Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
File: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json)
Hash identifier: Mb/q5ZCTdm6q4ueWHbe0bTKBvL5batQsZaYe5/2TwKI=
Subject key identifier: 03:CF:42:9A:05:49:14:AE:E7:61:31:9D:5E:44:90:2D:72:2B:CE:0F
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial: 01951134C42E9D239486009A34DC94C45DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
Manifest number: 0D52
Signing time: Mon 17 Feb 2025 00:00:25 +0000
Manifest this update: Mon 17 Feb 2025 00:00:25 +0000
Manifest next update: Tue 18 Feb 2025 00:00:25 +0000
Files and hashes: 1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=)
2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: QLOs9DHyuyV0oQamr94axv43L2WzY/6sr+MJSFRUDKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c4:2e:9d:23:94:86:00:9a:34:dc:94:c4:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Validity
Not Before: Feb 17 00:00:25 2025 GMT
Not After : Feb 18 00:00:25 2025 GMT
Subject: CN=03cf429a054914aee761319d5e44902d722bce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:5e:51:aa:e4:a2:1d:88:6c:83:54:8c:59:
7d:34:df:65:aa:8a:fe:05:d7:1e:62:de:11:15:6c:
e2:81:20:a0:ad:f9:16:c3:d5:2d:24:43:d7:ff:24:
31:bd:0b:c4:03:a4:ae:63:83:61:44:38:76:60:9a:
7e:37:c4:3a:c1:ae:89:b5:b0:36:77:af:df:0c:2f:
26:58:c8:2b:aa:d8:0c:73:b0:be:8d:27:bf:f8:f8:
29:db:0f:d8:a0:d8:2b:f7:81:fe:fc:42:f4:90:62:
42:9b:7e:61:e8:e5:08:71:92:73:4d:e8:2f:79:7b:
8c:a6:af:4e:f4:b2:0c:88:8f:28:1b:15:cd:34:38:
78:a6:8c:cb:37:0d:0a:0b:bf:c4:93:58:ad:63:9e:
4b:16:b0:97:d4:bf:fd:4d:71:d0:34:0d:84:82:51:
7e:f6:20:e3:38:4d:82:d5:70:36:a3:0c:ef:8d:1f:
1e:97:77:4a:e3:e5:a4:84:3e:43:2c:5b:15:cd:80:
0b:8f:fa:0d:f7:59:59:13:65:48:6b:d6:84:72:8a:
8c:d2:d5:33:b9:d9:e4:f3:94:c7:16:cf:d4:6d:f3:
8c:ad:20:b8:04:62:02:fd:0f:74:92:5c:91:f7:fc:
a5:2c:0d:46:8c:78:e2:c7:78:63:e6:d4:82:bd:89:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:42:9A:05:49:14:AE:E7:61:31:9D:5E:44:90:2D:72:2B:CE:0F
X509v3 Authority Key Identifier:
keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7c:6b:fa:a1:4d:2f:0f:9a:2f:f0:5a:09:39:bc:26:99:92:
b8:9e:e1:2b:45:a9:25:f5:34:b3:23:fc:e3:25:4b:53:bf:6a:
32:07:77:7d:43:7b:b0:1d:64:56:1c:87:bb:05:23:a6:ef:65:
46:24:22:0d:09:49:ff:fc:85:ce:3b:64:2a:20:74:8a:1b:fa:
fe:0b:99:39:3d:3f:ce:00:be:42:08:a7:27:c9:97:a9:6a:40:
8a:9b:02:d9:44:b7:59:bc:8f:a0:8d:11:07:45:f2:eb:90:5a:
23:95:2c:37:e3:6c:80:1a:b1:65:b5:57:c1:b8:b0:5b:9d:4c:
39:41:8a:44:98:4e:80:86:45:0c:17:3d:08:51:8a:6f:36:57:
6b:15:ca:d9:8a:e7:dc:81:d2:19:e3:0b:5c:b9:e7:e6:5c:5e:
74:00:ba:3b:b0:56:bd:91:ab:25:2a:5d:1b:0e:74:96:f2:4d:
ff:38:47:93:cd:f8:f8:3c:0b:18:2b:0c:a3:55:7b:3b:ef:02:
70:0e:55:db:10:94:dc:bb:5e:44:7f:8c:37:f2:73:12:2a:20:
e6:33:c1:05:aa:30:9a:8e:bd:e4:bf:ec:ce:81:1f:ed:dd:fa:
f6:73:6e:44:3b:23:99:e6:fc:74:80:e0:f0:62:67:d0:3d:9a:
33:ed:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:37 2025 by rpki-client