Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: EAzvn5h/JaaN3CuZni0fReIfVdcY0PwP68xKDmofaNg=
Subject key identifier: DA:87:CB:D7:BF:94:75:AF:8D:60:10:4F:D3:C1:B2:B3:4C:DD:2C:10
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 0196B2C5DBC9E835F9EBD039A96ECE4B225C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 14E6
Signing time: Fri 09 May 2025 02:00:33 +0000
Manifest this update: Fri 09 May 2025 02:00:33 +0000
Manifest next update: Sat 10 May 2025 02:00:33 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: Hqddz6F70/TopwMq8ozYPJc6vgq4jnMQzygLiZq83cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:db:c9:e8:35:f9:eb:d0:39:a9:6e:ce:4b:22:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: May 9 02:00:33 2025 GMT
Not After : May 10 02:00:33 2025 GMT
Subject: CN=da87cbd7bf9475af8d60104fd3c1b2b34cdd2c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:34:ee:a4:5c:84:62:c3:5f:40:99:ba:a1:
1c:0f:89:17:ee:c4:22:ab:59:b0:61:e9:8d:71:b5:
ad:6d:2e:98:d8:0a:a9:4b:0b:92:8e:db:c4:f9:98:
6c:70:05:79:fa:0d:c1:b4:d5:27:16:44:89:84:76:
30:13:ed:d5:8b:40:0f:de:dc:02:29:75:09:a3:ee:
1e:cf:fe:98:52:76:e0:f7:fd:87:35:d6:c5:a5:75:
e3:76:dd:40:15:cf:97:a7:19:ae:1b:74:ea:36:57:
98:93:d8:e6:40:86:c7:70:fd:a7:63:21:d4:24:14:
76:d9:d8:08:77:33:7b:e1:64:31:15:62:5b:06:36:
54:e6:e3:05:76:ef:f2:a7:c7:05:ca:4c:8a:58:f5:
94:0b:34:5e:21:71:a1:ef:3d:b9:dc:69:17:cf:ae:
03:1c:61:bd:36:f5:57:10:45:d6:23:e6:8d:99:b1:
81:02:41:9f:30:2d:b2:25:78:50:d0:34:a8:d8:39:
28:c9:89:2a:b0:3e:58:de:40:cd:07:0a:11:49:d9:
2a:1d:a2:b4:49:2f:9b:2a:83:81:35:0f:ad:32:3b:
fd:24:23:f5:8b:c8:e5:ff:28:1a:91:32:9c:9a:be:
42:c4:78:74:9a:0e:c8:58:7a:cb:31:6a:2d:de:7c:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:CB:D7:BF:94:75:AF:8D:60:10:4F:D3:C1:B2:B3:4C:DD:2C:10
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:52:13:d2:99:ac:9f:7c:e8:36:40:79:c5:7b:8e:1e:3a:a0:
b7:88:57:b5:17:e6:5b:37:76:04:c2:09:42:ca:fd:c3:33:a2:
e1:31:a1:c6:82:d0:32:d4:b5:f7:61:32:90:c4:84:01:7f:52:
f5:ba:8d:59:04:00:79:ad:97:08:7e:b9:6e:fb:2a:d3:72:f8:
41:a6:b4:b0:ad:7d:29:e4:71:c1:34:06:a8:dd:c0:41:f0:64:
61:e7:2f:66:62:ac:5a:73:dc:71:18:40:75:f1:88:57:ca:76:
16:28:b7:4e:fa:02:41:6d:9d:ef:18:3c:bb:cf:86:53:91:6a:
8e:5e:d3:c9:b8:e5:05:4d:76:e5:63:3f:9a:da:9b:9b:64:5b:
12:26:a9:dc:af:49:ed:0e:be:bf:34:c9:e7:c6:65:cb:58:b0:
18:21:16:81:ba:44:87:4c:17:40:16:c1:54:e1:12:87:d7:8a:
3e:60:31:a5:47:3e:d1:52:16:47:13:32:fe:13:08:b5:fd:19:
de:e3:71:10:e0:e2:fc:e6:c3:ae:7e:73:19:25:54:2c:0b:84:
7b:0d:16:02:26:cb:be:32:59:3d:20:ab:10:ab:3b:ef:15:13:
31:cd:ba:b6:91:09:57:94:dc:0d:a5:3f:4a:86:f7:03:42:22:
33:e3:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:23:25 2025 by rpki-client