Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: V6fdWf1C2zO296EluLOnAQD+Fe8uUHhZZtTq7YkD3d4=
Subject key identifier: F2:23:77:E1:4B:B6:CF:CF:27:7D:98:D9:1B:E2:37:2F:E5:81:3B:7A
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 0196572630BEAAC356A65E655BF1C2750FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 0DD4
Signing time: Mon 21 Apr 2025 07:00:42 +0000
Manifest this update: Mon 21 Apr 2025 07:00:42 +0000
Manifest next update: Tue 22 Apr 2025 07:00:42 +0000
Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: VdwHIH7qV0d50eXmUUhz0+hD8SrNS9qjtmlN5tsjFFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:30:be:aa:c3:56:a6:5e:65:5b:f1:c2:75:0f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Apr 21 07:00:42 2025 GMT
Not After : Apr 22 07:00:42 2025 GMT
Subject: CN=f22377e14bb6cfcf277d98d91be2372fe5813b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:cb:74:d3:8c:1a:5c:b3:ec:25:96:ba:ea:
2f:cd:a1:eb:ac:01:ef:50:62:ef:c6:ac:f1:71:1c:
15:fa:1a:0f:b7:9c:30:20:9c:85:9d:03:39:3a:97:
bc:cd:7d:60:3e:56:e3:4d:f2:d4:0a:88:09:28:77:
d2:ea:e8:82:5b:a0:32:63:15:ed:fb:02:28:8f:11:
7f:f6:b7:bb:5b:ae:26:ab:d2:87:5e:8b:2e:48:57:
e8:5f:63:24:b2:64:9b:6c:24:db:79:28:da:b0:ab:
6b:24:11:1d:c8:79:cf:fe:39:6f:f0:dd:26:09:16:
8e:a8:8b:be:cd:68:33:b8:b0:a0:4d:72:25:26:57:
51:af:7a:61:24:9f:56:85:80:c3:66:16:06:60:05:
f9:d9:4d:ef:99:28:05:ef:d2:3e:04:a1:9d:b7:ef:
7e:29:5a:31:b5:06:eb:81:e6:6e:7b:40:68:2e:be:
f9:6d:f4:c4:f5:11:3f:65:c8:ea:69:8b:2b:9f:ed:
c6:3a:bc:4e:87:cf:15:fb:b1:33:a0:20:83:97:48:
b3:d3:05:94:78:ab:c3:e6:aa:03:d0:8b:e3:bd:d4:
a0:00:d5:70:43:68:5a:25:e9:81:7a:75:6c:78:8c:
47:65:15:10:72:71:02:38:88:d8:ed:b2:b2:ad:35:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:23:77:E1:4B:B6:CF:CF:27:7D:98:D9:1B:E2:37:2F:E5:81:3B:7A
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c9:ca:91:19:f0:fb:5b:28:da:4d:5c:64:27:1e:6d:5d:f4:
22:55:a7:53:cd:7f:23:7d:e4:72:e3:85:b6:db:dc:4d:ab:3f:
95:38:09:14:79:4e:34:ce:dc:d6:a1:26:6a:8b:51:d0:9c:09:
d0:c8:2b:5c:23:06:e3:ac:a4:36:ed:a1:f4:b4:9c:0e:02:5c:
38:4d:47:b3:02:d4:5d:49:8f:43:b0:fd:0b:23:80:e8:af:87:
8a:96:24:14:92:19:f1:59:c2:12:b2:50:ac:eb:8a:a2:22:1c:
13:1f:42:12:ef:28:c8:03:f1:84:60:bb:6a:20:c9:3c:80:41:
fc:31:df:83:c7:1e:4c:97:a5:bf:5e:0a:72:9b:54:f1:64:81:
df:c3:f9:79:1f:02:50:89:5d:80:fb:29:7d:c7:7f:ee:b8:7e:
95:19:ed:e3:45:8b:e4:44:f5:c1:fb:bb:44:b6:6d:45:49:71:
03:a0:f2:89:07:a5:23:5d:7d:49:56:8b:2f:02:68:95:da:dc:
d1:b7:7e:7f:3a:ed:7b:ba:16:99:bc:4d:b2:d3:44:b0:fd:18:
d8:d7:f9:04:8c:74:fd:52:bc:f5:71:18:e8:58:56:13:1e:bf:
b5:91:cb:c7:ad:d1:b3:ef:62:77:38:4a:3e:79:68:06:d9:19:
33:72:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:12 2025 by rpki-client