Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: kQilMLY2zjuAicvKelrmLigi0K1WwaIJyHWdLoQ+WfM=
Subject key identifier: 21:4C:D9:82:36:C1:77:72:9B:9B:5F:BE:2D:B3:8B:4B:92:3C:27:37
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 019655DD2D9A346098677BFC5905FAC79E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 0EF9
Signing time: Mon 21 Apr 2025 01:01:20 +0000
Manifest this update: Mon 21 Apr 2025 01:01:20 +0000
Manifest next update: Tue 22 Apr 2025 01:01:20 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: ktObxuxxEBsqEsIdvAEJLpDl3zdtYgfb1OCh6gSRFuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:2d:9a:34:60:98:67:7b:fc:59:05:fa:c7:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Apr 21 01:01:20 2025 GMT
Not After : Apr 22 01:01:20 2025 GMT
Subject: CN=214cd98236c177729b9b5fbe2db38b4b923c2737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:99:98:9a:73:e9:7d:30:e8:98:5d:6b:6a:
6d:0f:18:a9:9a:dc:8a:fe:1f:cc:dc:f5:8c:5a:d5:
47:a6:89:45:9f:e5:73:e3:bf:43:26:97:00:0b:ea:
43:f0:72:52:e4:dc:b3:91:e4:d0:c1:ab:0f:4c:c8:
71:8f:58:dc:ba:f5:ba:02:83:1d:c3:5e:6d:b9:02:
bc:21:48:a9:55:ba:22:76:3e:b5:e4:74:6c:30:7d:
af:c1:c8:46:2e:01:fb:b9:9e:c0:6d:0a:dc:48:f0:
99:7a:8b:f5:1b:4b:2b:1a:c5:a5:ed:14:1c:9b:d6:
1e:f3:a2:fe:0b:27:58:ae:b0:25:60:10:c9:61:1f:
9d:2b:57:e8:6d:9c:75:e6:d5:62:e3:e2:28:e0:b5:
e8:5e:e6:5c:6a:3d:d4:1c:50:b9:e9:61:45:f1:8c:
af:6d:6e:88:1e:79:c4:e4:81:96:44:59:cf:3b:c1:
0f:15:e7:3e:8b:1c:ac:7e:c0:67:26:3a:a8:42:08:
8a:34:6d:dc:36:e1:00:db:20:ea:b9:f3:d0:df:05:
d5:bf:5d:cd:f0:84:1f:80:ed:a8:c1:c9:e9:4d:99:
0a:26:a5:b7:fe:dd:2e:dc:d6:61:d7:8f:c2:03:96:
7f:c0:3e:33:0f:81:15:1c:a0:6e:ad:ba:74:20:81:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:D9:82:36:C1:77:72:9B:9B:5F:BE:2D:B3:8B:4B:92:3C:27:37
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:15:2c:17:d7:d2:5c:41:a6:2f:71:a4:c2:51:27:b5:db:b5:
df:09:98:4c:dc:04:f1:ac:be:eb:1b:a2:6c:4a:b8:63:ff:a1:
9c:d5:df:30:87:27:df:76:df:2a:9f:34:ea:cd:93:42:75:0b:
17:54:5d:b1:77:94:a9:5a:69:b3:89:31:56:c8:84:60:af:37:
d6:54:df:85:f7:a5:9d:20:5b:f1:67:7a:94:80:76:84:3f:8d:
9e:e8:7d:67:91:be:d2:8f:4b:68:32:63:00:fe:ca:6a:8f:4b:
d2:bc:5c:2a:65:46:4c:3a:7e:99:e4:fc:5e:e4:c8:71:35:c7:
85:96:c8:fb:66:60:a7:d2:08:8a:2a:b9:8a:53:a4:37:78:c6:
f8:1f:09:f5:d9:53:8a:29:da:6a:45:10:95:b8:5a:db:45:f7:
47:a4:c4:3d:f5:31:ad:c5:50:d2:ab:c5:70:ef:6f:c3:cc:b2:
b4:bb:3a:37:67:9b:75:4d:91:50:59:55:28:ce:c3:6c:0a:b3:
f3:01:dd:c8:e1:58:2b:24:6a:10:92:a2:89:d5:bc:78:81:62:
dc:17:ec:fc:05:02:80:34:02:90:f8:2c:8e:b1:b2:4b:57:b4:
c7:91:2b:54:5f:9e:d8:72:ce:4e:5f:52:63:20:30:b9:15:a9:
bd:14:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:13 2025 by rpki-client