Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: pv898Qf9a0TvB4l6CoUMT87h0NNTlNi0EbD83ZZ50f4=
Subject key identifier: E5:1A:60:31:BE:68:D6:C6:69:C3:79:D7:77:56:ED:E7:D9:E9:51:3B
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 01958F2A843036F0084567A72104896AE2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 1499
Signing time: Thu 13 Mar 2025 11:01:22 +0000
Manifest this update: Thu 13 Mar 2025 11:01:22 +0000
Manifest next update: Fri 14 Mar 2025 11:01:22 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: xHnDzbrqgFSUxotRQR3te5Q9rtHgmARNPOzt3sB7zd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:84:30:36:f0:08:45:67:a7:21:04:89:6a:e2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Mar 13 11:01:22 2025 GMT
Not After : Mar 14 11:01:22 2025 GMT
Subject: CN=e51a6031be68d6c669c379d77756ede7d9e9513b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:5d:20:4a:42:f1:59:97:8c:b2:87:b0:d6:
f6:aa:87:63:8f:32:f9:b7:2d:35:e6:ff:75:9c:d9:
c4:0b:3f:78:12:4c:60:22:65:27:fe:fe:6a:58:0f:
de:f2:e3:e1:25:e6:9d:62:a5:4d:85:97:b6:e0:ba:
6e:4d:b7:90:64:f0:4b:70:0a:0c:3d:ed:92:fe:fa:
30:79:76:d7:54:fb:00:ac:58:30:ac:9c:51:d0:f2:
57:1e:59:7b:cd:17:51:ec:79:84:f2:33:fb:4a:a4:
4b:00:27:ac:00:47:12:0e:d8:e8:ec:0a:5b:c1:ce:
cf:4a:6a:ef:c0:c5:2e:16:7f:44:17:7d:9e:b5:a6:
99:06:04:89:77:e7:bb:93:69:7f:a8:74:5d:24:68:
94:49:21:47:34:0a:a0:d5:0c:27:96:25:5b:23:f5:
80:97:34:7d:c2:3c:54:13:a6:58:b4:d8:f1:ee:b9:
8d:c5:5d:7e:8c:a7:56:bb:d0:2c:94:ce:03:99:ae:
d9:b9:eb:1d:f7:9c:00:eb:20:4d:e5:5f:ed:10:36:
c0:7e:4d:64:85:ab:14:80:b5:0c:b6:ec:c6:0e:e5:
76:86:87:11:44:fc:6a:da:f9:8b:a3:3b:65:36:95:
b2:9f:b1:f8:26:eb:42:be:04:52:ce:d8:35:eb:d2:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1A:60:31:BE:68:D6:C6:69:C3:79:D7:77:56:ED:E7:D9:E9:51:3B
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:75:89:07:92:72:8d:bb:1a:c4:6d:00:ff:4d:9f:cb:b3:74:
35:d9:60:08:48:e2:16:b4:fc:42:ff:5e:1d:0a:bc:21:4e:49:
66:b8:f8:01:8e:2f:40:c6:9e:f7:d3:a2:7e:3c:01:ae:e7:3e:
65:83:b9:32:b2:9d:9c:08:e0:bd:b5:47:b0:0b:fc:fc:73:d7:
e5:53:ca:b4:a9:30:0c:d0:89:ea:8a:34:d5:c1:49:23:79:e0:
40:c9:7a:0c:2b:6a:44:b2:b1:b8:57:7a:12:fc:2b:43:05:52:
38:7a:3e:ee:5d:b1:c7:1a:19:24:a8:ad:09:e7:fe:bb:c4:70:
14:9b:e6:49:6d:61:40:0c:35:36:96:fc:b3:e9:f9:ae:30:09:
0c:5b:9b:1d:de:1b:2f:69:0f:85:f9:30:24:1a:d6:31:0c:7d:
d7:e6:53:85:84:2e:3a:d0:75:8e:e0:52:8b:fd:7f:2c:a8:a0:
36:a3:82:75:b3:24:9e:32:d0:06:39:81:b0:b5:92:5a:ca:54:
4e:f9:fd:a6:bf:fb:f2:42:a5:22:ed:11:74:9e:9e:36:9c:83:
5b:38:12:85:ab:af:83:5f:8f:dc:ed:ff:37:a7:04:f0:6b:cc:
c0:61:43:34:7e:a5:e5:d9:e8:a6:f2:c3:da:40:e0:65:d3:f0:
7d:81:85:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:57 2025 by rpki-client