Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json)
Hash identifier: RTaWfaRc/4+46A7WvQBioQJuNg1skFsNETYHkMsJkw4=
Subject key identifier: B0:2D:7D:82:9C:40:52:9E:2E:DF:04:50:D8:D9:FE:A4:A0:D0:A1:FB
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 01964F6D33A70AB77CF36E04E41CCF8D812E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
Manifest number: 148E
Signing time: Sat 19 Apr 2025 19:01:18 +0000
Manifest this update: Sat 19 Apr 2025 19:01:18 +0000
Manifest next update: Sun 20 Apr 2025 19:01:18 +0000
Files and hashes: 1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=)
2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=)
3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: UGRt/M4BM9no0N1wHyZkExwGBzZ8m4xJHip11qDFA38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:33:a7:0a:b7:7c:f3:6e:04:e4:1c:cf:8d:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Apr 19 19:01:18 2025 GMT
Not After : Apr 20 19:01:18 2025 GMT
Subject: CN=b02d7d829c40529e2edf0450d8d9fea4a0d0a1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:07:31:b2:10:66:88:93:db:f1:c8:10:d9:
30:ac:27:60:0f:52:18:50:e8:28:66:c2:f5:82:a9:
18:69:8c:db:bf:9c:02:a5:4f:f3:25:75:4c:db:90:
d6:fe:23:0d:ca:ed:fe:0c:83:50:39:7e:c5:45:89:
3b:3e:43:55:0d:c9:31:fb:c9:22:5a:80:09:7f:8d:
c2:da:28:b3:aa:cb:2e:99:67:7b:a8:09:40:73:a3:
51:08:29:ec:c7:e2:f0:a8:86:3d:fe:6f:a7:4a:95:
94:76:b5:e9:d4:ea:e9:4e:f4:82:07:31:28:04:80:
4a:49:54:46:5d:26:e5:05:81:ab:c3:1e:ce:e4:bb:
0d:65:1c:24:fc:a7:30:a8:e6:3d:19:40:d1:8a:f5:
ba:a1:60:82:7c:9f:95:1e:c6:f8:67:63:e3:fb:79:
25:58:39:1b:c8:ac:03:48:ef:98:71:4d:93:08:9a:
e1:c8:aa:d3:58:01:a9:4f:41:c7:c5:81:7e:5b:e5:
e2:98:f1:66:f3:51:b2:bc:87:ae:4b:7e:df:f3:eb:
4e:26:6d:74:a5:4a:06:fe:50:5f:af:88:b3:33:5b:
eb:df:fe:9d:e5:df:96:22:c1:a1:00:35:61:f2:45:
c1:bc:54:ad:49:db:57:41:db:35:6a:20:ca:b2:26:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2D:7D:82:9C:40:52:9E:2E:DF:04:50:D8:D9:FE:A4:A0:D0:A1:FB
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:e0:c8:43:66:c0:ee:1c:22:fa:5a:91:91:e5:f4:91:1d:
54:c5:81:5e:f5:bb:f5:97:74:88:e3:12:73:5d:b9:b9:5b:40:
6e:42:b1:2b:5b:4a:17:42:32:77:7d:2e:80:64:0c:cb:86:c2:
fb:ca:75:26:ec:25:58:3a:31:78:ef:71:d8:c4:44:27:16:af:
a5:b7:ba:0a:4c:9b:ea:a7:c5:91:46:96:5a:89:6b:9c:74:1a:
86:c4:fd:df:73:1d:bb:72:30:d7:74:6f:e0:a9:8d:d8:34:0f:
04:32:0e:a7:a8:e1:4a:b4:3d:27:d6:95:00:df:fc:58:a2:b7:
d8:d5:ee:be:72:ea:f3:92:83:4e:a3:49:3f:73:22:34:e9:d1:
fc:33:1b:50:ea:f4:e1:78:77:48:54:d4:3c:b4:bb:3c:60:6c:
73:91:fe:cd:b2:43:67:73:56:d5:e7:39:b4:63:b4:c1:e6:88:
3d:61:97:8d:a3:6a:07:8a:1f:b2:cb:72:14:45:ba:90:15:e0:
f2:e2:af:8e:4d:b5:87:7b:1b:8f:d4:87:34:27:38:66:aa:c8:
fa:b4:07:e5:9d:55:21:64:99:33:e9:52:45:05:d0:e1:75:3d:
82:4d:d2:09:0f:72:03:a9:f1:ac:9a:ff:6c:cb:67:45:89:a9:
6d:22:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:28 2025 by rpki-client