Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: RCwYyv+E3YxuaT7WGESX+N4Wou1tOLDioEkOpIMv9jw=
Subject key identifier: 03:DC:AD:B2:DC:65:A7:C8:3E:C9:C1:60:AA:12:DE:F0:54:38:89:91
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 01963F8BBA3CAAD48F9898BE6EA8A45E6224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 107B
Signing time: Wed 16 Apr 2025 17:00:43 +0000
Manifest this update: Wed 16 Apr 2025 17:00:43 +0000
Manifest next update: Thu 17 Apr 2025 17:00:43 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: 3rMFK3FzmY7Iju+ZmzAa5fNebumYX/m/zQyL2K0Zxl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:ba:3c:aa:d4:8f:98:98:be:6e:a8:a4:5e:62:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Apr 16 17:00:43 2025 GMT
Not After : Apr 17 17:00:43 2025 GMT
Subject: CN=03dcadb2dc65a7c83ec9c160aa12def054388991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:96:48:a2:62:1c:e1:69:8f:d7:1a:02:10:
9a:1c:62:02:a6:d4:b9:33:36:d0:57:de:01:62:6e:
0b:0a:72:b8:09:17:23:a6:10:6e:c8:f8:b7:28:a8:
5b:8b:96:cf:ac:a7:44:89:59:ac:0d:66:58:e1:65:
0f:be:b0:d7:b0:c1:7e:df:5e:75:bf:de:11:8e:3b:
b3:b9:90:6d:e5:a2:fd:42:b8:2e:db:7a:42:18:14:
b8:26:2f:3d:d6:63:a0:11:8d:c0:72:19:e4:0b:aa:
fd:79:84:54:a1:75:42:da:0a:b5:bc:3d:63:a3:d3:
63:bd:70:cf:3e:18:28:30:c2:0f:88:84:84:45:55:
ce:6b:c4:4e:a0:fe:cf:26:e2:4c:2f:7f:82:e7:c6:
3d:fe:80:90:35:65:1c:ef:a0:b0:6d:09:10:a6:b4:
5d:da:96:48:fa:f2:50:e7:ca:a7:c7:3e:d1:fe:c3:
06:83:d4:85:9a:ff:83:46:2d:a2:10:7d:71:3b:73:
dd:fa:d7:f8:51:f7:e6:ea:0e:ef:91:0a:19:00:49:
3d:8a:f1:d7:97:57:ee:0c:95:97:c9:e1:e0:c1:97:
53:e1:15:74:ab:fa:54:e1:d5:e3:af:e0:32:a5:e3:
a5:ce:02:c7:d2:77:bc:6e:59:a3:08:cb:f9:b6:a1:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:AD:B2:DC:65:A7:C8:3E:C9:C1:60:AA:12:DE:F0:54:38:89:91
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c6:f5:52:3e:18:69:d8:93:d9:6e:53:7e:6d:62:38:ed:c7:
33:f0:fc:7c:af:c7:b7:3a:c4:fe:fa:2e:64:82:c4:6e:3f:b6:
af:77:26:39:a8:4f:61:31:1f:05:f1:a0:8c:71:a5:3a:87:ac:
52:6f:3b:d4:95:92:d6:ba:40:38:5d:1a:75:c0:87:9d:71:b5:
8b:3e:23:08:70:7d:c6:70:c4:f0:51:74:73:48:6d:32:8f:ee:
94:59:e3:6f:1d:a6:c4:4a:7c:c8:d4:bd:37:65:92:6c:72:15:
fa:91:3b:31:14:3c:3f:28:9e:9b:76:30:9c:59:50:48:ab:f3:
0b:8d:b1:e9:58:8f:eb:21:53:78:00:5d:12:d8:37:49:4f:0d:
9e:19:b3:67:f2:69:e0:5f:70:59:f3:dd:47:36:cc:fb:46:cd:
df:95:12:e4:8c:cf:f7:b0:02:ec:1b:94:b0:2c:f2:e8:28:bf:
2a:09:31:9f:4a:a3:98:23:41:f6:ee:a6:30:96:10:ba:4e:e8:
d7:a5:7e:bf:76:3a:50:66:61:8b:2f:bb:bf:a3:87:5a:b6:9a:
58:67:ca:8c:88:ea:ff:30:5c:50:9b:7b:15:98:47:a7:14:85:
dd:e7:81:6f:f7:ee:56:7f:78:2f:dc:ec:dd:90:ae:de:78:ad:
bb:5d:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:45:49 2025 by rpki-client