Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
File: SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft (raw, json)
Hash identifier: tmoTj5f/LhUCQtmc6Y6wHm92u1NBYVtdqC7yT/D7qos=
Subject key identifier: 6A:BB:0F:5B:FE:10:BF:C0:3D:C9:DA:BB:37:5A:C1:FA:B4:92:5C:C2
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 0196150FA0A4B5D59A246D10234EFD3A4836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
Manifest number: 0909
Signing time: Tue 08 Apr 2025 11:01:07 +0000
Manifest this update: Tue 08 Apr 2025 11:01:07 +0000
Manifest next update: Wed 09 Apr 2025 11:01:07 +0000
Files and hashes: 1: B5U5hiuj472vo3lxpeeTGMOW5Ps.roa (hash: 5BiNFG9KLdrNVXjd/lTiLpF2pyPe+QUD5bM50jqM//w=)
2: DlNfl6KgR_MUNI_dJxw9ErXDeIE.roa (hash: eSCVIU9rH872alqy7/aU0fAeLMAeeiberdc7Lc5APRo=)
3: SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl (hash: vmlaRppL9Gi1yrOZ7BH1s6uauRueTlTj2io/Uc+t6yM=)
4: SM7IhaAEsmGDuZlqZRpqw-w85LY.roa (hash: /+5Lzb4i3irljEq7HlV5I6aQL6bwOiyhOurXz6ixdIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:0f:a0:a4:b5:d5:9a:24:6d:10:23:4e:fd:3a:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Apr 8 11:01:07 2025 GMT
Not After : Apr 9 11:01:07 2025 GMT
Subject: CN=6abb0f5bfe10bfc03dc9dabb375ac1fab4925cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:f8:3d:11:1a:fb:25:a9:8c:9e:88:fc:24:
7a:51:31:61:e2:5b:e6:20:94:84:59:b5:12:42:12:
d1:37:d9:13:4e:f2:a5:ab:c6:af:ff:87:09:ab:3a:
99:10:97:81:10:05:2d:0b:1d:a2:22:55:6a:5b:82:
98:6b:61:76:05:7c:2d:15:6e:89:c9:7c:3e:c8:d1:
5d:80:ad:59:6f:be:ec:97:3b:a2:52:65:09:e9:8a:
61:92:ff:96:4f:34:c6:8f:54:c8:c4:2d:30:12:5b:
91:7b:a5:f1:75:f2:16:34:e6:78:7a:a5:6b:4c:53:
87:fd:28:09:1f:45:f5:c8:0e:07:83:4b:50:32:3c:
5a:cd:52:e9:d7:1f:e9:53:f7:6e:62:9c:cc:fb:f3:
6e:11:7f:f8:a1:7e:0a:e5:0b:fe:49:8d:4d:08:1c:
64:3c:54:a4:d4:c1:ad:6a:0f:df:4a:f4:5a:ab:d0:
43:71:97:7f:f6:19:cf:63:15:e9:6d:ea:97:d8:43:
1d:38:9e:05:6c:33:65:60:b3:7a:1f:ff:fc:59:40:
33:f9:06:2c:41:50:67:57:50:6b:ac:50:b8:d7:b7:
01:dc:49:7a:6a:90:8f:31:99:a7:2b:08:1e:2c:ab:
5c:5b:d6:43:7a:03:dc:1f:51:49:5e:76:c1:8f:05:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BB:0F:5B:FE:10:BF:C0:3D:C9:DA:BB:37:5A:C1:FA:B4:92:5C:C2
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:df:6f:5f:d9:a4:6d:9d:16:62:bc:cf:9d:ad:61:39:02:45:
43:54:e0:c1:76:e8:66:66:ef:28:65:1c:01:17:94:68:ce:b8:
79:a7:d0:2c:fe:b6:3f:8b:5c:8a:82:07:b7:6e:c1:2f:9a:c8:
99:04:f0:9c:a2:1b:f4:a1:f3:9e:2d:1c:36:d3:7e:2c:9d:01:
46:57:b4:66:77:2a:bd:c0:6d:25:5a:2b:55:34:7a:f2:25:6f:
f0:62:63:0b:1c:2f:0a:19:74:79:b3:76:4d:a2:d1:c7:54:30:
c7:a4:9f:13:cd:85:39:bf:18:f5:cf:9f:65:21:45:fe:be:fc:
57:c8:30:df:42:ff:25:ed:c6:4d:f8:f5:12:b3:61:7b:9b:73:
db:63:3f:12:60:f2:08:2d:5f:6f:ec:2b:cc:5b:61:cf:f8:f5:
77:95:9d:8d:1c:7e:67:f6:1d:f4:fa:01:21:f8:a6:4e:8f:9b:
b9:48:37:96:13:e5:60:75:b4:19:82:94:d0:00:e5:29:d8:4e:
44:a5:ce:59:ec:bd:91:25:94:b3:c4:47:44:e6:26:0a:8f:3a:
0d:8b:b9:7c:e3:de:d1:09:f5:83:37:f6:51:09:7e:7a:0e:4a:
19:4f:08:f8:49:1c:09:00:3d:42:0b:c7:b9:6d:71:14:28:d1:
f0:b0:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:21:57 2025 by rpki-client