Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: U/06WXsL82FHQuMx39zDGAnZj9CE1E44izOjIlLmnb4=
Subject key identifier: 0F:FA:6E:CF:83:C5:24:92:30:22:59:90:A0:25:22:AA:92:14:01:F8
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 01958C291A31417B4AFB8B2B69226A298DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 149A
Signing time: Wed 12 Mar 2025 21:00:58 +0000
Manifest this update: Wed 12 Mar 2025 21:00:58 +0000
Manifest next update: Thu 13 Mar 2025 21:00:58 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: usVjt1Hq9DED//QfFs28NxLef8dOj6r7vpVbjE3x9pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:1a:31:41:7b:4a:fb:8b:2b:69:22:6a:29:8d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Mar 12 21:00:58 2025 GMT
Not After : Mar 13 21:00:58 2025 GMT
Subject: CN=0ffa6ecf83c5249230225990a02522aa921401f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:b5:00:ca:7c:da:49:3b:40:b6:f8:1b:94:
b8:45:d7:4d:c4:2c:01:69:4f:0d:62:a0:7b:36:6b:
66:e6:de:12:62:b6:3c:12:35:47:74:70:05:c0:49:
df:df:dd:fd:8b:e0:39:03:c1:90:6c:ca:71:70:30:
9b:35:10:e1:76:f7:ca:bb:e4:29:2a:89:6f:27:9d:
24:ff:f7:9a:fc:78:35:a8:97:ab:7d:9f:d2:2b:f1:
aa:7a:14:c7:3b:76:11:94:ba:31:4d:78:6d:28:8b:
2f:07:3c:91:21:e8:26:66:8a:be:f3:dc:cc:3f:0f:
24:95:bb:6e:c2:71:a3:5e:7d:07:48:c3:69:8c:94:
38:b5:78:bc:74:a7:f9:3b:bd:ec:9b:99:15:99:8f:
d7:42:94:58:96:74:99:7f:4a:c5:18:95:51:82:97:
7e:51:68:e3:f8:06:57:cd:df:4b:cc:2e:6f:3a:a0:
65:13:ba:ea:33:25:28:85:8a:86:b9:88:1e:ef:da:
13:d2:88:8e:00:96:3d:0c:53:12:ae:03:e5:f4:4c:
2b:5f:6b:8a:63:94:1d:7d:66:59:37:12:68:fc:b6:
ac:d6:fe:cb:77:46:0e:db:cf:a9:6f:59:50:4b:21:
f7:3a:ca:b3:35:b2:3e:c9:b4:fb:4f:47:b7:64:17:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:6E:CF:83:C5:24:92:30:22:59:90:A0:25:22:AA:92:14:01:F8
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f3:2b:2c:35:ed:39:71:13:d7:87:d6:7d:fc:19:60:7e:7f:
6c:23:34:61:dc:e2:d2:c4:99:d6:23:2d:97:88:7c:fd:75:61:
3b:f2:bb:e9:39:68:56:e6:aa:82:2e:ec:1f:ac:ad:39:53:4d:
1e:e5:5a:d9:5b:5b:d9:c2:23:61:c5:3a:75:d8:1e:8e:7a:82:
2d:f3:f3:b1:7b:b9:cc:7e:c2:d8:77:57:c5:1f:1e:69:51:7e:
84:ca:65:c7:a6:ee:ca:9c:34:20:2f:19:86:70:3e:38:d1:76:
5a:72:03:46:5f:a6:cc:c5:ba:cd:41:4f:c2:5a:9f:f7:47:ac:
3d:a2:3c:0f:ab:4c:40:73:85:94:6a:79:a3:b7:60:2e:04:11:
3a:95:4f:e8:35:cf:6a:a5:50:d8:1d:79:45:a0:8c:c5:ea:e9:
a1:53:37:b1:03:b2:98:8c:95:2f:06:83:d7:e9:40:ee:a8:44:
ea:a6:f6:cd:b5:4d:58:12:b1:cb:bd:1f:a1:8c:54:e6:fb:82:
89:a6:89:28:e3:cf:f0:d4:ba:12:dc:65:8d:09:7a:4a:25:c2:
f2:cd:43:96:fc:76:76:a0:47:cb:24:5a:d0:d4:ea:0d:c3:58:
dd:18:36:f3:73:fc:d4:ec:07:e7:a3:26:b8:7e:0a:1d:30:fb:
9e:82:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:55 2025 by rpki-client