Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: oyHu9IH5ai2xMohDjDOKp1sh1RYXexJ8kCqf/FBgxkU=
Subject key identifier: 8D:42:E6:0C:E1:1D:CB:AD:02:B6:36:41:E7:55:2C:B0:2D:C0:40:F4
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 01965C4CAFDF8B4BFE71E16FBB560A0FDF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 0124
Signing time: Tue 22 Apr 2025 07:00:51 +0000
Manifest this update: Tue 22 Apr 2025 07:00:51 +0000
Manifest next update: Wed 23 Apr 2025 07:00:51 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: pRXTPLiwWUo9FTBgOBdLceLv4+WDrjbhYVVbYS0LpY8=)
2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:af:df:8b:4b:fe:71:e1:6f:bb:56:0a:0f:df:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Apr 22 07:00:51 2025 GMT
Not After : Apr 23 07:00:51 2025 GMT
Subject: CN=8d42e60ce11dcbad02b63641e7552cb02dc040f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:a4:26:2c:c4:12:27:bf:59:d8:e8:07:51:
aa:de:16:fd:0e:5c:76:c4:ec:6b:9e:75:71:11:39:
a7:17:8e:f8:cc:49:d8:47:52:a3:ab:c0:47:4b:3e:
b3:8f:f8:8d:4d:35:35:4f:e7:b2:9d:0c:5c:7e:59:
22:24:4c:0a:27:1b:16:13:d3:d4:50:23:06:89:29:
23:43:c9:46:16:f2:a1:70:d4:42:83:ee:17:65:1c:
42:be:0c:b5:d5:d7:aa:d9:32:c8:66:c9:d4:88:0e:
a2:c9:e3:9a:7e:2f:50:13:a4:29:c5:25:40:ef:71:
bc:0c:10:bc:9b:08:58:2c:4e:9d:75:1a:6c:3d:c3:
be:2d:45:a3:de:90:3f:08:79:3b:1e:b0:22:88:bc:
ad:1d:39:6c:65:fa:88:aa:e3:f4:57:a0:4a:51:9c:
6c:76:ac:ee:c1:59:32:ae:fb:35:08:ee:dd:86:c7:
81:f7:f8:79:7b:94:2c:e5:58:75:5e:ad:63:92:5d:
17:27:b9:02:69:15:48:86:c3:e8:2f:69:62:3c:eb:
7d:81:e5:d8:4f:22:c1:6e:d9:5a:47:e3:8d:ba:dd:
b4:cb:4c:8e:a4:d1:be:09:0f:bd:53:48:b1:5f:17:
49:f9:50:b4:bc:e1:37:9d:bc:f5:ab:a3:23:8c:77:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:42:E6:0C:E1:1D:CB:AD:02:B6:36:41:E7:55:2C:B0:2D:C0:40:F4
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b7:a2:ff:3e:fd:34:e9:56:bc:3e:0d:ff:50:ab:1f:df:0f:
9e:b7:65:23:61:46:4f:0b:b6:f7:ad:65:bc:67:35:7a:e4:80:
51:73:a0:13:fe:71:91:44:de:b9:36:f8:93:32:c0:72:c1:c4:
06:e3:a3:f0:c6:a5:6b:16:e5:01:f3:2e:f5:0f:00:ff:78:74:
cb:0f:91:03:96:a5:45:df:88:15:83:8f:0b:9c:88:73:bd:e8:
f7:db:e4:ae:11:ef:1d:07:88:54:6e:40:1c:db:db:22:d0:7d:
77:af:2b:9b:6b:0c:1e:4f:f7:63:cb:ef:05:bc:90:1b:3d:54:
d0:49:11:f9:86:48:35:47:c3:81:2b:84:bd:08:81:c0:32:e8:
13:10:55:96:9b:4b:d1:7b:53:2b:00:04:23:09:b1:2c:9f:7a:
d1:dd:d3:e9:52:87:e4:c7:dc:d2:3e:a2:96:1f:f2:17:47:d1:
f7:f0:54:f7:06:ca:28:c4:ed:13:c9:55:d2:41:82:5b:11:bd:
b6:22:47:c6:5e:e8:3d:75:5d:c3:c8:04:3b:10:37:15:50:92:
29:5f:89:6c:a7:98:83:cd:af:42:ca:6f:32:2b:c3:ba:ce:bc:
aa:fa:7e:b2:4e:b8:31:50:f4:d3:c5:2b:b0:24:30:c0:58:a2:
ca:ba:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:57:14 2025 by rpki-client