Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: POF+hniHjgbCBJfFFQJ/cUNMV3xWQVAxdTfi+5vq3uo=
Subject key identifier: 26:CF:E6:09:A5:95:E8:2C:C0:BA:36:14:14:19:F5:14:D7:F5:8E:10
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019512108000563867A5F9CADF0CFD148E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 07B4
Signing time: Mon 17 Feb 2025 04:00:25 +0000
Manifest this update: Mon 17 Feb 2025 04:00:25 +0000
Manifest next update: Tue 18 Feb 2025 04:00:25 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: fjR6SzX+qN593/7zNjyluu/gXHd7ZfVGiQoQPuBkVy4=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:80:00:56:38:67:a5:f9:ca:df:0c:fd:14:8e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Feb 17 04:00:25 2025 GMT
Not After : Feb 18 04:00:25 2025 GMT
Subject: CN=26cfe609a595e82cc0ba36141419f514d7f58e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:87:ce:b1:9a:0a:7d:26:22:d0:ec:3a:2e:
53:2d:c6:13:7e:c4:c0:12:e0:7e:83:ba:7f:22:7c:
c7:2c:af:06:a8:84:97:11:7b:93:ea:93:92:0f:ca:
1a:34:2d:a5:66:be:92:e3:6a:aa:bd:c0:7b:6b:ef:
bb:92:90:3e:d3:fe:b2:1f:e2:8c:48:ee:1c:76:8f:
db:79:09:0c:8a:01:6e:03:cc:e8:08:56:c4:3f:06:
df:3d:50:de:65:0f:5a:57:94:91:a8:04:9a:23:9b:
d7:23:89:63:71:4e:91:3a:69:e2:ce:9e:4f:cd:de:
1c:24:f8:c4:8c:13:c2:f6:61:8b:6d:38:6c:04:97:
a0:fe:c1:cc:44:f2:c5:f0:c4:ed:ec:d5:5b:5b:79:
11:15:2a:a7:12:61:0b:dd:75:b0:f6:9f:80:2b:03:
e6:b0:93:d6:7f:2c:b0:36:db:f3:3a:30:96:bf:1c:
f9:3a:65:bf:28:8f:d0:75:51:3e:27:e4:ae:94:53:
0d:70:2d:80:96:ab:a4:7e:e0:8a:49:dc:d7:0e:a1:
d7:6f:4c:2d:33:d9:e4:97:3f:2f:49:b2:7b:91:3c:
dc:fa:d8:b2:8e:82:0a:b9:c6:cb:9b:e1:22:0b:20:
3b:1b:3b:88:f0:1e:e9:d1:71:72:17:ff:6d:0a:99:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CF:E6:09:A5:95:E8:2C:C0:BA:36:14:14:19:F5:14:D7:F5:8E:10
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:8c:85:4d:01:54:8d:29:a5:54:26:89:2f:55:9d:76:6e:
f0:c5:11:0b:cd:6e:49:76:82:84:a1:15:7d:ed:aa:38:01:ca:
cc:5f:0d:95:a7:2e:35:bd:a3:bf:88:51:b2:2c:2f:ea:eb:73:
8b:6e:a1:bb:8a:4b:72:f5:f8:76:06:2f:6b:2e:ca:20:13:81:
43:90:37:fb:f6:bc:f4:0d:15:77:98:42:d9:00:5e:4a:f9:3b:
59:fc:82:06:5d:b9:7b:70:ec:78:e2:82:9c:3c:fd:97:0e:6f:
20:d8:fb:78:8c:7c:0f:04:6d:e3:1f:3a:0a:6d:b1:ed:b5:2b:
06:29:3c:96:76:93:9c:ac:73:53:53:89:24:19:8a:6a:51:b8:
99:45:3b:d5:24:d3:4d:23:5f:58:a5:8a:41:34:bf:0a:e3:2b:
e8:db:40:57:a5:ec:d2:06:56:4a:10:ca:05:7a:cf:fa:de:70:
1a:c5:2a:80:d2:a4:46:35:24:bd:7b:2c:6a:28:f9:fa:3c:8b:
da:07:ef:d0:36:95:a4:95:ad:c4:9f:c1:04:5e:3e:92:db:61:
d8:8e:13:85:d3:5b:41:b5:64:69:d2:cc:da:75:71:e3:f3:df:
b1:5f:e1:bc:ec:b2:ef:73:13:51:85:46:1d:02:e1:a4:fa:c3:
1c:52:d5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEIAAVjhnpfnK3wz9FI5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw
ZTJhNjcwHhcNMjUwMjE3MDQwMDI1WhcNMjUwMjE4MDQwMDI1WjAzMTEwLwYDVQQD
EygyNmNmZTYwOWE1OTVlODJjYzBiYTM2MTQxNDE5ZjUxNGQ3ZjU4ZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tqHzrGaCn0mItDsOi5TLcYTfsTA
EuB+g7p/InzHLK8GqISXEXuT6pOSD8oaNC2lZr6S42qqvcB7a++7kpA+0/6yH+KM
SO4cdo/beQkMigFuA8zoCFbEPwbfPVDeZQ9aV5SRqASaI5vXI4ljcU6ROmnizp5P
zd4cJPjEjBPC9mGLbThsBJeg/sHMRPLF8MTt7NVbW3kRFSqnEmEL3XWw9p+AKwPm
sJPWfyywNtvzOjCWvxz5OmW/KI/QdVE+J+SulFMNcC2AlqukfuCKSdzXDqHXb0wt
M9nklz8vSbJ7kTzc+tiyjoIKucbLm+EiCyA7GzuI8B7p0XFyF/9tCplrjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbP5gmllegswLo2FBQZ9RTX9Y4QMB8GA1UdIwQY
MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct
MjgyOGM0OGUzNTk5LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5
LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMuMhU0B
VI0ppVQmiS9VnXZu8MURC81uSXaChKEVfe2qOAHKzF8NlacuNb2jv4hRsiwv6utz
i26hu4pLcvX4dgYvay7KIBOBQ5A3+/a89A0Vd5hC2QBeSvk7WfyCBl25e3DseOKC
nDz9lw5vINj7eIx8DwRt4x86Cm2x7bUrBik8lnaTnKxzU1OJJBmKalG4mUU71STT
TSNfWKWKQTS/CuMr6NtAV6Xs0gZWShDKBXrP+t5wGsUqgNKkRjUkvXssaij5+jyL
2gfv0DaVpJWtxJ/BBF4+ktth2I4ThdNbQbVkadLM2nVx4/PfsV/hvOyy73MTUYVG
HQLhpPrDHFLV4g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:02 2025 by rpki-client