:7c:a1:a9:ed:79:5c:
c1:42:de:60:5d:35:63:c5:fa:88:46:d5:87:bb:37:
df:60:57:4b:44:de:89:90:07:74:b5:d0:21:2e:40:
1b:03:dc:7e:64:b8:8a:65:ea:7c:4f:5a:de:30:dd:
01:fe:7e:5b:1a:70:3a:bf:46:b8:b8:43:db:5d:40:
cc:34:8c:bd:c6:f0:20:65:ac:58:f9:fe:84:99:f9:
a3:5d:86:7a:ff:f8:9e:61:bc:ed:11:74:90:37:08:
c2:62:c5:40:aa:05:f1:ad:4b:e0:76:d0:61:37:14:
b8:bd:0a:2c:74:2f:e7:fd:fc:f1:92:9b:b4:c6:f9:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5D:69:92:79:7B:AE:80:D8:8C:F2:E4:FC:F5:3A:CE:D6:9A:4F:38
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:de:fc:5f:6b:09:c4:e8:ed:a0:ef:10:d5:05:32:07:79:4a:
b2:fb:84:0d:be:13:e5:20:20:53:e4:af:69:0a:c3:85:1c:d9:
62:3b:cb:f0:31:83:92:c0:ef:10:b3:15:65:f7:0d:2a:17:6a:
6f:fe:1d:75:62:77:c2:e6:d3:db:cc:2c:9f:8e:4e:ad:93:62:
03:83:f6:5b:d4:48:1d:ed:85:5e:59:7a:1d:2a:88:ea:83:57:
64:12:e0:a7:79:9b:1f:75:c1:88:3e:35:70:91:35:ad:b3:60:
47:be:5b:b9:74:96:5c:03:35:64:27:b9:61:e4:3f:ee:11:8c:
59:db:a7:ca:e1:19:52:f1:f7:c7:f1:a6:55:da:1d:3f:36:f8:
c6:bf:7f:5e:7a:a3:a3:c6:59:81:8e:09:f1:96:d8:b4:eb:2d:
5c:d9:40:7c:90:4a:fa:14:4b:60:df:44:2d:34:f3:87:19:15:
ce:5c:23:ca:88:3b:8d:97:de:a0:3c:75:1c:88:a4:8d:81:31:
e6:a7:14:66:1b:68:06:19:24:2c:e9:ea:c7:a7:97:83:e3:98:
ff:23:05:30:05:77:5b:66:a6:58:3c:1c:c4:d2:7d:70:46:9a:
08:2f:dc:db:a1:b7:b4:fd:06:d1:81:6d:75:a9:c2:90:05:a0:
46:03:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:26:53 2025 by rpki-client