Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: 32W3MIft8yC3RVGdEO2gA33e4mPfIfvgTU63rY+d3fE=
Subject key identifier: F8:FD:01:05:0E:19:CE:57:9C:9E:20:6A:F0:AD:C7:64:9C:14:35:3B
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 0196451FFE0F4D53190C87E04710B627C25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0853
Signing time: Thu 17 Apr 2025 19:00:46 +0000
Manifest this update: Thu 17 Apr 2025 19:00:46 +0000
Manifest next update: Fri 18 Apr 2025 19:00:46 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: YQAhWiAC/2FilcHhDidqTs7GxX5CEva06NNNIX62Xsg=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:fe:0f:4d:53:19:0c:87:e0:47:10:b6:27:c2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Apr 17 19:00:46 2025 GMT
Not After : Apr 18 19:00:46 2025 GMT
Subject: CN=f8fd01050e19ce579c9e206af0adc7649c14353b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:38:6e:12:75:79:51:4c:b6:60:b1:bc:cf:
01:44:64:46:c7:00:a8:6d:c0:cd:b1:ce:c0:b0:68:
75:e1:94:93:b1:cd:2c:89:c3:f2:44:e0:5f:4c:03:
53:2e:8f:37:c0:26:ab:5b:e6:b9:b6:6c:c7:b2:5c:
e7:54:5b:ab:5e:ff:1e:55:f1:e1:49:9d:c4:6e:46:
50:c7:5a:5b:f5:98:27:e8:91:c2:be:40:94:ec:2b:
33:7f:af:f2:73:52:26:91:1c:a5:68:fb:e7:36:82:
c1:6d:9e:23:b3:ee:3a:36:c7:75:fb:ea:b5:9a:27:
64:bc:bd:c4:80:4e:11:fb:43:49:b8:a6:03:a2:91:
d2:33:00:72:4b:58:6a:ac:41:4d:b6:94:fa:59:60:
9b:af:f4:1a:16:fb:12:32:43:c1:a9:5a:d6:1a:c5:
a0:19:7f:f6:4c:66:5f:48:ba:69:97:a2:9a:2b:37:
11:9f:c2:15:57:3c:30:53:de:26:8f:53:a7:eb:f1:
11:6e:0e:cc:16:d5:12:a8:b0:5d:2f:ac:0f:e0:06:
ff:41:bd:32:1c:4e:50:d1:1d:95:dc:cb:df:cf:a7:
f1:32:37:a7:03:f7:03:8c:01:f4:a3:0b:44:01:f5:
d9:c9:11:9e:9d:30:47:0b:86:b5:6d:03:ff:af:c1:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:01:05:0E:19:CE:57:9C:9E:20:6A:F0:AD:C7:64:9C:14:35:3B
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:6b:fc:d2:8b:0a:f3:6d:26:90:7d:93:e2:23:e6:b2:11:e4:
95:c3:e2:4e:63:a4:f5:6d:f1:fc:9a:fb:3c:a2:91:b6:f4:3a:
b9:40:5c:ea:2e:65:47:d1:99:3f:8a:94:79:61:63:71:89:8f:
e5:7c:84:de:18:57:75:a9:93:cc:87:10:8b:b2:3a:c4:25:d9:
04:52:c5:8b:f2:01:da:d0:7e:f7:76:3f:75:24:98:6f:63:96:
fd:19:79:36:0f:5b:ea:83:3c:a1:ce:37:06:70:fa:fb:77:b7:
1e:e8:59:bf:68:ef:88:6e:86:98:20:10:b4:d1:77:14:21:c7:
8a:ff:1b:37:11:6c:30:33:3b:d5:7b:40:85:5d:b5:a9:12:1a:
5d:e9:4a:4a:d4:1d:b0:29:7f:65:34:66:65:44:49:5f:ec:87:
cd:8a:ff:4f:09:17:a2:ca:df:df:2d:2d:40:e3:6e:f2:b4:e6:
53:38:16:d6:02:2d:c3:ff:bc:7d:82:f7:8c:a8:87:d1:e3:a1:
a4:3c:b4:b3:9c:0d:f4:fa:5a:0f:46:e3:30:06:30:31:fa:72:
ca:88:9c:c3:80:06:e9:06:50:c4:db:6d:45:55:95:c6:37:50:
05:9e:ac:eb:84:51:84:e7:3c:ff:fe:f8:e5:24:bc:83:df:8f:
39:63:e2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:27:39 2025 by rpki-client