Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: 6sM5c/uWJNG28yV4UrNcpP3RvHcg1AvFdpeoVJg7UaQ=
Subject key identifier: FB:B0:F2:1B:56:66:7A:4A:90:99:69:C1:74:73:B3:B5:E5:6B:40:15
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 01965424F35484A3EA316DB7FA5BFA52B362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 108C
Signing time: Sun 20 Apr 2025 17:00:29 +0000
Manifest this update: Sun 20 Apr 2025 17:00:29 +0000
Manifest next update: Mon 21 Apr 2025 17:00:29 +0000
Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: ObtVtB5UfJf2Zq0S6lXRRLkU1cxkQLOpqnea6N5hAJY=)
2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:f3:54:84:a3:ea:31:6d:b7:fa:5b:fa:52:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Apr 20 17:00:29 2025 GMT
Not After : Apr 21 17:00:29 2025 GMT
Subject: CN=fbb0f21b56667a4a909969c17473b3b5e56b4015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:7b:76:db:3e:c7:fe:a9:b5:3e:4a:0c:29:
c4:72:e7:69:97:6f:a3:bd:3a:63:59:9a:b4:bf:d1:
40:23:99:80:05:fa:29:24:0a:ea:4c:8b:9f:48:9f:
be:b0:5f:24:07:c8:a8:9f:04:02:f7:d5:0a:54:33:
a9:e4:b1:29:07:5f:48:ba:48:9b:e8:99:d8:a7:5c:
29:b9:15:17:ba:00:9c:da:99:48:89:b5:ae:f9:8c:
a9:af:c9:99:9b:6a:2b:41:60:c5:28:17:cc:45:fc:
11:e2:a1:99:e2:d0:1f:41:94:ac:3a:98:70:02:e3:
ed:72:d5:e2:e4:62:89:ef:8a:0b:31:f0:8b:2a:97:
ca:31:4e:ed:09:87:e0:f4:71:91:91:29:33:d9:b5:
50:75:f4:29:49:f6:23:5b:ad:fe:ba:8c:66:0f:26:
c6:ed:8d:63:94:03:96:35:47:87:9f:45:ce:9e:3b:
45:7c:b6:93:1b:14:c7:c1:1f:d7:a1:eb:9a:42:fe:
b0:fb:61:71:fc:57:73:c6:8e:ed:88:26:36:86:c5:
37:fc:0c:e5:d4:51:12:a0:27:65:bd:ff:2d:dc:b1:
6e:2a:c9:b7:8d:b6:d9:9f:f9:5c:63:9f:71:5e:f1:
90:4a:13:85:e3:65:b6:f9:94:bf:af:08:fb:ba:69:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:F2:1B:56:66:7A:4A:90:99:69:C1:74:73:B3:B5:E5:6B:40:15
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:df:c1:1e:f3:56:e3:9f:a6:d3:25:2f:68:ac:c3:15:9f:65:
f1:30:2a:e6:af:c0:82:1e:df:ce:9c:7a:48:59:f9:0c:2d:48:
d6:bc:80:ee:3f:68:e6:4d:2d:c7:85:c7:61:63:1e:b0:33:bf:
3a:76:4b:7d:64:7f:89:35:a7:ce:2e:56:6d:91:0b:32:74:28:
21:63:de:34:ac:9e:94:69:9a:67:47:0f:86:9e:02:65:a6:4a:
d8:85:cf:71:d5:c3:71:17:0c:46:a6:bd:34:16:e7:be:bc:30:
80:7e:05:d9:2c:02:42:fb:5a:b6:56:33:e0:8b:f5:8d:25:de:
fe:b4:c9:24:1b:78:35:72:4f:a9:52:f9:0c:83:1f:29:45:e9:
90:5a:1a:31:42:07:f0:95:71:a5:3d:c4:6a:10:52:7e:77:a1:
94:bb:6c:aa:fa:18:8a:ad:67:5b:b7:9d:d7:12:04:61:69:61:
82:65:f7:90:73:5b:b6:37:c2:21:8f:8a:5f:af:7f:2a:05:8a:
f4:12:3c:59:37:c7:f3:24:46:5e:f4:59:29:66:2b:3b:5d:37:
0e:e0:d5:5f:a0:86:bd:ee:14:ec:7c:91:c9:30:36:97:d0:c5:
9c:59:50:3f:00:40:b1:fe:05:77:11:b5:23:a6:9f:08:ac:4c:
ce:64:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:27:40 2025 by rpki-client