Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: mS6Gy3mMYpyaB4tLGG5dEoe8INVo8Vs+ksaCF5apPds=
Subject key identifier: 74:DF:47:FE:11:55:CB:1E:AD:74:59:DC:1A:E3:E3:81:71:EA:DF:C5
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 019681A315E426B191DD08C34668626BCD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 100A
Signing time: Tue 29 Apr 2025 13:01:10 +0000
Manifest this update: Tue 29 Apr 2025 13:01:10 +0000
Manifest next update: Wed 30 Apr 2025 13:01:10 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: YSf/kGbwAC9XeXvh0cKt2eLqpHMqjr6T5L4/YjViyMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:15:e4:26:b1:91:dd:08:c3:46:68:62:6b:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Apr 29 13:01:10 2025 GMT
Not After : Apr 30 13:01:10 2025 GMT
Subject: CN=74df47fe1155cb1ead7459dc1ae3e38171eadfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:24:d6:9f:c2:82:fc:71:e1:62:fa:84:57:
35:85:15:63:47:5d:9d:0c:68:97:ca:39:1f:66:b7:
27:e3:3b:e7:7a:24:83:6d:4d:54:25:be:99:a1:80:
be:41:5c:b5:3d:a4:8b:ff:81:31:3b:cd:a8:52:43:
f3:65:c5:04:20:74:46:f9:8b:6a:ad:29:8a:69:80:
ca:56:da:c3:83:53:9d:a9:07:f3:e6:bf:60:c1:01:
b0:7a:b8:48:00:6a:02:fa:86:de:43:ac:fd:5c:b1:
23:81:26:91:1a:01:5d:36:55:ff:d9:8e:b5:fa:65:
6c:b5:8e:2e:d8:7d:62:98:06:ff:d5:2d:e3:ef:b3:
6b:94:10:60:19:ec:7b:62:f2:9b:31:78:1c:8f:68:
3e:a1:36:c0:d4:66:32:46:53:b6:22:d6:33:df:c7:
1f:ba:3e:fe:9b:11:48:67:03:4d:f6:d4:a3:10:0b:
84:b3:d3:0c:59:05:4f:58:47:6a:e7:ab:98:cb:91:
b1:83:b4:0f:79:36:6a:34:a9:8e:98:07:bc:56:a0:
ec:8b:55:fd:22:13:24:81:c6:45:6b:c4:78:aa:77:
d3:07:f2:01:98:04:0b:6b:49:c9:b4:e7:b6:27:35:
fe:06:80:32:d9:98:82:f2:de:25:da:8a:0e:a4:73:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DF:47:FE:11:55:CB:1E:AD:74:59:DC:1A:E3:E3:81:71:EA:DF:C5
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:1a:de:32:58:a0:be:4e:de:f3:86:05:fe:03:40:00:0c:
6e:c4:a2:25:9a:b1:fd:aa:f6:12:3c:18:78:06:b7:5f:e8:37:
48:15:a5:86:a3:61:df:ac:57:34:72:14:e2:fc:8e:39:55:9d:
40:43:b1:28:ec:20:fe:06:04:80:3f:d2:3f:20:2a:80:1a:22:
8d:19:b1:fe:c0:d5:07:83:59:9f:c9:aa:52:7c:ac:75:90:4f:
ce:9d:8c:f2:0a:02:c9:ec:e8:63:41:2a:5b:5d:e9:07:38:77:
4f:f6:18:e3:ee:bc:a2:a4:6e:98:a2:d1:f6:42:9b:65:f8:92:
55:7f:a9:0b:42:1d:a5:28:b9:fc:b3:b0:eb:e7:b7:10:28:88:
0a:5c:40:c2:81:de:8b:a7:e9:04:f5:8a:97:0f:1b:71:8d:8e:
1c:95:e6:f7:96:cb:5b:53:1a:bd:f5:02:1a:27:72:33:5d:d3:
c7:ba:5b:21:3b:28:45:48:f6:0f:a2:b0:ec:3b:34:e8:fa:64:
83:27:26:db:84:df:95:b9:39:66:39:2a:93:6b:38:9e:87:dd:
1b:d0:41:10:54:2c:ad:de:cb:39:1f:91:9b:7b:88:0e:f4:c5:
c3:0f:6f:9b:c3:75:f9:28:25:5f:ad:9c:7d:9a:45:03:38:56:
fd:3b:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:28:24 2025 by rpki-client