Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: 9aZkphaMSYEmRkudIjmq8oH9nHYXzxnSu+h5JLmwbIk=
Subject key identifier: E7:1E:11:C8:A2:6D:2F:EE:8E:99:5A:E6:2F:75:75:42:F8:47:2A:75
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 01968058A752CE797F00485D24A91785D149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 0F0F
Signing time: Tue 29 Apr 2025 07:00:15 +0000
Manifest this update: Tue 29 Apr 2025 07:00:15 +0000
Manifest next update: Wed 30 Apr 2025 07:00:15 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: TpVT+ynwAtswRc6uVVnt9rc84Tdh6VX75KZzbo7ck8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:a7:52:ce:79:7f:00:48:5d:24:a9:17:85:d1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Apr 29 07:00:15 2025 GMT
Not After : Apr 30 07:00:15 2025 GMT
Subject: CN=e71e11c8a26d2fee8e995ae62f757542f8472a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:5c:e0:74:74:47:57:51:b7:d4:31:9f:3b:
35:32:a5:79:dc:6b:33:bf:13:dc:27:00:e4:18:b4:
b2:87:ab:f7:87:7d:75:4a:cf:03:6b:35:e3:61:60:
f3:33:34:20:08:05:de:08:3d:c1:4e:c1:da:de:97:
d3:c2:90:80:94:58:7d:9c:a7:12:6b:1e:b4:ff:8a:
3d:4b:fb:c0:c2:3a:e5:55:24:dd:8a:6d:0f:32:ab:
22:1c:1b:a0:ac:4e:31:11:67:0b:47:71:96:a7:b1:
53:52:9e:9f:5a:0f:1d:85:3e:6f:34:e1:38:9d:1a:
d4:c6:40:e5:1f:4d:8a:97:21:1c:69:40:68:d4:08:
2f:5f:df:6a:a2:06:86:58:d3:33:0e:e6:5c:b3:9c:
b2:58:3d:9a:2e:9f:e5:bf:a2:9b:80:02:24:52:0e:
32:dc:03:ba:b3:10:6a:49:39:b7:73:68:54:82:dc:
c9:cf:1a:b3:f2:f6:f9:5e:2a:b8:fc:55:b3:2b:93:
df:8e:d0:f2:07:cc:86:4f:9a:7c:9b:14:d2:8f:26:
c0:1e:c1:73:d5:ac:46:7a:6a:ea:7b:ad:1d:f2:1c:
16:f5:9a:52:e8:ba:84:eb:b1:6a:0e:b5:8b:b0:52:
96:51:74:51:d2:87:2a:10:42:50:a4:8b:5b:64:ab:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1E:11:C8:A2:6D:2F:EE:8E:99:5A:E6:2F:75:75:42:F8:47:2A:75
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:07:a1:b4:12:85:13:79:55:e9:41:a7:df:b5:a5:61:b6:63:
28:3e:aa:c4:e4:f5:9f:26:03:d3:2c:53:e8:d1:9a:e3:eb:77:
62:2e:5e:fa:42:29:0d:e2:16:fe:2b:1f:2e:ab:e7:1b:04:9b:
c3:dc:49:4b:23:78:39:37:a0:45:08:fb:37:be:c2:21:a9:9c:
6d:43:2b:f8:3e:6a:01:e0:3f:81:56:66:0c:8e:66:18:5d:f5:
c8:d6:54:49:91:91:1a:b4:b5:56:44:b7:b6:c3:a0:fb:99:aa:
7a:ad:11:ea:4f:fd:67:de:e6:b2:0b:79:1c:90:df:1c:5f:76:
ac:79:f9:3c:74:5c:9d:a3:6e:18:f6:38:a2:c3:02:d7:46:57:
1e:7e:c2:d6:7d:2f:89:24:43:e3:d5:a3:ba:e7:32:e4:84:44:
68:8c:f3:b0:7e:e0:42:56:ab:45:7e:95:91:f4:f9:f1:54:0e:
e6:88:a9:49:9a:b1:8f:6b:df:d5:12:eb:e1:f9:5c:cb:31:05:
1f:a2:97:6b:c3:2f:ab:01:e9:4f:a1:76:5a:4e:4a:c0:23:5f:
8e:60:d0:77:d8:5d:e8:68:40:9a:2d:8f:64:4b:c9:96:a6:17:
db:c7:b6:2b:2e:e6:ae:23:18:6d:b2:a8:23:ac:8d:25:25:f6:
fd:1f:50:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAWKdSznl/AEhdJKkXhdFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTVlMzVjMDVjMmFiNTRiZTc1OGI2Yzg2NzE4NmNlZTE1
OWJkNjMwHhcNMjUwNDI5MDcwMDE1WhcNMjUwNDMwMDcwMDE1WjAzMTEwLwYDVQQD
EyhlNzFlMTFjOGEyNmQyZmVlOGU5OTVhZTYyZjc1NzU0MmY4NDcyYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj1c4HR0R1dRt9Qxnzs1MqV53Gsz
vxPcJwDkGLSyh6v3h311Ss8DazXjYWDzMzQgCAXeCD3BTsHa3pfTwpCAlFh9nKcS
ax60/4o9S/vAwjrlVSTdim0PMqsiHBugrE4xEWcLR3GWp7FTUp6fWg8dhT5vNOE4
nRrUxkDlH02KlyEcaUBo1AgvX99qogaGWNMzDuZcs5yyWD2aLp/lv6KbgAIkUg4y
3AO6sxBqSTm3c2hUgtzJzxqz8vb5Xiq4/FWzK5PfjtDyB8yGT5p8mxTSjybAHsFz
1axGemrqe60d8hwW9ZpS6LqE67FqDrWLsFKWUXRR0ocqEEJQpItbZKsi5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOceEciibS/ujpla5i91dUL4Ryp1MB8GA1UdIwQY
MBaAFEql41wFwqtUvnWLbIZxhs7hWb1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQt
N2M2NWFlYzZmMmJkLzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQtN2M2NWFlYzZmMmJk
LzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgehtBKF
E3lV6UGn37WlYbZjKD6qxOT1nyYD0yxT6NGa4+t3Yi5e+kIpDeIW/isfLqvnGwSb
w9xJSyN4OTegRQj7N77CIamcbUMr+D5qAeA/gVZmDI5mGF31yNZUSZGRGrS1VkS3
tsOg+5mqeq0R6k/9Z97msgt5HJDfHF92rHn5PHRcnaNuGPY4osMC10ZXHn7C1n0v
iSRD49Wjuucy5IREaIzzsH7gQlarRX6VkfT58VQO5oipSZqxj2vf1RLr4flcyzEF
H6KXa8MvqwHpT6F2Wk5KwCNfjmDQd9hd6GhAmi2PZEvJlqYX28e2Ky7mriMYbbKo
I6yNJSX2/R9QTg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:27 2025 by rpki-client