Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
File: SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json)
Hash identifier: nKqqby0ENEFf/Wo9FOmFExJgbFzBBnteiGRozlrzGts=
Subject key identifier: 74:30:DD:B3:4D:DE:C1:EA:D4:4B:A8:A1:F0:D2:D5:AE:60:CE:2D:4B
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial: 01964D7F0F697C2FCF024751D326120DCED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
Manifest number: 05BA
Signing time: Sat 19 Apr 2025 10:01:34 +0000
Manifest this update: Sat 19 Apr 2025 10:01:34 +0000
Manifest next update: Sun 20 Apr 2025 10:01:34 +0000
Files and hashes: 1: 0wKIR9WVw-V7aj10gYMFaIn8xAM.roa (hash: ezpiXxjoxGxkyYFu1rnYOISEzrrgxtTbU9SYCbnGTBc=)
2: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: Yh80r7YV1cGbc4euxx9T+MGrVXiBSuedHnEva9PeO9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:0f:69:7c:2f:cf:02:47:51:d3:26:12:0d:ce:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Validity
Not Before: Apr 19 10:01:34 2025 GMT
Not After : Apr 20 10:01:34 2025 GMT
Subject: CN=7430ddb34ddec1ead44ba8a1f0d2d5ae60ce2d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:37:c7:30:24:2b:6d:2b:be:76:1b:fe:e2:e9:
d9:1a:aa:ce:aa:c4:15:05:c4:85:af:a0:f0:3a:08:
68:38:5b:d2:2d:7e:00:93:c4:2c:f1:1b:94:3e:e0:
15:fe:64:4c:dd:d5:95:1f:be:69:f9:e9:dd:3c:57:
1d:d5:d1:1f:8b:ef:e6:b8:35:a8:fe:e3:5b:59:89:
46:a2:8a:9d:cb:d3:d4:10:db:b4:cc:d2:45:93:1e:
5b:de:22:c3:dc:55:60:ab:09:90:bb:79:2f:51:49:
5e:76:ad:ff:e0:09:ec:f3:e6:58:fa:9a:f7:22:38:
13:cb:98:59:79:fd:29:f0:1e:19:2f:ff:61:1c:0e:
5c:1f:21:54:01:c4:0b:30:ec:8b:d4:9f:b1:2a:35:
81:04:d9:f0:d2:24:3b:a5:af:52:af:b0:ed:3b:7f:
64:e7:9c:75:5b:f0:3f:89:71:47:72:1d:cb:cd:c9:
e8:69:a3:51:d5:d6:7d:a1:d8:4d:07:c8:ed:ca:9b:
e8:e3:9f:eb:9f:7e:96:30:09:44:84:d8:85:8b:41:
ba:ca:07:25:72:88:6d:ee:3d:54:d8:9e:85:51:14:
9b:64:c1:79:35:25:49:43:a5:ac:43:67:e9:b5:09:
f1:f9:a7:91:54:6c:75:10:be:eb:ee:7b:09:35:a6:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:30:DD:B3:4D:DE:C1:EA:D4:4B:A8:A1:F0:D2:D5:AE:60:CE:2D:4B
X509v3 Authority Key Identifier:
keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0e:4c:0c:40:fb:59:f1:44:0f:a3:22:29:22:56:fb:8e:c0:
97:ef:cf:41:82:e4:3f:60:f3:c3:be:b2:6a:d6:a3:b2:02:93:
87:be:45:a0:75:c4:da:d4:8c:fd:38:c5:d4:30:2b:c8:b1:1b:
b2:6b:69:f1:bd:f2:4e:47:3d:7c:2c:9e:5a:ec:ff:3f:a2:98:
27:4c:dc:a2:f4:16:a9:53:c1:b6:da:fb:4c:fb:b9:cb:a8:da:
b9:8d:76:f4:e7:08:c3:df:9a:d9:50:7e:13:2a:ed:ce:20:c6:
67:d3:9c:cf:9d:0f:85:ce:93:3a:69:5f:ad:95:ee:e9:b0:75:
5c:a5:82:11:42:f5:df:b6:24:b9:ed:ae:b6:6a:70:83:0c:91:
e8:bf:96:a7:a7:42:c7:86:c7:db:73:3b:c0:b3:9c:d5:88:3d:
12:1f:a2:17:41:86:50:f9:d8:74:11:9b:42:f8:5c:28:fb:b4:
cd:70:43:72:6e:98:a4:30:b7:91:9f:f6:b7:57:1a:0e:90:43:
f5:da:b1:02:f7:45:48:5f:1b:4d:90:b3:9a:24:8a:dd:3a:ba:
6d:ee:ab:1a:f2:38:ec:ec:b8:19:86:50:9d:cf:11:5e:e1:7b:
cd:b5:96:55:24:0a:43:8c:d0:62:c5:dd:bf:52:22:4e:5c:30:
a5:ce:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:45 2025 by rpki-client