Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: BStICzRJqCj2xaIhGYycx5FmKoG09rS535tNLtfZV2c=
Subject key identifier: E9:AD:9A:59:8B:BA:AB:A5:39:23:F4:07:4B:43:FB:04:27:05:D4:15
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 019681D982A55CCD4C32EEE2078A24C55389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 1362
Signing time: Tue 29 Apr 2025 14:00:37 +0000
Manifest this update: Tue 29 Apr 2025 14:00:37 +0000
Manifest next update: Wed 30 Apr 2025 14:00:37 +0000
Files and hashes: 1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=)
2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: /EVF1M1l3j7oZjOpXlS3RenamgMtfHJ7U45MB5mNut4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:82:a5:5c:cd:4c:32:ee:e2:07:8a:24:c5:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Apr 29 14:00:37 2025 GMT
Not After : Apr 30 14:00:37 2025 GMT
Subject: CN=e9ad9a598bbaaba53923f4074b43fb042705d415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:b1:cc:f9:4e:7f:c1:56:5f:81:17:09:f2:
7b:fc:a9:16:8e:b8:57:d5:02:e6:ea:21:14:1f:f1:
ef:44:2c:0e:4f:67:af:46:01:77:6a:8a:1d:53:76:
11:41:90:86:79:bc:e6:53:eb:31:69:4d:b7:47:36:
7c:3e:80:dd:4e:e6:53:8e:9e:71:7a:fe:85:96:88:
7c:0b:d0:28:37:9e:f7:f4:cc:e0:d5:0f:56:62:74:
9c:c0:76:04:91:0f:e4:e0:34:72:f6:77:47:9e:9f:
0d:69:84:62:07:d6:be:d2:11:82:0c:72:26:98:92:
26:7f:1d:a9:8a:25:8d:12:1e:b4:b2:f9:53:ed:cd:
4b:f5:a8:12:24:13:ee:f1:d8:aa:75:47:2a:d6:25:
bb:f1:e3:13:c5:59:8a:6d:06:d3:4d:d8:22:72:7a:
50:8a:02:a0:f3:f5:61:3f:99:e2:e1:60:a8:ea:9b:
40:5f:20:9f:c9:45:05:7f:e5:82:d7:e6:df:eb:72:
7a:48:3f:4e:64:c8:c7:cc:7a:22:f2:61:7d:02:cc:
e4:f3:df:8a:72:01:8c:56:c1:33:cf:45:e2:f0:60:
e4:84:10:97:4f:92:03:c2:d4:2f:99:8b:95:f5:82:
d0:cd:cd:fc:f2:8c:b5:77:97:53:79:82:06:76:11:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AD:9A:59:8B:BA:AB:A5:39:23:F4:07:4B:43:FB:04:27:05:D4:15
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:70:0c:1b:4d:e7:5d:b9:06:2b:62:e6:74:c8:cc:de:d6:43:
19:53:65:61:10:fc:7d:9d:9f:a1:80:2c:31:08:d2:ed:a0:25:
99:cb:1d:3d:8c:aa:a0:6f:4e:5c:21:95:b0:4d:ff:53:6a:cb:
c2:bf:c4:53:72:7f:c7:06:83:9e:7e:f9:af:6f:3d:d8:df:2b:
4b:35:0b:71:2a:77:ea:84:9b:05:39:77:6d:f1:54:9e:b6:d6:
52:0b:03:dc:02:af:d0:45:6f:93:96:61:a0:3e:6c:83:a6:4c:
61:d7:97:db:a0:58:37:d2:ca:e7:cf:fd:f8:39:cc:0d:76:d7:
92:88:7d:57:fd:27:ac:cb:2a:54:e7:95:bf:e1:dc:e0:90:0d:
a4:01:4e:10:20:56:26:01:97:b1:08:31:c7:ce:14:aa:e6:9d:
0a:35:95:89:4d:76:dc:98:f1:e6:0f:8d:42:28:da:40:bb:f6:
49:87:d6:08:91:bc:2a:3b:79:79:3f:27:8e:e3:09:82:84:8e:
e0:83:13:74:27:53:c7:57:be:07:50:f8:9f:84:e2:6a:7e:f4:
ce:12:2d:8f:51:09:74:2b:c8:f6:42:50:ca:98:2b:e0:de:4e:
28:38:3a:90:8d:75:23:82:49:6a:82:f7:fe:fe:8c:85:57:84:
1a:54:21:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:30 2025 by rpki-client