Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: jWikkn9a5f9xfuZKyXHx0CZipwX6IGLsWukYjcLBXmQ=
Subject key identifier: 5E:A1:48:73:24:66:3E:66:68:22:1B:93:F9:8A:D5:73:27:A1:91:1C
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 0196515BDEFC3F1D742F8E3822F87242C397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 04:01:37 +0000
Manifest this update: Sun 20 Apr 2025 04:01:37 +0000
Manifest next update: Mon 21 Apr 2025 04:01:37 +0000
Files and hashes: 1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: ox5F5VXj1EMYVygrR3YhmRfF+VHtLZhtXWhGnJXv2g4=)
2: xNQR2jyCo-wMte68YS73m1IZ9O0.roa (hash: BWuMWNUBHZ2TpJe9eyJrXKCjlVJ/6BKirHJr21VbUdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:de:fc:3f:1d:74:2f:8e:38:22:f8:72:42:c3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Apr 20 04:01:37 2025 GMT
Not After : Apr 21 04:01:37 2025 GMT
Subject: CN=5ea1487324663e6668221b93f98ad57327a1911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:40:d5:71:59:8d:10:52:27:ad:96:53:a5:
c3:d5:60:d2:c2:e6:6d:a0:3f:3f:4b:c6:32:0d:60:
74:02:1b:4c:dd:a9:33:90:26:2d:0f:6a:51:22:00:
cd:60:95:65:55:11:a5:6a:6d:e7:33:24:9e:36:2f:
a0:f3:d5:50:e4:87:6d:bf:49:b0:c3:d5:80:ce:e2:
9e:eb:06:f2:c4:80:57:e9:63:b4:6a:06:26:e7:43:
7b:56:52:0a:cb:e4:3a:80:90:e7:64:31:ff:f1:96:
a2:ff:a7:c4:51:d7:92:60:92:65:11:55:ec:dd:e3:
b5:2b:2b:08:9b:af:46:46:eb:7b:fa:e7:9b:35:2f:
a6:58:9f:94:f9:88:46:74:54:d3:e9:e9:b1:85:ee:
37:15:e3:20:91:d1:ed:85:6d:e8:87:60:be:0e:73:
61:18:58:fd:6a:e3:fa:47:f3:3f:0b:c7:3e:5a:bf:
0e:1b:eb:53:cd:15:3c:36:dc:11:9b:aa:7f:2e:82:
24:e4:58:e8:b2:28:36:56:e6:b0:08:1e:8c:23:ff:
d4:37:4f:bf:ff:d2:0b:39:9b:e5:8e:be:86:65:1e:
be:fe:71:70:ba:da:ec:7a:63:2e:8f:31:45:4f:59:
22:4c:14:24:fc:f7:c6:58:47:89:02:ac:03:75:09:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:48:73:24:66:3E:66:68:22:1B:93:F9:8A:D5:73:27:A1:91:1C
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:d1:29:cd:1e:3c:78:08:44:d5:a8:b2:d1:7c:ab:33:78:
1e:55:51:71:3a:ed:eb:1e:d3:d5:91:a3:f4:6d:99:1b:5a:6f:
0d:be:37:8f:3d:a0:b6:d3:c6:f2:ca:26:7f:21:98:d1:ed:cc:
54:cf:d7:cf:ca:34:91:43:88:98:93:84:ea:e1:42:25:67:56:
10:2d:cb:c3:bc:c6:9a:df:13:f3:27:6b:da:82:bb:30:b2:0b:
5f:8d:40:ef:0f:12:d7:a0:8d:a6:de:9d:cc:e8:d9:a8:72:a3:
34:4c:a7:1b:7b:d5:15:f1:f2:c8:55:57:9b:83:47:c9:9c:6c:
fe:82:0a:96:e6:34:4a:9c:3f:dd:da:e5:dc:1d:74:dc:31:89:
8a:01:51:a0:e4:ff:c5:76:d8:75:a8:5f:9c:27:ef:24:51:ba:
b0:cc:e3:e8:07:1e:c7:84:be:32:22:f4:99:e4:84:06:bd:dc:
2e:ef:37:ca:e0:89:ac:e4:00:34:07:2f:46:2a:81:58:05:bd:
05:98:46:37:50:80:38:f7:08:52:3c:49:9c:a8:10:b0:3c:04:
8c:0c:ff:1a:31:28:77:be:f6:ea:82:90:3e:f9:76:87:3a:ff:
b5:71:1a:5b:11:ce:c6:aa:c6:f5:00:8f:d4:5f:55:11:aa:f8:
92:34:0a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:34 2025 by rpki-client