Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: GkwZcZRxd1uRHAtl/B4jQFm1RUxrnceU44mpMXL0w5k=
Subject key identifier: 72:51:57:D1:35:B2:3F:7B:DF:57:1A:53:DE:B0:73:E9:4D:35:23:45
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 019654255F1580FEFD34B400EF554ACB2869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 12B5
Signing time: Sun 20 Apr 2025 17:00:57 +0000
Manifest this update: Sun 20 Apr 2025 17:00:57 +0000
Manifest next update: Mon 21 Apr 2025 17:00:57 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: 8v_aiBgvpLDJT4bE3zxJWwrf4Ao.roa (hash: wcB7NvMB7REyv6Xd72Vh3AOoxDTtyyThVZ07XtgTGL0=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: +CkJVcZRCUBCkBFn7viUzj/f5IrNHVPW5JjOZFE/W5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:5f:15:80:fe:fd:34:b4:00:ef:55:4a:cb:28:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Apr 20 17:00:57 2025 GMT
Not After : Apr 21 17:00:57 2025 GMT
Subject: CN=725157d135b23f7bdf571a53deb073e94d352345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:ec:13:d0:d3:4e:a2:89:54:07:a5:60:e1:
84:98:45:92:e4:b6:51:f0:39:a4:89:f6:6f:49:18:
dd:86:0a:ef:bf:8f:b5:6d:8b:b9:79:33:40:5f:e9:
70:f0:a8:3e:79:68:0d:72:d1:a9:e1:2d:55:e4:3c:
bb:0d:72:ce:24:6a:85:2a:c7:d5:60:53:8a:16:19:
7e:b1:37:9c:57:1e:fe:95:b3:14:f1:db:4d:3d:66:
8a:e1:31:bf:50:fa:e4:a9:24:b7:b1:c2:36:c9:f2:
43:83:d8:52:19:83:3d:62:b1:4e:7c:47:b1:9b:d2:
48:83:ba:a4:83:69:8e:0f:91:33:fe:c6:f6:4b:6c:
a0:ef:f9:54:a0:7a:20:75:db:e8:f1:bc:f5:9a:48:
f2:29:5b:19:ef:df:d8:23:39:e8:e2:3e:6f:6e:8b:
4a:88:0d:07:b8:be:7e:a8:cf:ed:ea:27:9e:2f:71:
c5:90:06:35:77:aa:cb:4a:22:2a:69:7b:dc:4b:e6:
31:11:2e:73:30:89:20:d5:c5:59:79:f0:9a:47:1d:
04:d0:e1:4a:22:58:85:a6:e4:7c:48:7d:de:85:fe:
f6:36:1c:12:49:ca:67:54:fc:fb:a8:a7:23:dd:2c:
4f:2a:2b:bb:ae:82:56:c3:ba:b3:af:86:db:bd:63:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:57:D1:35:B2:3F:7B:DF:57:1A:53:DE:B0:73:E9:4D:35:23:45
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a4:b4:da:7f:91:cd:fa:9e:48:4c:52:af:92:bc:90:88:b5:
b5:b1:e7:ef:c7:7e:be:49:00:cc:1d:11:fa:09:ce:0c:9b:c6:
ee:8c:f7:91:b6:5f:0c:1e:39:22:cb:4b:5b:d6:6f:9e:c4:5b:
54:87:c7:70:d5:07:85:fc:41:94:25:52:a6:b6:bb:bb:4b:73:
cd:b6:b3:7d:76:3f:48:92:ec:e1:34:d5:7c:99:73:fc:eb:6f:
74:ef:bc:68:a5:e4:85:60:ae:fa:be:f8:77:89:c5:17:f5:41:
62:0c:63:6d:d0:5a:53:04:5a:e1:3c:a5:82:ee:b7:12:8b:df:
c2:d3:8d:26:31:94:1a:04:4f:18:51:37:4b:72:77:24:b1:48:
52:ef:66:e7:67:52:a8:ba:fd:09:ea:dc:20:e8:6f:5f:6b:0a:
d6:b7:62:de:09:45:83:7d:6f:51:e4:09:40:13:e8:b3:99:7c:
66:1c:34:11:08:df:55:0e:f9:65:9f:58:d6:dc:9e:af:ad:f8:
9f:44:ad:6f:33:c1:d4:43:bd:fd:08:40:e4:82:6e:d1:91:13:
b7:3a:c7:ca:01:bb:93:ec:69:4e:0d:40:56:df:20:8d:3b:73:
e2:26:8a:df:8d:64:04:b4:af:20:28:09:5d:5a:f6:75:02:ec:
03:3b:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:44 2025 by rpki-client