Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
File: SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json)
Hash identifier: N4Qe29INNheO0Xnz7IICD0GQO4qSsxmSVAepob5x+Ro=
Subject key identifier: EC:42:C6:43:79:3A:9B:FB:0B:BE:29:5C:B3:2B:D9:01:F7:03:5C:C1
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 01967E6A5E8E1C47E3C239E35131BA96E8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
Manifest number: 13DE
Signing time: Mon 28 Apr 2025 22:00:22 +0000
Manifest this update: Mon 28 Apr 2025 22:00:22 +0000
Manifest next update: Tue 29 Apr 2025 22:00:22 +0000
Files and hashes: 1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: yUAMeMISxiEwCW8+bmHfSsnltHaF/OVRoouzekYW9yI=)
2: yCFTDAjAsaJLNl8E_LJGSjy8D0Y.roa (hash: 8ak/iE1MogNbSCZ97ilFzI246ohpoM35OGkp4ZMBEY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:5e:8e:1c:47:e3:c2:39:e3:51:31:ba:96:e8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Apr 28 22:00:22 2025 GMT
Not After : Apr 29 22:00:22 2025 GMT
Subject: CN=ec42c643793a9bfb0bbe295cb32bd901f7035cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:c7:64:6c:25:43:02:8c:19:8b:89:07:98:
08:a6:c8:71:31:4d:c6:a0:bb:c7:a8:98:bd:a1:91:
a1:42:e4:89:1e:7f:02:38:45:8c:c8:a8:20:e8:b3:
d2:47:8b:a8:4b:10:86:ce:47:63:89:9f:32:16:97:
40:5b:58:5f:7e:f6:47:77:2f:ae:2b:90:52:d9:99:
11:d9:ea:22:d1:7d:58:62:83:d2:7b:db:07:ad:02:
1e:ef:18:aa:75:73:ce:fb:0a:fe:1a:d6:5c:3f:14:
8c:a4:05:a7:22:81:58:02:1b:94:7b:3c:b4:f1:f0:
1f:b1:50:c6:6b:89:4b:2b:ea:ed:5a:84:bb:db:a4:
90:cc:1c:94:b8:60:29:ea:05:2c:fb:b1:a1:0d:85:
d6:37:09:78:fc:ec:12:74:1f:ee:35:2f:83:29:ca:
89:c5:a8:3c:a7:97:f7:83:d1:09:b4:49:7d:3b:1f:
81:ee:0e:ea:4b:ef:c5:91:70:22:c3:52:ba:8e:4d:
91:c9:0c:85:25:ae:7c:84:dc:23:b6:02:ec:80:6f:
38:b8:ac:48:11:15:48:f7:f5:66:24:e1:9f:d2:9b:
b2:40:fa:3a:36:99:d4:b6:ec:22:ad:05:f7:06:25:
f4:81:09:42:33:77:fd:fb:99:54:5a:0f:ae:02:a3:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:42:C6:43:79:3A:9B:FB:0B:BE:29:5C:B3:2B:D9:01:F7:03:5C:C1
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:29:20:0c:d3:7b:1c:3d:e9:64:ae:08:2e:1c:25:f6:4b:
41:26:71:fb:75:0f:2a:cf:84:96:46:d6:81:30:22:5f:89:44:
af:d9:06:28:e7:64:e0:18:03:2c:4d:74:00:03:26:c5:08:fd:
37:a6:f9:57:0c:12:a1:29:a0:20:1d:e7:46:be:b5:02:59:04:
1e:4f:ee:90:ae:e8:65:59:6c:92:4f:d9:a7:a0:07:76:66:b1:
d9:ae:6b:a5:5a:8c:c8:97:6c:2d:d4:2f:e6:31:ea:15:83:f0:
39:79:ce:e4:a8:fe:ff:ea:29:82:4a:f8:c9:70:67:09:89:ab:
e4:b2:02:22:62:64:17:43:fa:0c:63:e8:fe:e3:2c:67:ed:fb:
a2:9e:a4:33:fe:17:2e:68:2b:c9:5b:8c:5b:7e:2b:ce:c3:71:
27:10:78:47:ed:7e:76:f0:40:69:6e:31:b4:80:a5:17:63:b0:
80:a8:02:24:6b:5d:9d:f0:db:48:1b:37:22:31:22:a3:ed:dd:
2e:64:26:b8:56:41:5b:2c:7b:82:73:1e:ed:66:9a:4e:02:3d:
4d:48:cc:71:08:0a:74:b0:f1:d9:81:66:87:9f:6e:7c:9d:3c:
c1:1b:ae:d1:b7:66:c3:23:e5:f9:7e:d4:78:9e:22:d2:ee:22:
e5:bd:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:39 2025 by rpki-client