Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier: I8SEKjTNyi1wzETTOSSmcmZZHI2tJQhZamK1agV2If8=
Subject key identifier: 3F:DF:8D:58:D8:0D:07:73:72:49:C2:70:04:81:11:C5:80:B6:D3:CE
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial: 019679EA17E9746AFA80BD396D07BEC10A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number: 0BF6
Signing time: Mon 28 Apr 2025 01:01:46 +0000
Manifest this update: Mon 28 Apr 2025 01:01:46 +0000
Manifest next update: Tue 29 Apr 2025 01:01:46 +0000
Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: 0YOHmgG4IqWZg0JAL3vQ9fP6DS1IlWWUfc932/qeQrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:17:e9:74:6a:fa:80:bd:39:6d:07:be:c1:0a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
Validity
Not Before: Apr 28 01:01:46 2025 GMT
Not After : Apr 29 01:01:46 2025 GMT
Subject: CN=3fdf8d58d80d07737249c270048111c580b6d3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:b5:f6:47:92:b6:a4:fe:7f:77:b5:8b:7b:
e2:63:d3:88:a2:0c:87:05:59:ff:92:f0:95:cc:b0:
be:ac:00:ac:4b:cb:34:ba:18:aa:19:16:ee:ba:26:
55:c0:af:24:78:2c:66:46:f6:8d:eb:1e:cc:05:43:
1b:ae:0a:88:6d:b5:72:d1:cd:e5:f6:5b:d4:90:73:
53:f9:cb:fa:82:54:c0:59:5f:09:49:b4:44:1c:81:
8f:85:62:b0:d3:72:a7:24:ec:d9:6e:2b:bf:e8:b9:
d8:7c:07:e7:25:a2:a0:e9:1e:8b:49:03:ad:3d:3e:
8f:5a:d4:5b:1b:d7:30:4e:b2:3b:f7:ee:0b:a8:89:
5e:c0:c4:a1:ec:71:06:bc:5d:9a:5d:b5:ec:9a:f6:
c2:0a:8a:dd:3e:ad:00:5b:c5:eb:35:1b:83:90:66:
78:54:2e:b2:43:46:57:60:6e:1d:e6:9f:7f:a0:a8:
fc:4f:0a:5a:23:f2:e4:a3:53:30:b3:4f:60:50:57:
f2:d9:6c:80:45:65:b9:50:a9:df:09:f0:6d:35:f2:
9e:30:ad:86:09:22:20:50:b9:41:b7:dc:aa:51:bc:
09:af:1d:d0:7b:1f:2c:f9:52:85:da:e9:bf:a2:8e:
0e:9c:c9:03:c5:fd:16:12:e6:69:3f:e1:ed:cd:fd:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:8D:58:D8:0D:07:73:72:49:C2:70:04:81:11:C5:80:B6:D3:CE
X509v3 Authority Key Identifier:
keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:75:d9:30:86:55:32:d8:1c:61:a7:80:55:d8:0b:5f:fe:b9:
d1:e6:38:df:dd:25:4f:ca:d1:00:dd:fd:1a:66:bb:9c:ba:88:
f5:ff:12:0b:17:2a:7a:2f:c2:fb:9b:2d:91:5f:53:b5:c9:7d:
4b:a5:d2:2c:29:c3:a7:bc:25:0f:df:b2:98:50:c4:9d:ad:cc:
e4:b2:7f:96:38:83:27:c8:25:02:b3:56:04:13:ac:d7:c8:41:
fb:eb:c6:fd:df:50:ef:2b:c4:06:71:bc:97:3b:cf:29:23:af:
af:dc:a9:01:a0:f5:f4:3f:d6:5c:53:fd:88:35:79:aa:c3:10:
e2:35:71:b0:3c:5e:ae:20:7d:29:0d:00:fa:ae:d7:8e:d6:ed:
c5:b7:75:19:82:c8:53:c3:34:b4:47:f1:4e:62:c6:05:21:a3:
74:4a:3e:ba:38:3e:0e:b9:e2:6f:c1:38:7b:34:5b:1e:0d:85:
64:2f:7b:73:e9:0c:a0:24:61:93:a3:13:87:a8:af:19:82:cb:
eb:a4:ec:ca:fb:cc:a8:4f:e3:34:e0:b7:fb:1c:a5:c0:67:c3:
7f:17:65:73:88:9e:14:05:1d:8d:27:cc:e9:14:eb:89:95:87:
85:e9:c4:a9:ff:d8:c5:b4:23:38:34:40:c0:5f:da:d7:28:dc:
25:c9:06:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:37 2025 by rpki-client