Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: NLsI/DloELFCTc9bjK6rP+GDI6cg7ZN1JNIhnFwKv8I=
Subject key identifier: 2F:BE:24:55:0C:8C:1C:81:5A:5F:BA:42:96:21:1F:4F:B6:78:83:20
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 019643D641E091E0231833AD8267709AD7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 14D7
Signing time: Thu 17 Apr 2025 13:00:37 +0000
Manifest this update: Thu 17 Apr 2025 13:00:37 +0000
Manifest next update: Fri 18 Apr 2025 13:00:37 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: C7UDaRr30jnxXVQL7PVVTPQTny7CoReEcgZa1iw4pos=)
2: WSqfYF0o_2MY8iXoAQ6LcMj2LjQ.roa (hash: nuyZOzY7bMRC2v/YnYG+WMrpV9UWVB2dFhkYTUc112E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:41:e0:91:e0:23:18:33:ad:82:67:70:9a:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Apr 17 13:00:37 2025 GMT
Not After : Apr 18 13:00:37 2025 GMT
Subject: CN=2fbe24550c8c1c815a5fba4296211f4fb6788320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:2b:d8:ae:77:53:f0:dc:1c:ae:f5:cf:e8:
60:22:36:ac:83:4d:4a:b6:46:1b:fa:33:b2:d5:23:
c9:5e:3f:d6:96:08:50:9c:89:f2:93:dc:3c:3e:85:
d3:8a:81:20:8e:ab:42:79:93:99:6d:4a:09:57:35:
86:6c:f3:df:d0:0d:db:27:73:6f:1e:c2:6f:37:53:
e7:26:ad:05:b9:f1:f1:5a:d5:49:c9:58:ce:9d:b3:
4b:47:8e:18:91:80:5f:c3:f0:00:05:3d:60:d0:67:
35:62:80:f6:2c:3b:6f:8f:f5:d5:ba:f8:2b:5e:e1:
07:9a:56:99:01:19:1d:ae:f3:c3:b6:ee:28:16:b6:
74:7e:89:33:14:7e:cb:2d:a1:46:e2:ff:91:e7:d8:
cb:9c:9a:d9:f5:c3:69:04:d1:2a:08:ff:e1:a4:c2:
00:ff:0f:5e:c1:61:85:fb:06:76:e2:a2:7e:45:67:
b0:e8:79:96:93:b7:c0:89:9c:d3:ba:4d:c8:b0:4b:
ec:90:c3:0e:a9:cf:ad:27:15:40:31:aa:83:22:22:
80:01:bc:ee:7a:a1:fd:e1:68:2a:bd:5d:2a:be:1e:
54:4b:fb:74:58:19:53:3d:94:de:87:bd:78:a9:30:
89:2d:8e:8a:e0:2f:02:3f:67:7a:e4:16:d8:29:24:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:24:55:0C:8C:1C:81:5A:5F:BA:42:96:21:1F:4F:B6:78:83:20
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:d7:93:3e:ae:64:8a:92:5c:db:47:3a:6d:20:bd:c0:c0:
ed:63:62:5c:ef:15:ea:8f:b9:ca:28:07:07:d1:0a:12:cc:bf:
3f:3b:72:f8:f2:c0:d0:64:69:de:e8:2b:65:42:ea:aa:0a:11:
96:fa:f0:68:73:c3:31:48:4a:36:b5:bb:9e:7f:32:70:8b:e4:
88:cd:aa:ef:c1:37:37:f5:02:55:4b:ac:49:5c:90:24:62:81:
12:3c:d5:c9:d7:af:ac:83:51:26:20:ca:5a:0b:f0:93:d0:a9:
7c:6f:35:0d:9c:c1:94:9f:16:a7:19:6a:e4:e0:5b:bb:70:3a:
8e:82:00:93:7e:5e:20:c6:ae:24:ed:3d:e2:18:22:9c:c2:23:
c2:dc:1c:91:1c:28:d0:e6:c6:ac:89:a8:b5:01:77:78:29:91:
64:a2:8d:6a:36:a1:2f:d3:d1:3b:f9:f1:a4:78:99:80:d6:1f:
52:f3:a5:fb:75:ff:ab:ff:6b:17:fa:5d:60:b8:9c:81:53:94:
69:df:e0:8a:5a:91:d4:f9:7a:60:78:ea:76:31:fa:92:84:f6:
2b:49:e3:b7:77:70:6a:ba:c9:2c:45:9a:98:ca:ff:2d:98:78:
e1:44:e9:18:d4:a3:ef:a6:82:a9:28:ed:6a:69:49:de:83:ed:
1f:d2:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:17:15 2025 by rpki-client