Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier: nTnVcraqZHcAu/JDCthzLwJjrCDiXKNduzRxdcwgpMw=
Subject key identifier: E7:CC:24:E2:98:1A:3A:90:8E:7D:73:2F:6B:C0:33:DF:25:14:B1:D3
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019674F9B78DC73AB0CCAA5768A309178E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number: 130D
Signing time: Sun 27 Apr 2025 02:00:44 +0000
Manifest this update: Sun 27 Apr 2025 02:00:44 +0000
Manifest next update: Mon 28 Apr 2025 02:00:44 +0000
Files and hashes: 1: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: hUtn6vDlj9ogdZ7vfygnUh41R5gEUWmjhWKEJIqCzO4=)
2: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (hash: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=)
3: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (hash: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=)
4: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (hash: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=)
5: z4qyX-331qkRpNendrVE2vuUwMg.roa (hash: 1tgnSBh6zavqUvITN/dHmAA7avLexZgbuVDSxY+JNpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:b7:8d:c7:3a:b0:cc:aa:57:68:a3:09:17:8e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Apr 27 02:00:44 2025 GMT
Not After : Apr 28 02:00:44 2025 GMT
Subject: CN=e7cc24e2981a3a908e7d732f6bc033df2514b1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:38:41:ac:d6:d6:be:aa:62:c6:d6:24:11:
24:1d:2f:32:06:e4:29:d3:5d:41:54:aa:46:c4:2f:
25:b6:b7:0b:e5:96:fa:a3:48:70:c0:37:dd:6c:f4:
8c:7e:a5:a6:45:ca:02:4a:f2:ed:b5:3c:57:50:38:
b0:d4:55:00:32:54:e3:ed:18:dd:b3:2d:06:df:6a:
3b:81:89:d3:99:88:9b:3f:ac:8e:65:02:95:54:15:
8e:08:8d:e9:a8:35:8a:90:29:a9:6d:fb:56:f5:ca:
e9:c3:4a:32:61:bf:36:36:28:f5:cf:0d:8b:e7:06:
40:98:a8:2a:fb:44:60:1c:d3:14:cb:10:8b:ff:44:
7c:bf:99:93:dc:6d:e6:78:26:76:33:cb:5a:0d:29:
2f:74:64:c9:4a:e9:d4:b2:5e:32:9c:96:75:8c:26:
f4:fb:49:32:a1:d8:2f:43:f4:a2:63:b7:a9:cf:59:
69:2b:34:d4:b1:4c:e2:3c:a5:33:e0:0c:07:87:20:
03:98:67:6c:d5:91:4d:c1:ba:f7:e1:34:f8:d9:46:
1e:2f:2b:b4:3d:21:a3:8c:93:b3:3b:be:da:40:47:
24:d3:2a:34:a9:27:e1:fa:21:be:9d:df:85:de:3f:
6b:69:f9:3f:d9:15:77:7b:9c:f4:1b:d0:8a:d6:8f:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CC:24:E2:98:1A:3A:90:8E:7D:73:2F:6B:C0:33:DF:25:14:B1:D3
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:33:88:f2:d2:3c:de:39:d0:8a:b8:db:69:49:fa:b0:4a:
b5:9a:b0:6c:d4:16:0f:68:5d:14:37:8d:8c:4f:85:04:e3:d1:
59:5b:da:96:2a:d8:11:48:f7:64:a9:26:5d:19:b0:b3:68:47:
a1:40:eb:10:ec:0a:18:db:67:77:9b:e3:42:de:b2:c5:a6:07:
ad:53:6c:c6:3d:5f:a2:14:be:80:51:8e:99:14:b9:95:5f:d0:
f4:17:be:51:27:b0:41:3a:09:7c:eb:9e:d7:db:bc:6d:f7:83:
82:81:ce:7a:fc:53:ad:29:bd:40:17:a1:66:58:ab:75:61:b0:
d4:4d:f0:78:a3:a7:6a:0b:e4:a1:a6:48:2c:22:fb:82:45:9d:
88:0c:26:e3:01:01:44:64:09:20:d9:fe:9d:20:4f:de:f3:09:
f5:19:b0:0c:be:50:50:90:7b:f2:bb:d1:b5:10:ba:06:58:66:
30:34:69:67:83:f3:80:db:ef:4c:5c:5d:14:45:0d:93:9f:44:
dd:04:71:33:80:f2:88:7b:ca:c1:d4:f4:cd:ad:a6:3e:93:af:
0d:ca:e1:d9:2f:3d:11:50:86:0b:e9:59:ad:ec:21:87:91:93:
27:e9:16:c9:82:a2:2e:95:01:5c:99:be:8c:dc:6b:13:34:b5:
1d:0c:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:56 2025 by rpki-client