Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: L0qphtsW53yc7If1OlnZsgikGLeMHoGoN+ul3ldylxg=
Subject key identifier: 19:AA:A2:B2:A5:8F:64:E5:BE:60:FB:29:6F:95:D4:2E:0F:F1:3D:A3
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 01964D46EE65C2158E6F35E3DDA1A9F2719E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 11E0
Signing time: Sat 19 Apr 2025 09:00:16 +0000
Manifest this update: Sat 19 Apr 2025 09:00:16 +0000
Manifest next update: Sun 20 Apr 2025 09:00:16 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: KD6TWV/gOa/HJQ+Mfl9CgvlUWlpZmMefCFAT05sM0P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:ee:65:c2:15:8e:6f:35:e3:dd:a1:a9:f2:71:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Apr 19 09:00:16 2025 GMT
Not After : Apr 20 09:00:16 2025 GMT
Subject: CN=19aaa2b2a58f64e5be60fb296f95d42e0ff13da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:c1:b3:a7:74:7a:fa:05:94:3a:d8:10:1c:
f1:2c:2e:ed:7b:65:e2:87:91:16:98:04:78:e6:b3:
d4:bf:5b:56:fc:01:6e:f7:c3:a4:52:fe:f0:91:b7:
f3:75:b7:b1:49:bd:c5:54:4f:f5:56:1d:ba:f1:28:
22:d0:31:2a:f1:2f:f0:17:d8:dd:dd:0e:2c:d6:d1:
53:b5:a8:de:6d:53:2d:2e:41:c5:e9:60:c7:77:c5:
63:f6:a5:0e:78:9b:a5:3b:eb:85:05:70:9d:95:8b:
50:b0:cc:67:8e:ae:29:64:d7:60:0c:10:87:90:b4:
7c:ed:b0:bc:a9:9e:17:f5:9b:f3:76:43:69:c2:0a:
dc:f4:65:00:ff:bd:17:5e:3c:c5:fb:5f:c2:cf:03:
15:ae:93:9d:b9:08:91:c5:73:66:86:25:ac:ad:7e:
60:c6:76:39:27:c0:67:35:ed:1e:c7:68:ad:43:15:
18:76:f2:9c:fe:53:5e:1c:31:e4:b5:46:f5:63:38:
57:b6:a3:a2:dd:4f:b7:f4:2d:c2:dc:a3:1f:2f:c6:
54:e3:e9:2c:a0:9f:87:28:33:18:d5:cb:47:4c:b2:
b2:11:81:b8:e5:47:81:30:3a:28:9a:af:74:ab:1d:
a2:53:8a:f3:8c:65:0b:b6:93:8e:1e:08:bb:5e:e5:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:A2:B2:A5:8F:64:E5:BE:60:FB:29:6F:95:D4:2E:0F:F1:3D:A3
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:62:c5:b9:2b:5e:d2:a5:cd:80:d6:21:98:f5:fa:e6:c9:
94:d8:5f:e4:87:88:36:03:cb:fb:10:39:6f:9c:c8:72:23:0a:
d7:bd:99:fc:f5:23:30:08:76:8b:a4:ef:1a:9f:e6:10:45:77:
3d:f2:34:b1:af:7e:78:ab:11:07:ae:d7:87:4a:03:83:4b:a5:
08:8f:7a:bc:89:8e:d4:9f:ce:30:bf:10:33:70:f1:db:8a:82:
b0:48:e9:0b:03:1a:86:a9:55:eb:8c:a8:d9:22:bc:09:02:d4:
9a:2a:3e:02:de:ee:fa:f1:f2:33:98:b1:14:14:da:a6:17:ee:
88:74:a2:09:55:63:de:24:43:bf:20:11:8b:5e:e1:e9:c6:05:
65:28:8f:ff:c2:26:d0:12:b3:09:ff:b3:b1:7a:17:73:69:c4:
1b:fb:7a:df:1f:7c:ca:a3:93:46:0c:73:87:7b:91:f1:5a:9a:
7c:80:99:d7:99:d9:ab:88:9e:c9:6d:e5:8e:94:7d:bd:37:ac:
05:53:25:f2:4d:d2:3d:6b:4e:45:5d:37:4b:32:cf:b1:8b:ea:
04:44:ef:05:7f:a6:d5:36:d9:13:65:3d:06:d8:37:65:d2:ce:
da:57:ee:a9:04:12:0b:2c:8e:03:40:29:bd:45:37:a4:d7:7f:
0c:6a:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:11:16 2025 by rpki-client