Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
File: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json)
Hash identifier: iHBVD8pyxP7DLMA3OTjMz43LT5jdk93K8Ha5eBpLym0=
Subject key identifier: D4:39:CC:CD:B4:D8:BF:7A:39:6E:05:EA:90:3F:10:34:8E:A2:3C:2E
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial: 01964BFDE0B62735EED695BFF8C28C614726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
Manifest number: 0DF5
Signing time: Sat 19 Apr 2025 03:00:51 +0000
Manifest this update: Sat 19 Apr 2025 03:00:51 +0000
Manifest next update: Sun 20 Apr 2025 03:00:51 +0000
Files and hashes: 1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=)
2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: 6f56hwLH2lAsy0LDCUcLDNU1rerEZzdskDoVWazMjB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:e0:b6:27:35:ee:d6:95:bf:f8:c2:8c:61:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Validity
Not Before: Apr 19 03:00:51 2025 GMT
Not After : Apr 20 03:00:51 2025 GMT
Subject: CN=d439cccdb4d8bf7a396e05ea903f10348ea23c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:0e:34:fd:9b:a9:df:9e:fc:07:c9:30:6e:
41:ce:8c:14:20:49:11:26:61:f3:54:c4:8a:23:b1:
f9:4d:08:86:b3:9e:da:67:a0:13:f9:6d:29:8d:cb:
96:37:99:d8:98:e8:ed:50:7c:7e:00:2f:34:a6:33:
b7:86:89:93:4b:d0:6b:79:93:f4:ca:cc:7a:13:54:
21:32:4b:7a:60:47:8f:eb:38:4c:5a:bb:92:49:cd:
c5:68:12:e9:b2:d2:59:70:ec:96:9b:bf:b8:7a:7c:
33:89:26:9d:07:37:34:53:2b:58:24:ea:53:92:1c:
49:ea:6c:a1:9c:4b:18:91:a6:96:28:1d:d9:cd:af:
d2:7f:1e:56:37:18:3c:58:d9:74:bd:54:43:a6:17:
bb:e9:23:e0:10:d9:f9:9c:69:d8:0e:9d:79:3b:2e:
cf:bd:66:5a:cb:86:92:05:ca:b5:fe:a4:f7:10:fb:
98:15:30:63:12:b8:85:ca:d9:2e:69:87:78:79:c1:
cd:a2:aa:c5:20:01:9f:50:96:f4:6d:bc:70:42:6b:
ff:98:dd:17:4b:9b:69:9e:ec:33:97:dd:9c:7f:09:
14:3e:50:f4:0d:df:21:18:13:6a:82:fc:10:7c:c9:
56:17:1f:56:25:ba:f9:14:aa:33:e9:d4:cc:eb:69:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:CC:CD:B4:D8:BF:7A:39:6E:05:EA:90:3F:10:34:8E:A2:3C:2E
X509v3 Authority Key Identifier:
keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d3:89:0d:ed:6f:51:4e:ef:c7:50:5e:70:9b:02:ac:ce:c8:
7a:66:52:12:ca:7c:fb:38:ee:f3:e6:9d:3c:a0:34:fc:71:b3:
01:9f:45:73:92:6c:5a:0d:35:d5:8d:77:3a:43:ff:03:78:04:
1b:93:ff:ac:f3:33:df:f7:c5:db:4d:37:80:0a:67:1b:a0:97:
81:7f:8c:2c:60:45:a9:4d:86:4e:94:80:32:61:3b:cb:d1:71:
89:50:f5:25:42:3e:64:b7:3d:1a:d7:7d:6e:8a:83:77:ec:99:
7a:ad:4b:0d:f7:39:61:53:eb:57:1c:38:84:21:85:1f:a5:34:
d2:8c:2d:de:3e:7e:93:fe:57:e2:84:0a:c8:f7:e9:9e:16:02:
c4:7c:4f:b8:1f:4c:c6:e2:fe:d1:fe:2b:98:1c:aa:d1:a1:bb:
f8:34:0f:e4:d6:3a:f2:16:74:53:0f:88:84:3a:50:10:9c:5f:
27:28:15:de:ae:73:aa:5e:7b:b1:4f:b9:34:2e:e3:ac:5a:5f:
e1:c7:5f:bd:ce:26:d8:39:61:ad:1b:a0:54:f2:67:8f:fb:40:
20:f0:a1:96:2a:9b:64:46:3c:01:3e:07:b4:46:45:65:97:79:
fe:68:27:34:01:85:dc:73:79:4a:b7:d6:87:77:95:3e:24:cb:
03:f9:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:39:12 2025 by rpki-client