Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: nqtKppqOVvwA4F0egIdrz9gFuiFJDGNtcbJl3NBAhGg=
Subject key identifier: 2B:3E:C2:88:56:EC:F7:60:C7:F0:6D:14:CB:67:CB:66:2C:C8:1A:48
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 019651919E1F258B2828CEE524BCBE306318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 05:00:19 +0000
Manifest this update: Sun 20 Apr 2025 05:00:19 +0000
Manifest next update: Mon 21 Apr 2025 05:00:19 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: +IhTs/CWq1tHC7QC6WyMOUmKR04HD/m3Cae9qH4FdX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:9e:1f:25:8b:28:28:ce:e5:24:bc:be:30:63:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Apr 20 05:00:19 2025 GMT
Not After : Apr 21 05:00:19 2025 GMT
Subject: CN=2b3ec28856ecf760c7f06d14cb67cb662cc81a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2b:e9:af:87:61:61:ee:fa:93:4f:b5:44:2b:
1e:84:94:37:29:92:38:ca:d4:93:38:26:d6:33:c5:
ff:ef:8c:ef:f9:54:81:70:06:0b:03:4d:e8:bb:51:
b9:cf:d7:3b:8c:1c:da:6d:2c:b8:f5:f3:44:ed:74:
e9:3d:44:61:40:87:ea:6a:af:d8:36:ec:38:6b:5d:
10:b4:db:e4:d7:eb:11:02:74:e9:be:a9:2a:7e:30:
25:8c:9e:0c:fb:01:e5:1a:ac:87:e0:8a:11:58:2b:
cf:48:5d:79:b2:70:d6:c6:48:ab:cf:9a:38:db:c2:
c4:58:ce:e1:eb:82:b3:81:cd:1d:78:a2:75:ac:7f:
10:fb:23:22:c6:fa:12:49:c1:79:d1:0b:ab:c3:12:
75:57:dc:b3:3f:15:f8:37:8a:3a:57:c5:66:c0:1c:
aa:ef:04:4d:2f:9d:d1:23:cc:08:19:da:e7:24:15:
eb:80:e4:56:ab:d1:5d:49:40:1f:7c:df:bd:15:3e:
81:2d:e3:b4:65:1a:bc:63:ca:eb:a7:30:eb:c5:6a:
3b:c1:ad:47:16:6f:55:20:a0:1a:6d:df:41:ad:4c:
44:0a:6b:37:55:09:47:0a:62:3b:88:df:9b:30:c7:
4d:6a:80:ba:e4:ea:84:dc:ae:1d:41:04:62:4a:e6:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:C2:88:56:EC:F7:60:C7:F0:6D:14:CB:67:CB:66:2C:C8:1A:48
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:51:cd:a4:e1:97:46:df:d2:db:2b:64:d4:0b:16:69:2c:89:
bf:07:20:7e:d3:7a:b6:39:94:e0:a6:ef:c4:3b:b0:00:60:91:
d9:66:d3:66:0d:b6:eb:99:e9:23:01:61:58:bb:67:49:b7:12:
9a:3f:ec:97:7e:ac:4b:66:24:01:f3:53:f3:e1:2a:d6:ab:ef:
0c:a5:8e:c4:16:87:8d:2f:56:ae:8f:14:1a:54:6f:57:d1:d2:
5f:bb:4c:1a:c8:40:24:ce:56:48:3d:1c:d2:ef:9a:61:9d:2b:
75:f6:72:a2:76:17:79:65:f3:13:ac:aa:6f:fb:72:a6:d2:13:
be:d1:5c:da:2f:46:26:01:cf:eb:93:1f:bf:95:45:67:a3:2d:
4d:9f:5c:a0:7d:10:d9:ea:a6:b8:31:c4:db:b8:56:ca:9c:5f:
25:fe:e4:55:d0:0d:2d:37:21:c5:fc:f6:34:70:d2:6f:2b:e5:
d4:7f:de:d7:8f:96:74:d8:aa:f0:36:d8:b4:42:7e:bc:b0:b8:
b5:fd:e7:09:aa:4f:53:15:f4:eb:84:03:77:c5:fe:15:47:e9:
9f:60:a5:03:ba:fd:34:9e:19:3c:4a:14:6c:15:64:e4:a3:fb:
cc:fc:d0:ac:97:cb:26:be:8e:70:b9:ae:f1:b4:fb:29:6b:1d:
ca:bf:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:08 2025 by rpki-client