Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File: sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier: GgOhYhojCfZGpyGQUnTEHvEwtj6iVsD6gnj0nFEz6wo=
Subject key identifier: 52:32:C6:A0:D6:9B:AF:D4:9D:B5:4E:6D:6B:6A:A5:F1:10:15:4D:26
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer: /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial: 01965E03FE9C0C4025B0CC4E94BAED616BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number: 04B2
Signing time: Tue 22 Apr 2025 15:00:42 +0000
Manifest this update: Tue 22 Apr 2025 15:00:42 +0000
Manifest next update: Wed 23 Apr 2025 15:00:42 +0000
Files and hashes: 1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=)
2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: sz2PoBTCCFqTfxPqlU/p3hLhw1uLA9dART9WWx24J64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:fe:9c:0c:40:25:b0:cc:4e:94:ba:ed:61:6b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
Validity
Not Before: Apr 22 15:00:42 2025 GMT
Not After : Apr 23 15:00:42 2025 GMT
Subject: CN=5232c6a0d69bafd49db54e6d6b6aa5f110154d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:1c:24:c9:2a:38:da:eb:f7:a1:a1:0a:f4:
1d:2f:a1:1b:15:73:26:0a:1e:8a:5d:83:e5:d9:3b:
00:25:02:c1:67:1d:21:97:e2:f6:9d:fb:9a:2a:f8:
f2:a7:58:77:15:fc:50:21:2c:82:bd:51:02:6b:f6:
5c:4d:90:3d:47:82:b2:e6:07:88:6c:eb:51:f2:a4:
0f:39:50:10:db:7c:9e:01:67:48:42:49:3a:64:49:
8f:ea:4a:ee:5e:9a:27:33:e6:c7:cc:cc:76:03:67:
28:d6:e6:98:fc:bb:0b:ff:51:36:27:92:ac:8e:5b:
4f:5c:18:55:b1:53:ef:f1:a0:08:36:ec:9e:f5:43:
8f:f1:72:25:8f:8c:ac:51:a4:18:ac:5d:46:87:13:
0c:c7:df:82:0d:92:ac:46:c6:9c:26:44:91:39:11:
d8:59:1b:68:dc:83:ec:46:f0:e0:ff:ff:6a:cd:ca:
96:dc:64:12:84:74:6b:e3:e8:8b:0c:6a:9f:14:56:
8b:6f:55:e4:4d:63:d1:f1:8a:f3:2b:4f:9a:51:55:
e8:17:8c:05:74:c5:35:19:8b:53:a6:e9:6c:c8:af:
f4:e0:c1:bf:7c:59:73:58:7c:5f:d8:4d:01:1f:67:
46:f7:c3:7d:8e:c2:39:41:8b:13:b6:9f:f0:0f:cb:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:32:C6:A0:D6:9B:AF:D4:9D:B5:4E:6D:6B:6A:A5:F1:10:15:4D:26
X509v3 Authority Key Identifier:
keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:49:52:9c:6a:86:e6:b0:88:ee:e7:cc:ba:3c:21:75:8a:
85:c7:38:ef:e6:9b:1d:30:8b:a5:74:a3:d4:62:62:3e:35:9d:
d8:ac:d7:b1:46:e8:15:5e:26:08:73:0a:ac:bb:ea:9c:07:04:
5c:07:dd:a6:bd:0c:9d:9f:d7:a3:09:14:e9:90:08:eb:e1:7b:
cf:c6:78:25:68:cf:31:ea:ab:11:f9:fb:7c:f8:dd:0c:f6:bc:
9d:ff:61:bb:38:08:82:94:ce:7e:68:39:ff:81:f1:8d:f5:f3:
85:6f:44:98:cd:14:55:5f:bb:9d:db:d7:e4:02:b6:3b:2f:24:
48:ec:d7:82:57:b1:6e:d5:c9:78:2d:61:04:28:e1:3f:72:36:
41:df:bd:eb:0e:fe:61:77:82:64:a7:a7:4b:65:41:ce:0a:1d:
41:ae:0b:79:16:d8:2e:ec:11:51:65:54:7d:03:b1:6e:bb:13:
46:23:07:43:c4:f2:b6:45:cd:aa:da:e0:41:53:a1:bf:75:1d:
7f:2f:72:ab:5a:9e:96:5c:b6:9b:61:72:72:7f:fa:e8:ed:16:
13:d6:6a:48:cb:d3:50:47:6f:48:f0:3d:55:1d:64:76:78:ac:
4c:53:75:2a:0a:e6:1d:23:5a:59:31:04:f1:52:4d:23:b4:21:
80:33:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:13 2025 by rpki-client