Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: A+XXt8Dh6GUZsr7YwTuwxUQlNB6zA4zH2RjZjFdXqXE=
Subject key identifier: 1C:18:36:DA:F4:5A:09:4C:92:70:15:21:C2:BB:D2:71:BB:01:84:02
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 0196515B102E4CE2B152A8033011961DE5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 0FF1
Signing time: Sun 20 Apr 2025 04:00:44 +0000
Manifest this update: Sun 20 Apr 2025 04:00:44 +0000
Manifest next update: Mon 21 Apr 2025 04:00:44 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: hfYf9dwbpmX0KWHykM1Uh5Vq7qsClltoD2CSBMeAWO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:10:2e:4c:e2:b1:52:a8:03:30:11:96:1d:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Apr 20 04:00:44 2025 GMT
Not After : Apr 21 04:00:44 2025 GMT
Subject: CN=1c1836daf45a094c92701521c2bbd271bb018402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:4c:4f:1a:35:51:d3:4c:e8:96:59:a0:19:
22:44:30:21:78:71:65:cb:16:f4:f5:fa:53:02:f8:
8e:0f:4b:2a:14:10:3b:61:24:97:d9:d5:1f:f0:17:
ff:35:66:5c:0a:e1:af:15:9f:fc:53:34:fb:1e:f4:
af:cd:2e:76:48:1b:5f:29:f5:1a:f0:67:3e:ad:ea:
56:0a:a8:41:86:e4:fb:21:6f:96:b2:92:3a:a9:c8:
50:26:ae:d2:e9:30:37:84:bd:c6:a2:f1:2a:8a:79:
e1:1b:29:d3:e3:6c:a4:42:35:f2:50:8a:01:24:80:
97:b0:3b:8f:02:1a:20:54:2e:c4:92:7f:d8:44:70:
eb:ec:b1:90:d7:8d:0f:78:91:84:92:5d:10:36:68:
a4:7f:9f:04:b0:60:ae:18:57:2b:29:29:de:5d:31:
91:99:bf:92:b0:79:da:7b:bb:20:2d:74:ad:4c:70:
d7:b1:0b:13:b9:bf:96:cf:1d:29:79:90:38:9b:94:
55:8a:de:8f:36:67:a2:ef:a7:79:7b:e6:25:a6:06:
9f:45:22:e6:a0:ae:60:00:b2:d3:29:25:bb:19:2e:
55:0b:93:3d:c9:19:d9:40:1d:c8:92:86:f6:5c:3f:
6d:83:85:67:c9:e2:fb:2e:2e:1b:67:ad:60:43:9c:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:18:36:DA:F4:5A:09:4C:92:70:15:21:C2:BB:D2:71:BB:01:84:02
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b0:85:af:d5:e4:a2:f1:0b:1b:49:29:2d:8f:4f:55:27:b2:
f2:55:43:a4:56:d0:2d:88:01:10:a2:b8:e5:da:09:38:08:88:
21:0e:ba:38:9a:6e:4c:fb:af:46:51:c3:03:8a:14:69:64:c4:
e8:d4:71:e7:39:f1:47:ac:c5:0f:40:20:56:93:2f:e5:5e:b0:
0e:ce:a6:31:6c:a2:56:1b:dc:b7:c0:9f:ac:6e:92:25:37:a4:
51:25:70:11:49:74:e1:91:ea:bc:42:82:7e:d4:88:32:f3:9c:
df:1b:e8:e9:70:36:57:16:98:21:90:89:80:9d:bf:a0:28:81:
76:e3:86:7b:2f:a1:bd:a7:c1:5c:07:d6:ec:30:89:70:6a:8b:
f8:23:80:4d:08:85:72:68:92:da:b7:2e:d2:d0:58:bd:f2:0c:
fa:2f:b7:ed:a8:ad:a4:ef:54:4f:c8:5c:2c:3c:65:20:65:ae:
40:b0:2c:27:92:44:3f:c5:08:3d:83:bf:e6:fe:9b:04:54:22:
c8:2d:1a:ce:1b:a5:56:08:cc:fc:76:5a:55:1b:e7:1a:fd:bf:
cb:ab:78:dc:1a:71:43:ac:a7:af:7a:4f:e1:b8:a6:a6:9b:8c:
f0:64:04:ac:d0:94:3b:9c:68:57:d7:a7:48:ec:64:17:39:5f:
25:56:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:24 2025 by rpki-client