Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: Wf1h1GypFiwJp6xy2TO2Sa8ir+8JBPkrRmmm5iZsY1U=
Subject key identifier: 5A:61:13:C3:80:9A:17:B6:6F:ED:36:1A:60:D3:F9:F2:9E:E9:AD:BE
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019683C7A10D5056906E6D4B35BCCE3B9260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 054F
Signing time: Tue 29 Apr 2025 23:00:20 +0000
Manifest this update: Tue 29 Apr 2025 23:00:20 +0000
Manifest next update: Wed 30 Apr 2025 23:00:20 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: 6LMJR3rQ53Sr4bQinD/LnCU0GKULkqHdtDL5C6o+xso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:a1:0d:50:56:90:6e:6d:4b:35:bc:ce:3b:92:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Apr 29 23:00:20 2025 GMT
Not After : Apr 30 23:00:20 2025 GMT
Subject: CN=5a6113c3809a17b66fed361a60d3f9f29ee9adbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:00:8a:b8:0e:4f:94:b6:d9:37:72:e3:b1:
00:5f:7a:3f:0b:d6:f1:6e:e2:59:f8:38:85:0c:74:
82:cc:7d:36:03:30:c1:ac:88:42:57:1b:90:10:44:
98:7a:fc:1e:b9:d0:12:e4:e0:a6:7e:18:76:b2:11:
ef:73:81:58:02:56:e5:f5:37:00:1f:10:72:96:55:
f2:9c:58:ae:d5:bb:22:27:c5:1c:f1:f9:1b:14:34:
5e:c3:5a:0f:da:3f:c5:ba:b3:6c:e5:2c:cb:bb:e1:
77:7f:00:b8:0d:dd:57:1d:ee:c3:06:71:57:e3:5e:
d2:b4:fb:7e:c0:ff:db:8b:70:d2:fd:71:ce:8b:41:
f3:b0:50:fb:ac:b5:2e:3b:e0:1d:96:bf:e6:e2:cb:
e0:d2:68:c3:cb:de:a9:09:1d:04:91:56:3c:a2:d3:
ee:a5:14:4d:c7:c3:e1:bd:21:57:50:d8:99:52:f3:
85:70:b8:03:bd:98:42:16:48:85:0f:f3:98:6d:75:
48:f2:c0:ff:43:77:1a:46:02:29:87:f7:b6:f2:73:
be:f4:77:1c:eb:62:dd:a7:98:56:7c:42:b6:38:b1:
0a:14:ca:08:cf:a5:9f:2b:cc:85:2e:81:ee:1a:24:
b5:7e:b0:a2:0e:25:a3:d8:c6:42:c4:fa:fd:44:17:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:13:C3:80:9A:17:B6:6F:ED:36:1A:60:D3:F9:F2:9E:E9:AD:BE
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:58:45:19:c2:47:79:5f:8a:f2:26:b0:e1:b1:80:74:a5:b8:
2c:b3:c0:7f:fd:bf:b4:fa:da:db:47:10:fc:0c:52:6c:ee:8d:
23:2f:d0:35:54:e8:7e:96:17:df:71:b6:08:2f:c0:0d:76:9e:
20:34:82:52:c8:64:de:a9:b0:21:df:94:ba:d0:52:05:ec:1d:
d1:53:4a:b0:23:f3:5e:94:b7:32:0a:02:25:cf:fc:d8:e4:79:
35:4d:f2:8a:96:0f:11:1e:4f:0e:ff:04:9a:4a:24:a1:fc:78:
5a:01:10:bd:36:97:e3:43:93:c2:01:6a:fd:60:6e:27:b5:5f:
99:24:c5:98:26:3d:53:7a:6c:29:5d:0d:0b:f3:15:11:de:e7:
1c:14:2c:21:5c:87:ba:5d:a2:bb:34:21:cd:3f:37:ce:50:de:
91:7e:93:6b:d2:20:02:20:4b:13:6c:1e:f1:26:b5:93:3c:b0:
43:03:f4:07:82:cd:e0:75:07:9d:e2:48:20:79:96:60:50:30:
cf:09:ca:cc:d2:65:24:f5:b6:cb:7d:e7:b8:f8:00:74:2b:9f:
3d:43:ae:d2:40:6f:ba:df:9b:d4:67:60:90:7e:4e:5c:a1:54:
a1:78:49:eb:78:2a:a4:cc:82:b4:35:b7:83:4e:44:b6:a5:06:
6e:b9:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:28:28 2025 by rpki-client