Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: M3MZLmTovQ8BaVui7HhJmHnavCOkIDeVhE0XmbW+qjU=
Subject key identifier: 6D:44:84:EC:3A:B3:AB:FF:F5:73:EF:2D:CC:6F:AA:8A:21:48:19:B5
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 01958B84535C4342DD7B373AD9EB420F5A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 01AB
Signing time: Wed 12 Mar 2025 18:00:59 +0000
Manifest this update: Wed 12 Mar 2025 18:00:59 +0000
Manifest next update: Thu 13 Mar 2025 18:00:59 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: WEjeiSTanV5MgCzqEmg6rTnFd347kuaQW8kw+sdTaqM=)
2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:53:5c:43:42:dd:7b:37:3a:d9:eb:42:0f:5a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Mar 12 18:00:59 2025 GMT
Not After : Mar 13 18:00:59 2025 GMT
Subject: CN=6d4484ec3ab3abfff573ef2dcc6faa8a214819b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:4d:d4:3b:65:15:75:e1:54:35:1a:c6:ae:
35:91:79:ed:58:2a:93:13:13:1f:44:7e:c6:cb:4a:
02:25:22:21:a8:11:37:aa:95:1e:3a:96:f9:0b:c1:
b5:33:09:3f:ea:83:e1:2a:24:50:26:10:29:be:e7:
41:17:77:ca:31:8d:ab:4e:3f:f6:3f:2b:fc:b0:f2:
9e:50:53:ea:31:66:05:3c:71:e8:f4:bc:c0:11:a7:
e9:29:29:64:39:16:33:dd:aa:88:7a:80:f2:7d:4f:
f4:3d:f1:e1:fb:14:ab:e7:bf:97:7a:df:84:26:ff:
a1:28:56:eb:35:8b:d8:25:33:5b:96:45:1e:a6:68:
2d:e0:89:17:3a:f6:68:65:6c:06:65:9d:33:67:42:
1b:16:71:6b:c8:3b:d5:f3:3a:12:b8:0d:ef:2c:84:
5b:28:0e:7a:8c:ac:e9:40:5e:43:67:63:a6:08:78:
15:69:d6:03:89:8d:47:bd:4f:b3:49:0f:2f:31:fb:
9e:5e:1e:e4:89:45:55:06:a7:70:1d:71:18:df:ed:
b3:3d:14:ba:71:54:7c:c9:ea:26:85:7c:e0:2f:4e:
6f:f5:9e:e9:a0:ad:ce:4c:5e:45:49:2f:75:3e:91:
58:35:df:ef:bd:c9:dc:e1:76:1a:4a:6e:5d:8a:3d:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:44:84:EC:3A:B3:AB:FF:F5:73:EF:2D:CC:6F:AA:8A:21:48:19:B5
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:63:cb:c3:bd:73:28:37:dd:b3:f5:3e:17:e4:13:12:58:54:
0e:d3:97:04:70:6e:ef:4d:63:7a:5b:0a:11:e7:c8:7c:be:bf:
a9:7e:ef:82:a2:63:33:47:5b:c1:b4:61:57:79:fc:67:5f:16:
cc:46:ec:9c:d2:2b:5e:87:e1:a9:03:e2:69:b4:cb:ec:c3:57:
54:6b:8f:d9:2f:78:1f:29:a5:cd:74:b6:2e:83:59:2d:d7:41:
4b:c3:2f:37:1a:54:37:8d:12:66:fe:9b:d1:e4:c0:66:00:32:
1d:18:8f:04:fb:5c:3c:46:69:f4:14:7d:5e:20:98:62:33:c1:
82:b4:ab:8b:69:71:42:8b:8f:ca:09:82:fd:c3:09:47:63:3d:
c1:d9:92:f4:a9:1c:db:8f:e5:1d:ed:8d:4b:4a:89:40:15:4f:
8b:6e:ea:56:47:5f:ad:06:83:71:85:49:59:ff:eb:6d:ed:71:
4f:14:32:64:c0:6e:17:60:18:61:ab:66:51:6b:ae:6b:34:d2:
cf:d7:4b:e0:29:48:ce:98:73:24:96:e2:00:be:bb:52:1d:63:
73:bf:70:d9:ba:c8:ac:d3:de:0e:61:0c:5f:9e:30:40:3c:de:
b5:75:83:2d:af:ef:ab:1a:49:ba:cc:e3:84:d1:3b:d0:6a:25:
3e:e3:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:35 2025 by rpki-client