Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: d8x4Xwwi9LNA0uEjfEmL++LU2m4cVY+A1wrO4+8qizM=
Subject key identifier: D3:5C:1A:97:8E:BF:CC:27:3D:57:E0:04:72:EA:EC:C2:A5:74:EB:64
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 019677C3CFA66AAD40245F0FFE28C485B74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 15:00:43 +0000
Manifest this update: Sun 27 Apr 2025 15:00:43 +0000
Manifest next update: Mon 28 Apr 2025 15:00:43 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: w/+gW2k2Y9eCiZ53jJa1pz6H3WOlxzSTM0XcDwfElFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:cf:a6:6a:ad:40:24:5f:0f:fe:28:c4:85:b7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Apr 27 15:00:43 2025 GMT
Not After : Apr 28 15:00:43 2025 GMT
Subject: CN=d35c1a978ebfcc273d57e00472eaecc2a574eb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:0f:cc:d7:ea:95:51:5e:49:06:6f:34:f5:
5f:57:90:45:5a:ea:6b:b3:8a:08:f5:47:da:c9:5e:
e8:53:bb:1c:33:37:1a:6e:cb:d3:f6:1d:77:6c:eb:
58:fe:70:37:5d:b6:24:36:81:c0:92:05:f9:0d:5d:
53:7f:8d:21:a4:bb:92:11:35:90:78:2b:0b:18:d7:
ba:ab:88:da:bd:52:2e:c2:d2:79:37:29:bd:1d:47:
ee:d4:d0:71:62:28:c1:cd:16:77:41:cf:4a:8b:18:
e3:6b:67:de:ac:b0:81:fb:d4:86:6a:46:88:65:f9:
86:98:20:e6:8e:81:db:ea:53:a0:1e:75:95:8e:16:
ce:d1:45:40:27:5d:97:7b:00:b4:b2:ed:15:47:1f:
f8:a6:cb:eb:0f:c1:e2:7c:49:eb:49:78:4d:21:e7:
88:3b:c4:e3:24:db:c0:14:99:09:b2:c0:83:78:4b:
66:1a:03:22:07:e6:b7:30:94:d4:d8:af:fe:ac:5b:
56:6c:1d:71:33:09:f6:1f:f6:1e:df:57:c4:e2:1f:
08:14:4a:51:b0:97:77:ec:c8:6e:8e:8e:b4:1b:3c:
c8:c6:13:fd:02:65:f8:c5:11:b0:4c:bb:3a:92:3f:
74:29:ac:57:69:a8:49:ab:c9:34:7d:29:a6:e8:7c:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5C:1A:97:8E:BF:CC:27:3D:57:E0:04:72:EA:EC:C2:A5:74:EB:64
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6c:5f:9b:64:9a:e8:c4:9a:94:d3:ec:a1:db:66:4e:30:57:
0b:87:0a:ad:a5:14:9c:c1:53:e4:5d:d4:2c:cf:cd:d6:ca:0b:
e8:a0:b4:12:60:25:5c:11:42:51:43:b8:b1:d2:c0:c5:e4:0d:
f7:b9:35:27:5f:a9:a2:c6:a1:8e:95:14:0a:3e:5f:7b:a2:69:
81:ab:24:d5:e2:e6:77:f5:a1:ae:ed:0f:ac:7d:53:bc:d6:9e:
ef:66:3a:a8:ef:ae:f3:3f:bf:04:23:a8:13:86:f8:a0:e1:cd:
19:de:9e:f6:9d:8b:b1:8a:1c:cd:77:49:c5:00:76:9b:08:9b:
00:14:51:9b:05:61:0e:8d:e6:e2:ea:90:6a:df:e0:2c:83:e7:
b2:82:88:8a:da:98:55:1e:fe:ac:62:e2:e1:19:5d:76:1b:66:
4d:82:2e:9f:f8:ac:80:1a:8e:7d:1b:b6:f1:16:78:f8:d0:7b:
f2:0a:3a:e0:55:33:e0:2e:8c:db:8d:7b:68:09:0e:0d:c8:84:
d1:b5:ea:bc:f9:83:d2:01:8d:a3:0a:73:30:a1:80:eb:fd:4a:
3c:e4:6d:e2:f8:e1:bf:a9:77:24:64:a4:89:03:62:37:d1:df:
61:0d:26:9a:a8:0d:68:01:03:9f:5e:02:4e:d7:ba:90:55:22:
7c:a6:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:28 2025 by rpki-client