Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: SsSur1/Nx7TgHrathMq+aArzbM2u5CFVcUemnqRnWbY=
Subject key identifier: 3F:9A:53:A5:5D:9C:FE:39:BC:73:6B:CB:DC:FF:8D:BE:46:EC:80:AF
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 01967A1FDCC7CE41EEC4476B1D2198B70A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 054D
Signing time: Mon 28 Apr 2025 02:00:30 +0000
Manifest this update: Mon 28 Apr 2025 02:00:30 +0000
Manifest next update: Tue 29 Apr 2025 02:00:30 +0000
Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: 004EQZQTqGPsJDxtXujnCoKMjGPjpbHFzrdn4oFcEPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:dc:c7:ce:41:ee:c4:47:6b:1d:21:98:b7:0a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Apr 28 02:00:30 2025 GMT
Not After : Apr 29 02:00:30 2025 GMT
Subject: CN=3f9a53a55d9cfe39bc736bcbdcff8dbe46ec80af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:f7:50:e8:6a:1a:23:81:a5:6d:b5:fb:c9:
5c:b4:87:c8:71:9e:cb:ab:45:d1:49:da:81:eb:25:
57:b4:10:b6:6c:db:70:e0:9e:77:f1:2f:8c:4b:0a:
90:0e:3c:48:ee:4b:76:f1:45:e8:25:99:a7:aa:0b:
20:86:9a:a1:3c:0d:e7:ad:ce:91:9d:4e:14:9c:4d:
73:dd:b7:7f:43:e6:04:85:be:40:75:46:5b:8f:b8:
bb:93:ba:6f:cc:f4:a1:0f:75:9a:c2:f4:89:fa:eb:
38:51:51:8a:92:49:fe:1c:19:4a:b7:07:c3:85:c6:
b1:2b:fc:cb:09:e0:6c:41:c7:a6:9d:89:43:18:3c:
52:73:88:43:46:4f:8a:93:cc:a7:fc:7a:68:a0:8d:
d1:55:02:27:51:a1:e0:da:48:d2:c5:38:6c:f8:c9:
c8:fb:bd:43:36:c9:cb:86:0c:09:bf:3f:2e:37:2b:
72:51:a8:a6:84:32:59:0d:e6:f7:1b:50:b7:14:35:
c3:cf:47:f0:ef:0e:3b:7b:40:60:4f:6d:4b:f1:11:
be:47:d3:4e:91:2e:51:30:06:9c:81:a9:fe:e0:7b:
11:32:24:a4:f9:b6:cc:dc:01:4e:1c:1e:3d:e3:59:
e2:ce:0a:4d:a5:cf:df:c7:24:38:45:43:c4:35:b4:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:53:A5:5D:9C:FE:39:BC:73:6B:CB:DC:FF:8D:BE:46:EC:80:AF
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c3:04:f2:8e:61:64:11:ff:a4:4d:0e:00:96:b0:85:1c:00:
8e:fc:39:3f:15:c6:2d:c8:34:37:e9:7f:3b:bb:3e:d3:3d:9d:
c2:6f:a7:bb:31:ff:0c:4f:bd:7b:c9:e7:d3:31:0e:15:74:24:
55:2e:c8:4d:7a:40:63:57:59:cc:56:81:7e:90:13:94:b7:94:
87:89:e2:8f:41:92:7a:13:5d:62:37:d9:28:a0:ca:24:0d:1f:
14:d1:a8:0c:35:05:4b:1e:18:cf:b1:1a:3f:94:51:36:e4:2f:
ea:3e:0a:0c:bc:10:cc:2b:78:d8:c4:af:b2:9a:34:ef:74:3f:
75:ac:37:49:1c:c5:2d:f3:24:89:c1:e4:a5:f2:49:6a:56:5d:
31:f2:7d:21:ba:fc:0e:fa:fd:d9:36:c0:2b:80:2e:70:06:cd:
cf:14:af:26:d6:83:0e:7d:06:29:c3:c6:17:a3:68:7d:d8:7e:
15:21:49:88:4b:3f:d3:ca:16:8d:da:85:86:d9:60:9a:ed:f6:
45:98:67:d0:9d:39:3a:3b:71:cb:1f:49:3c:fc:2c:da:4b:4b:
91:ec:a5:1c:00:65:ad:ee:2c:0e:5b:1f:42:79:5d:42:67:0b:
5c:46:6a:da:ba:32:d2:08:e3:24:54:7e:bc:9e:ee:dc:4e:2e:
51:eb:a2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:52:15 2025 by rpki-client