Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: cM8oIQRLF6FpUhhc6c3esXCA4DNGOJLOAgjtYDEA/bY=
Subject key identifier: 7F:19:F0:B4:8C:12:93:DF:0D:98:8F:05:05:1D:65:1A:96:12:BD:BA
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019615EBA3EF95414A785A615944D3858283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0C11
Signing time: Tue 08 Apr 2025 15:01:26 +0000
Manifest this update: Tue 08 Apr 2025 15:01:26 +0000
Manifest next update: Wed 09 Apr 2025 15:01:26 +0000
Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=)
2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: cDlVv9ZRva2fDHQQVSS0IbIZsLEBigh/8ihejF0ym18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:eb:a3:ef:95:41:4a:78:5a:61:59:44:d3:85:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Apr 8 15:01:26 2025 GMT
Not After : Apr 9 15:01:26 2025 GMT
Subject: CN=7f19f0b48c1293df0d988f05051d651a9612bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:f7:fa:20:3f:2b:27:21:fe:63:7d:92:f7:
25:3a:14:4a:52:a8:85:4e:15:13:29:67:ed:d7:02:
e1:d2:08:8b:9d:24:cb:c6:dc:f4:95:7d:8b:09:f7:
c6:fa:5e:03:62:e3:47:8e:c6:50:85:9d:d4:dc:60:
84:c6:3e:e5:22:dc:ac:3d:95:53:d9:be:99:da:05:
ce:16:92:f6:2e:93:40:04:e9:12:7d:54:30:09:8e:
4c:0f:be:d6:b5:ee:8d:fa:8f:2c:89:be:de:cc:71:
75:25:a9:d8:8b:30:de:31:42:67:cc:0b:86:8d:ba:
77:df:5e:00:35:00:00:66:f0:0a:20:ee:ef:ee:1f:
3d:7c:4f:da:94:f3:9d:59:6c:2f:04:4c:8e:7a:a7:
c8:63:9e:f3:89:f8:4e:41:74:68:bf:7d:04:c1:34:
a2:19:57:c7:12:52:73:60:1d:b9:3f:2c:7d:47:1f:
f8:83:fc:d3:1d:f2:f5:58:ac:3f:fa:fc:6d:15:5f:
22:ac:5c:0c:fb:fa:13:3e:9b:c9:6a:8b:68:ed:9f:
70:36:fa:59:26:fa:32:0a:cf:25:92:7c:da:9e:a9:
04:e1:6f:3f:d6:84:44:cd:13:d9:13:2c:78:8e:97:
cd:9c:ba:87:42:2e:86:ca:37:e8:f0:63:3f:14:00:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:19:F0:B4:8C:12:93:DF:0D:98:8F:05:05:1D:65:1A:96:12:BD:BA
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:14:48:9b:33:66:dd:34:4a:48:2e:90:41:95:26:db:38:82:
54:1a:c6:d4:36:70:cd:9e:6e:f1:ce:c9:e4:f2:23:d0:f9:b0:
00:57:07:d8:c5:e2:40:4d:e3:83:1c:b2:04:ff:b4:8a:eb:d5:
81:b2:47:89:8d:15:e8:f9:aa:6b:1f:3e:36:5b:48:7c:2c:6f:
14:79:a5:bc:cd:7d:04:3f:0c:6e:9d:58:d1:cf:69:b4:3b:ed:
55:2b:7d:6b:29:0b:43:c6:80:2a:e9:df:55:04:dc:d2:29:21:
61:b2:66:63:1b:e3:ac:84:34:38:78:4c:d4:ad:10:f0:26:96:
94:3b:30:3e:57:94:53:fe:49:fc:17:c4:60:54:ac:a6:bd:d0:
9b:3d:21:8e:1f:4d:f8:91:ad:6b:20:72:ed:d2:d3:3d:53:03:
ca:09:2d:b1:a4:f7:86:27:61:0f:ad:12:b2:7a:c9:71:c4:9c:
51:3c:d5:99:2f:06:9f:47:2d:7e:31:65:99:d5:3f:05:93:54:
c9:93:d2:0c:37:44:52:a1:82:4c:df:10:c4:7e:1b:e8:b2:78:
eb:6f:ab:ce:7e:02:eb:f0:71:f9:ac:9b:ac:e0:0c:c6:02:e4:
16:3d:a3:04:14:0e:6a:24:77:88:87:30:2c:a8:13:3a:2b:b7:
d1:6c:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:49:37 2025 by rpki-client