Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: w5GXOKyp7Ic1/1fCIJrKB0VquTiBWRKX/rgqk1pVIgQ=
Subject key identifier: A9:17:87:22:25:32:A3:ED:F0:97:86:1B:DC:9F:13:FD:19:09:27:46
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 01964EC7945565CE4C6F95BEAEF01ED49AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 16:00:24 +0000
Manifest this update: Sat 19 Apr 2025 16:00:24 +0000
Manifest next update: Sun 20 Apr 2025 16:00:24 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: 3nlsvQf4tnH8DDYssiIxpmAXBtl6dfzMI5fsdZBgmaY=)
2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:94:55:65:ce:4c:6f:95:be:ae:f0:1e:d4:9a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Apr 19 16:00:24 2025 GMT
Not After : Apr 20 16:00:24 2025 GMT
Subject: CN=a91787222532a3edf097861bdc9f13fd19092746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:81:33:0c:07:91:32:f9:9e:0a:85:f1:dc:
e0:b2:d3:fa:7a:09:93:63:38:2a:6c:0b:43:ec:60:
67:ae:b3:06:bb:d1:21:9f:61:eb:66:70:15:0b:da:
0a:d5:b3:0e:34:9c:69:92:62:4d:70:3e:fd:d1:6e:
b6:0b:cc:80:d8:e6:87:74:6e:6f:7f:b0:eb:4d:84:
83:aa:27:55:a1:0b:60:32:fc:d5:03:44:f9:2a:e6:
fb:fe:c7:78:31:2d:97:74:33:d1:c2:f4:b3:9c:b7:
8a:b8:66:da:34:55:53:0f:af:d0:06:cf:97:f3:82:
d6:f4:a3:2a:14:b4:c7:8d:1a:1d:8e:59:f1:7b:f6:
0f:42:da:ee:75:6b:b6:65:3a:f3:a9:99:4d:83:40:
80:1c:33:f8:89:a8:67:75:f9:6f:25:f7:00:80:fc:
ce:83:57:34:44:61:7b:1a:43:1b:05:ae:70:88:6d:
42:43:f3:44:01:c4:af:b1:01:4f:2f:78:e4:9e:7d:
79:e7:29:22:f0:e8:95:5a:8d:a3:9b:47:08:ec:45:
e0:99:34:fe:04:12:54:c8:9c:6e:b9:63:e1:4b:d1:
7c:fd:0a:68:09:e6:e8:c8:33:30:1c:9d:a6:7c:ec:
04:33:d2:65:25:8c:d5:08:06:ee:21:a7:ee:75:33:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:17:87:22:25:32:A3:ED:F0:97:86:1B:DC:9F:13:FD:19:09:27:46
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f9:99:bc:e0:44:f9:e2:0d:28:00:fa:b1:a5:f6:4a:f5:f1:
0b:94:b2:92:44:46:16:03:6e:ae:70:9b:d6:ce:3f:44:60:53:
e4:f2:71:dd:51:d9:1b:e3:41:94:e4:0a:09:c5:e5:f0:b3:94:
3d:ae:ab:b4:cc:4e:db:d1:6b:60:16:6f:93:81:fb:4e:30:8c:
0b:6c:8e:c0:6b:a3:6f:f9:ea:ac:b4:0a:99:3a:73:79:6e:59:
6b:97:05:bf:26:e8:8e:1e:5a:8c:a3:d6:96:19:ae:61:50:5e:
30:c8:6d:f2:6c:d5:9f:db:1d:84:4b:28:d3:02:2c:a1:4e:73:
94:84:36:fd:5e:9f:da:c9:99:5c:c3:48:26:fb:85:92:bb:b3:
71:79:60:a1:fa:1d:4e:71:01:cb:c8:2d:75:e9:96:f4:5a:93:
73:aa:00:39:14:84:c2:04:8a:83:01:c7:4d:43:c3:80:b0:77:
53:73:51:80:b5:26:02:7a:5d:c8:11:a9:38:a9:90:8d:6f:cb:
ae:16:e9:88:fe:46:5c:23:b3:64:43:4b:bf:d8:d2:e2:0a:9b:
01:58:ef:fc:6e:b8:ef:4e:07:79:31:0c:3f:cd:45:5b:8a:dd:
32:a6:5e:82:9a:f6:68:e5:b1:d1:34:45:74:50:62:53:21:02:
17:2e:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:13:33 2025 by rpki-client