Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: ocWbW5Y5dTFjrqU/7w1iwZ5LrY0xXWiigbwyCBJMA1w=
Subject key identifier: 6F:E3:AE:16:42:96:2C:46:09:77:F5:1A:D7:5D:42:EF:0B:64:DD:6B
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 01964BFD764775848464E70948A28786BBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 03:00:24 +0000
Manifest this update: Sat 19 Apr 2025 03:00:24 +0000
Manifest next update: Sun 20 Apr 2025 03:00:24 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: kU3yJjlgXub+bcyJ94CLor8e9mdaCtIzYdKfOU++7SA=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:76:47:75:84:84:64:e7:09:48:a2:87:86:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Apr 19 03:00:24 2025 GMT
Not After : Apr 20 03:00:24 2025 GMT
Subject: CN=6fe3ae1642962c460977f51ad75d42ef0b64dd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:bb:63:99:8a:62:89:9b:7a:3a:0c:cd:c3:
5f:cd:1f:60:20:dd:20:db:ce:7d:92:76:cd:c9:62:
59:00:4c:5c:7c:e3:75:e8:08:9d:72:c6:59:b7:00:
43:e7:07:6c:37:99:ca:69:76:73:b5:5b:ab:bf:02:
67:1c:7d:82:c5:20:9f:4f:e8:0c:94:2f:29:91:65:
f3:8f:40:38:a3:bd:01:bf:d1:e6:09:e0:40:bf:3b:
72:03:45:b5:15:8d:1a:5c:eb:b0:c8:e6:27:6e:59:
b2:cd:0c:b2:1c:8b:cc:c8:19:f8:ba:ff:29:ef:2a:
26:ce:9c:2c:8c:fa:c5:4e:aa:7f:9f:27:3f:06:7e:
fc:ac:70:b2:84:12:d1:4b:70:9a:ff:1e:f3:69:7b:
78:18:c2:cd:9d:2d:c1:86:ca:ac:b9:e7:6f:bf:69:
e4:d7:0e:ed:5a:f6:39:9c:c0:88:7d:e1:79:86:cd:
4a:00:e4:7a:37:17:71:3d:cc:27:d7:50:0c:7b:04:
96:f3:37:1f:16:e7:92:2b:cf:58:66:6f:74:69:82:
85:fd:64:14:18:16:70:b4:3a:c6:ab:d8:1c:df:aa:
80:dc:88:20:62:b6:9c:f0:14:c5:d1:31:9e:b5:0d:
4c:6e:20:a4:e5:f1:cf:db:aa:61:a5:14:9f:fa:41:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:AE:16:42:96:2C:46:09:77:F5:1A:D7:5D:42:EF:0B:64:DD:6B
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:25:d2:0b:ad:3c:ac:ba:99:ef:cb:dd:12:01:88:25:43:
2c:57:ef:36:1a:06:f4:a2:8a:79:d6:b9:19:b4:d0:19:bf:5e:
d1:8c:dd:ba:92:c6:db:ad:02:7a:35:a7:d3:6f:10:52:3d:43:
64:a0:24:a7:76:d5:54:06:0d:23:ca:1b:fd:84:fd:56:55:8f:
97:90:b3:dd:d2:25:10:f5:06:1c:3b:86:c4:a2:ef:f6:35:7b:
9f:5e:dc:cf:52:d6:20:b1:da:db:2e:db:50:33:cf:d4:ea:d0:
0a:2a:d8:9a:6b:f5:ac:8f:61:5b:42:ec:cc:ce:3f:67:b9:6a:
63:40:74:9d:a6:57:ad:84:e8:76:7a:8f:74:32:e0:13:ce:b3:
9c:73:d2:ab:24:58:92:e4:78:74:87:9d:3b:21:bb:0e:dd:1e:
a6:ec:88:28:30:67:98:47:bc:1f:36:3b:1f:f0:bb:ce:ca:c7:
b2:4b:40:eb:39:f5:68:40:1d:ec:10:66:7e:60:7d:e0:91:2f:
2e:d9:70:ab:15:b6:30:87:71:56:ed:32:7c:48:cf:2e:c0:5e:
e5:f9:83:74:26:f7:c5:65:db:77:3e:c6:61:ef:6f:af:61:c8:
5b:23:8c:ac:0a:5f:1c:b1:78:b2:3d:ca:b3:45:e9:a7:01:84:
fe:c5:2b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/XZHdYSEZOcJSKKHhrvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NmIwMDU4OTcxZDI5OTNhNTdhNWIxY2I2Y2RmZjVkMmVi
NDRlM2YwHhcNMjUwNDE5MDMwMDI0WhcNMjUwNDIwMDMwMDI0WjAzMTEwLwYDVQQD
Eyg2ZmUzYWUxNjQyOTYyYzQ2MDk3N2Y1MWFkNzVkNDJlZjBiNjRkZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuri7Y5mKYombejoMzcNfzR9gIN0g
2859knbNyWJZAExcfON16AidcsZZtwBD5wdsN5nKaXZztVurvwJnHH2CxSCfT+gM
lC8pkWXzj0A4o70Bv9HmCeBAvztyA0W1FY0aXOuwyOYnblmyzQyyHIvMyBn4uv8p
7yomzpwsjPrFTqp/nyc/Bn78rHCyhBLRS3Ca/x7zaXt4GMLNnS3Bhsqsuedvv2nk
1w7tWvY5nMCIfeF5hs1KAOR6NxdxPcwn11AMewSW8zcfFueSK89YZm90aYKF/WQU
GBZwtDrGq9gc36qA3IggYrac8BTF0TGetQ1MbiCk5fHP26phpRSf+kFZbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/jrhZClixGCXf1GtddQu8LZN1rMB8GA1UdIwQY
MBaAFElrAFiXHSmTpXpbHLbN/10utE4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1dzQVdKY2RLWk9sZWxzY3RzM19YUzYwVGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kNTVkYzEtNzYwNC00YzhkLWExYjQt
MzlmOGUyYjQ2NzVkLzEvU1dzQVdKY2RLWk9sZWxzY3RzM19YUzYwVGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kNTVkYzEtNzYwNC00YzhkLWExYjQtMzlmOGUyYjQ2NzVk
LzEvU1dzQVdKY2RLWk9sZWxzY3RzM19YUzYwVGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNkl0gut
PKy6me/L3RIBiCVDLFfvNhoG9KKKeda5GbTQGb9e0YzdupLG260CejWn028QUj1D
ZKAkp3bVVAYNI8ob/YT9VlWPl5Cz3dIlEPUGHDuGxKLv9jV7n17cz1LWILHa2y7b
UDPP1OrQCirYmmv1rI9hW0LszM4/Z7lqY0B0naZXrYTodnqPdDLgE86znHPSqyRY
kuR4dIedOyG7Dt0epuyIKDBnmEe8HzY7H/C7zsrHsktA6zn1aEAd7BBmfmB94JEv
LtlwqxW2MIdxVu0yfEjPLsBe5fmDdCb3xWXbdz7GYe9vr2HIWyOMrApfHLF4sj3K
s0XppwGE/sUrsg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:03:04 2025 by rpki-client