
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier: rezJbswJpfk4Foa56jvnmUfcwl8QiavcfEny/Zttuzg=
Subject key identifier: 81:8B:98:2C:76:7B:BD:9A:29:C9:1F:D3:DF:17:A3:53:1F:6E:FF:3C
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial: 0196759EADB36DC28D411E33E9353C54598F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number: 036A
Signing time: Sun 27 Apr 2025 05:00:55 +0000
Manifest this update: Sun 27 Apr 2025 05:00:55 +0000
Manifest next update: Mon 28 Apr 2025 05:00:55 +0000
Files and hashes: 1: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: CgjdN4AVd2jkMdbGLANyUJ0Is8EkR71kQodsIXJPvFI=)
2: swB_r0IFBPm9Iemed8mXUpcDjzs.roa (hash: 4f+/BeqDILlbNbuoHwEa+IBP8dJNYECac82k/mVW3hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:ad:b3:6d:c2:8d:41:1e:33:e9:35:3c:54:59:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Validity
Not Before: Apr 27 05:00:55 2025 GMT
Not After : Apr 28 05:00:55 2025 GMT
Subject: CN=818b982c767bbd9a29c91fd3df17a3531f6eff3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:59:27:5c:09:89:40:03:d4:cb:94:42:17:
24:7d:8e:d6:f7:8c:b0:27:04:58:6d:ab:dc:18:61:
d3:36:00:64:04:1b:69:34:67:6a:90:e6:06:fe:ac:
0f:5a:d9:8b:06:d8:9c:ee:bc:09:e4:f5:9d:75:7d:
d0:f5:37:be:1a:d8:4d:3f:14:5d:01:91:6e:b9:6e:
f0:0a:5d:65:0a:12:41:7a:45:97:52:92:c2:71:11:
ee:4e:a1:7d:57:a9:da:1a:f7:97:46:dd:ad:c4:e3:
7e:2c:7a:dc:a7:ee:d8:a6:dd:b1:68:85:23:3d:fa:
20:e7:11:c4:c9:c2:83:a6:61:fd:3b:3c:8e:28:79:
fd:b0:ec:14:6e:12:ed:29:08:df:14:4d:90:0a:26:
14:ae:1d:ce:38:04:94:2c:2a:f1:55:75:cc:4d:1c:
1d:05:a6:6d:af:85:5a:aa:7b:f3:ad:c5:19:f8:00:
36:7a:60:45:61:8c:4d:24:b8:0e:90:94:10:e1:e1:
53:2b:3a:ff:26:15:91:fe:42:bb:c6:6c:39:d9:2f:
71:ee:87:f1:b8:d4:f2:3d:ff:bf:b3:20:77:11:f0:
e9:f5:fc:76:a6:f2:03:6f:03:71:6f:4b:3f:6d:9e:
79:ce:d5:08:28:ae:d3:9a:32:ff:3e:8d:2c:31:9f:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8B:98:2C:76:7B:BD:9A:29:C9:1F:D3:DF:17:A3:53:1F:6E:FF:3C
X509v3 Authority Key Identifier:
keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f2:7f:70:04:1a:50:88:c0:64:aa:e4:27:9c:8e:0c:4a:a1:
29:a1:84:53:60:f4:0b:47:0b:82:5c:e8:40:c9:71:f8:66:62:
6a:54:71:8f:aa:2c:c3:33:10:d6:03:b4:c8:0c:a5:d9:cf:c0:
68:06:d8:fb:65:ce:4e:4d:6c:6a:bd:0d:2b:6a:0a:e4:13:ff:
91:ff:8f:5e:ef:38:3e:ae:49:6a:95:da:3f:a7:f9:4d:9e:58:
5d:df:6d:39:e7:51:c6:b5:84:9e:86:7f:22:ca:76:0e:33:b0:
81:a3:37:c2:82:cb:79:01:ee:92:07:49:71:b3:1d:c8:10:5a:
0e:13:77:7f:78:33:64:d0:65:28:af:6b:b2:b4:31:1c:0e:35:
36:a4:bd:6f:7e:54:a4:ae:91:17:6f:e0:ca:ce:f5:d2:1f:c7:
ed:95:25:fc:3a:95:d1:92:74:f7:1f:24:15:ac:d0:e9:84:5f:
47:c2:3f:21:c5:fd:11:ff:fc:55:60:da:0f:65:36:b3:13:9d:
30:ed:b7:53:7d:19:c1:53:76:78:03:0c:60:41:6c:a5:3a:1b:
77:3b:1b:d3:f1:1c:61:15:2c:54:3d:b2:19:86:f7:af:a0:eb:
89:7c:65:8b:c0:84:da:86:30:9e:ac:9c:b9:c9:b0:19:44:7d:
0f:25:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:53:24 2025 by rpki-client