Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
File: SFNVcGg2xtB8f9JdW1nbC22JT7U.mft (raw, json)
Hash identifier: c3vHs+1d3weOlqV+DeKW91Skb1NOoEASBA2XN+SV8IA=
Subject key identifier: 9B:5A:30:E6:62:A1:E2:B3:2B:C5:C4:08:5B:3B:E5:14:77:3B:DF:6B
Authority key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Certificate issuer: /CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Certificate serial: 0196451F96FFCC5CFB790E4B4A160B5A2FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
Manifest number: 0890
Signing time: Thu 17 Apr 2025 19:00:19 +0000
Manifest this update: Thu 17 Apr 2025 19:00:19 +0000
Manifest next update: Fri 18 Apr 2025 19:00:19 +0000
Files and hashes: 1: SFNVcGg2xtB8f9JdW1nbC22JT7U.crl (hash: at1OAEYpJtXUDC8VDWF6CobRnPh20IgRZM+qlw5d5dQ=)
2: xMvpgjkxKbx_nJXqKUz8HP8cBlY.roa (hash: xpvtl/jAMstPAGZTh7RwpFcbxDqkgPOXgahD3aZqXp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:96:ff:cc:5c:fb:79:0e:4b:4a:16:0b:5a:2f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Validity
Not Before: Apr 17 19:00:19 2025 GMT
Not After : Apr 18 19:00:19 2025 GMT
Subject: CN=9b5a30e662a1e2b32bc5c4085b3be514773bdf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:26:8e:3d:ad:66:81:4a:12:01:90:96:59:
ee:31:35:85:7c:94:3a:be:f6:54:74:18:f0:0a:05:
9e:d8:46:92:30:0d:dc:f6:cd:9d:d9:ab:1f:43:7f:
42:f1:fc:a2:c0:9a:dd:18:fe:12:34:4e:42:60:57:
88:d1:52:1b:45:3c:a0:eb:9f:e7:91:17:6d:58:c1:
7b:21:97:9b:ca:c1:c7:8c:1e:43:61:b5:3d:95:27:
2c:f3:25:02:23:bb:42:39:4e:79:6c:33:25:25:40:
2e:5f:52:a1:01:62:d4:a6:68:aa:16:2c:0b:8f:74:
40:18:5d:28:bd:5d:51:03:4a:cc:97:78:00:fb:02:
d1:98:6f:17:36:e4:ed:b3:7c:44:62:02:75:e8:2a:
04:a1:8e:84:b8:89:4e:4b:76:f3:66:c9:11:1c:f1:
5a:e1:8c:c3:6f:48:0c:43:2b:96:e2:d0:56:5b:cc:
00:32:1e:32:77:2a:01:90:be:f6:b6:b0:8b:cd:b1:
c8:86:64:e4:95:19:ec:fc:b6:e6:86:74:cb:7d:ef:
a4:e9:ff:a6:41:75:20:b9:b5:df:cd:54:ff:6e:77:
01:56:05:89:da:13:9e:ba:b8:9d:5c:0c:51:7a:bd:
4d:64:5e:f8:54:93:90:f1:f3:f7:8a:ce:30:9f:f8:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5A:30:E6:62:A1:E2:B3:2B:C5:C4:08:5B:3B:E5:14:77:3B:DF:6B
X509v3 Authority Key Identifier:
keyid:48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:89:fe:d1:17:a7:66:36:d6:dd:14:05:fc:ec:f0:d9:e7:a5:
51:32:2e:ca:97:c0:74:23:83:0e:f2:f8:89:1c:2b:b1:dd:30:
56:62:6c:70:c5:2f:db:84:6f:91:c1:80:7f:13:0c:79:57:06:
ed:76:c8:d8:c1:7a:af:9e:5d:ab:81:5f:fb:1f:ba:64:fc:37:
b8:8e:70:af:50:2d:ec:4b:12:4c:d3:80:a4:fd:52:32:7e:1b:
39:e4:bc:ac:64:63:fa:94:67:a9:75:6b:09:89:bd:ee:f9:91:
92:9a:20:cb:16:89:89:db:5e:4c:08:a9:4f:40:f2:62:1f:2e:
64:a7:5f:4c:84:7a:f2:a5:72:62:8e:8c:66:de:92:c1:9e:8b:
36:7e:6f:6a:38:bf:a2:96:e4:cb:af:f4:13:dd:ee:51:d5:e1:
50:36:bb:bf:2c:4d:79:f0:84:04:51:4d:70:9d:fd:f4:5b:40:
6a:28:28:4d:5a:1c:b4:11:b4:23:c8:50:40:3b:9d:98:17:b9:
8e:89:37:6d:0f:17:32:74:48:8e:79:93:f0:eb:41:7a:b0:36:
b8:c6:ca:e4:3e:9f:5c:37:30:77:52:a5:ac:0c:f3:d6:ef:d9:
15:2f:c4:89:16:fd:04:1a:45:8e:c4:1f:42:4d:71:4c:b8:fd:
be:fc:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:29 2025 by rpki-client