Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier: ww6k8Dx3oYdCJ9a1SmCVFW8Bc/5Az8UGk1OPO3qcflg=
Subject key identifier: 27:97:22:1D:1D:CC:A1:63:D7:78:19:8F:4B:75:8B:A3:89:6B:4C:38
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 019676E7ACBA0C3C20A7B3E1252BA8AD8DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number: 108C
Signing time: Sun 27 Apr 2025 11:00:16 +0000
Manifest this update: Sun 27 Apr 2025 11:00:16 +0000
Manifest next update: Mon 28 Apr 2025 11:00:16 +0000
Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: D3AKHXghEerXYhntHTK5TWmk2/eECJQJc03fz9Ep45c=)
2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:ac:ba:0c:3c:20:a7:b3:e1:25:2b:a8:ad:8d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Apr 27 11:00:16 2025 GMT
Not After : Apr 28 11:00:16 2025 GMT
Subject: CN=2797221d1dcca163d778198f4b758ba3896b4c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:8f:eb:5c:c0:ac:5a:9a:61:ec:9d:28:63:
4c:2e:cd:4e:d6:49:f1:5d:bd:3e:10:25:eb:ea:f8:
4e:d0:4d:be:6b:38:f1:62:9b:81:16:9a:5d:9c:5f:
2c:ad:f4:f9:5a:70:53:1b:17:25:da:c0:8e:e4:45:
d7:e7:54:d9:ee:15:91:8b:b3:b9:e5:f1:3c:fc:ec:
bb:00:09:d5:72:7f:aa:25:18:9b:ac:34:40:10:ef:
3d:73:60:6c:ed:3b:1f:bd:61:27:60:ec:67:0e:c9:
9c:c8:38:e4:f6:85:75:e8:aa:6f:c5:6a:44:0b:ad:
95:ba:31:63:c1:3b:72:df:59:a1:ee:32:72:72:b7:
07:18:fe:68:e7:f3:f8:7d:20:8c:6f:eb:6d:a0:13:
d0:a3:d7:08:22:78:60:ae:4f:a1:08:1f:8b:b6:a2:
34:c4:2f:1a:fe:9f:35:66:cc:ef:1b:14:08:33:86:
c2:b0:eb:27:65:bb:0c:87:3b:72:82:be:f4:b0:18:
e9:2e:c5:67:2b:d5:9b:68:6a:a6:36:7f:27:9c:ad:
ea:8e:0c:9d:1a:52:67:7d:87:20:8e:c1:ba:0b:7e:
95:4a:48:f5:a7:59:db:47:ea:09:c6:fb:51:1e:b1:
99:c2:66:9f:2a:dd:dd:1c:d7:93:d3:be:44:23:0b:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:97:22:1D:1D:CC:A1:63:D7:78:19:8F:4B:75:8B:A3:89:6B:4C:38
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ef:d4:d3:8f:25:e1:2f:f5:0b:f7:4d:15:0b:1f:39:a9:00:
17:ae:9a:9c:8e:71:1a:7e:1a:7c:32:4a:9c:6d:c0:ca:91:85:
ce:f7:e6:14:29:98:bb:ab:f7:56:53:e5:b2:51:ec:bd:1f:9f:
ea:23:cb:b0:15:7a:ff:75:fe:66:e1:00:5e:28:91:da:5e:7b:
5f:66:5c:53:97:e9:4b:05:0c:84:dd:e4:c4:b4:5d:85:09:6f:
73:a8:7b:c1:1e:ee:e0:e5:80:d7:75:38:76:44:48:1b:df:9e:
41:ba:4e:7e:9e:5c:4f:cb:76:bf:15:10:83:7f:78:72:62:89:
fe:c7:b6:32:98:18:02:f3:06:0a:3b:9d:af:36:c1:b5:9d:0c:
ef:b7:a2:be:af:74:e5:04:43:9a:e1:f8:f0:91:47:6e:02:04:
bb:7b:45:94:17:5e:31:d5:f9:14:35:af:c9:25:8e:f6:77:fe:
91:05:0e:0c:0e:de:9f:0e:69:85:ca:3e:e5:f6:66:03:69:39:
b8:30:fc:3f:ce:75:51:d9:c2:d0:42:82:38:25:15:68:54:f4:
1b:1d:37:53:f9:a5:1e:0a:3a:1a:0d:92:bb:ff:f8:f1:59:70:
26:36:f1:cd:13:0a:b6:1e:6b:9e:0f:76:12:60:da:51:21:64:
aa:29:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:19:05 2025 by rpki-client