Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: 0gCRMdT78lyxXcp1aYtNKf2GtsPSU82Vw2GlF3fRIHA=
Subject key identifier: 01:14:7D:97:B3:FB:C9:B0:9E:03:9C:4D:45:9D:71:C3:2A:00:4C:15
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 01963F8BC1F9640671A03DEAC7E2617E6ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 17:00:45 +0000
Manifest this update: Wed 16 Apr 2025 17:00:45 +0000
Manifest next update: Thu 17 Apr 2025 17:00:45 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: qQVjCbWh2D1vSkEYpyWFy2effaI7yM+Lolz+nHGiEd4=)
2: TLZicJ-oF3y9XbymZF6MTAhyYvk.roa (hash: 4HeSyTBfKiFSQT/0BeZ4MVQL/epSIUIfB43B7ezWkA0=)
3: kB2vNLIHiz3zrtVPA7_yVuKTR5I.roa (hash: 9AzHx/X53rT3duIhqykEiCb52nN9gduGX1KbZI/pxcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:c1:f9:64:06:71:a0:3d:ea:c7:e2:61:7e:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Apr 16 17:00:45 2025 GMT
Not After : Apr 17 17:00:45 2025 GMT
Subject: CN=01147d97b3fbc9b09e039c4d459d71c32a004c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:53:fe:05:76:82:76:0f:47:8d:e2:d7:88:
48:ac:17:f1:ac:bf:1b:35:11:da:44:19:83:f6:85:
cb:cd:60:92:1d:6a:59:70:c8:bf:fc:68:23:97:92:
f4:88:10:c6:3b:9b:ba:7c:e3:d9:57:ba:d9:f4:cc:
ad:c4:cf:55:86:a3:a5:f4:a8:ad:74:b7:39:d1:41:
bb:4c:1e:99:f4:0c:cf:92:6f:f9:38:df:5f:ad:1a:
ca:71:f7:e8:8d:c2:d2:94:72:e8:ae:d6:55:b6:b2:
a3:d4:0d:81:d4:77:9a:55:66:f2:d6:77:be:35:9d:
9a:5e:bc:6c:a4:3c:22:92:6d:4e:94:df:43:43:0f:
b3:4b:74:74:18:3c:ae:c8:65:74:1b:84:10:d4:31:
1e:f6:41:f9:9a:5d:5b:46:e1:30:7e:63:b5:8c:ff:
45:de:b0:de:91:8c:7e:a7:d8:eb:1a:44:05:d5:26:
51:c8:9c:fa:d0:33:91:69:a4:8f:51:57:97:fa:65:
5d:11:8e:73:bf:3f:11:0e:75:9e:0d:e1:df:9b:0a:
8f:dd:c6:3a:c1:04:6e:e7:51:cc:42:6a:9b:49:66:
91:8f:db:1c:c1:15:7b:6d:1d:e5:91:73:c9:8c:27:
78:fd:82:0c:fa:64:fe:6f:3b:3a:ee:af:96:07:30:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:7D:97:B3:FB:C9:B0:9E:03:9C:4D:45:9D:71:C3:2A:00:4C:15
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:50:be:3e:40:cb:ef:dc:ac:3b:6e:b5:e8:5c:7f:a7:48:18:
5a:28:73:29:41:4f:18:89:47:2e:e1:93:fc:ed:48:84:9d:30:
bc:fa:78:e6:7c:70:fe:61:d3:ff:84:80:2c:34:d5:cd:aa:98:
12:37:f1:c7:a3:6f:30:fe:4a:23:fa:1c:26:6b:58:15:fd:98:
42:bc:e0:d3:91:39:3f:1e:a1:87:2d:d3:00:21:88:57:dc:e9:
81:09:1c:66:94:98:c4:1f:1e:70:89:d5:25:81:be:27:04:05:
b2:d7:f5:9c:e4:84:6b:cb:09:05:02:15:ca:aa:66:6c:37:c6:
df:96:d8:a5:af:5a:ba:ec:95:18:5e:74:25:7e:d1:57:e9:66:
06:77:77:b8:83:0a:18:be:56:ea:c9:30:16:a9:96:aa:58:72:
40:cd:d9:01:b1:99:e0:a6:69:70:aa:89:67:cd:d5:2f:ec:8a:
e9:2f:1f:e5:54:83:a3:91:e4:39:31:8a:42:79:f9:37:d2:00:
47:ea:52:5d:2a:ef:37:71:b6:c9:dd:9e:ad:1d:56:db:0f:30:
d8:f7:2d:e2:9d:2c:ce:6b:e5:2c:a1:56:5d:5a:e1:a2:fc:ca:
e0:0f:92:64:bf:cc:cb:75:f1:0c:f6:38:ef:23:a5:3e:95:a4:
4a:50:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:49 2025 by rpki-client