Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: HsU012zSiqp2UsETq/xW9e6QBpCNNaitfy9+Iegy47c=
Subject key identifier: 5F:7C:9C:9D:32:41:7D:9B:3D:2C:21:3C:32:79:02:8F:C9:4E:67:05
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 0196911697D78EDAE2153695B7499F010D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 1170
Signing time: Fri 02 May 2025 13:01:39 +0000
Manifest this update: Fri 02 May 2025 13:01:39 +0000
Manifest next update: Sat 03 May 2025 13:01:39 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: AWOj1LvlhE7CJkGOLIcbHgT1ag/hHD0lYYE7YqbFGM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:97:d7:8e:da:e2:15:36:95:b7:49:9f:01:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: May 2 13:01:39 2025 GMT
Not After : May 3 13:01:39 2025 GMT
Subject: CN=5f7c9c9d32417d9b3d2c213c3279028fc94e6705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:15:a3:42:da:21:f1:87:e7:70:29:c3:f3:
b1:cf:52:2c:de:6e:37:18:15:ba:43:eb:fc:a0:7a:
2d:f0:a4:f6:dd:47:98:b0:5b:81:dd:ac:05:ac:86:
f9:7d:78:a0:90:67:7c:0a:c1:ce:25:6c:8f:5b:d4:
51:b2:33:cf:53:b3:9f:72:3d:c8:f6:80:2e:e8:86:
a9:77:f6:68:4b:bd:e6:6d:f7:cf:32:ba:46:e3:5f:
6c:b6:0d:43:4e:cc:1d:56:fc:24:bb:26:3b:62:37:
2a:36:a4:b4:bb:41:3d:08:e7:e7:7f:68:3d:9c:c2:
75:3d:6a:56:4e:19:fd:25:72:40:ce:d6:45:ef:e6:
b8:96:78:00:0d:65:c3:2b:8d:1d:57:23:d7:ba:b9:
00:54:b0:f5:be:4d:cc:1e:ca:41:48:55:b7:16:1a:
5b:d8:7e:16:23:bf:b5:7e:a1:18:a6:a0:33:54:b5:
6b:09:c1:ce:a5:44:4c:02:8d:4b:55:18:62:0b:8a:
63:f3:4f:e3:70:37:f4:e0:bb:1a:11:ed:c4:f4:e2:
bd:bf:44:06:5d:db:a8:c9:67:f6:24:4f:94:f0:2c:
ac:d3:61:e5:3c:c8:72:4d:b8:c0:fc:2d:9e:ce:65:
a5:b5:c7:1c:8e:8b:78:55:68:87:a7:26:e1:43:7e:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7C:9C:9D:32:41:7D:9B:3D:2C:21:3C:32:79:02:8F:C9:4E:67:05
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0c:68:d4:93:cd:18:4f:9b:82:93:3a:82:4c:f4:11:60:2a:
25:70:ea:ed:9b:31:02:99:ce:7b:61:ee:23:50:84:ed:10:b0:
5a:2e:ec:df:e0:48:81:a4:4e:c4:1c:d0:94:29:4e:d8:79:17:
5b:4f:9b:4d:fd:08:99:8a:19:76:87:c8:08:d1:36:b7:7f:19:
a6:28:23:34:79:f6:16:14:09:98:e8:be:7c:f8:51:5e:a9:a0:
27:76:2e:f3:5e:ae:2a:4f:9c:fc:07:7a:b0:68:6d:07:38:1e:
05:11:6b:da:d7:e2:e8:c0:83:b7:f6:f7:a6:4c:09:0a:93:12:
3a:03:04:37:c4:6a:69:a8:f1:42:29:84:5b:6b:5a:4a:c2:54:
05:04:10:0d:dd:37:09:07:c7:7d:54:9e:d3:42:33:df:05:c4:
f7:77:9b:0c:e9:42:d5:12:7c:c7:cb:21:8c:6d:db:14:61:f8:
ba:30:83:29:5f:9c:09:2b:a3:e9:5c:74:f3:93:83:3b:a9:7e:
4b:cd:10:52:e1:d8:b7:64:e2:20:6f:96:9b:2a:57:ba:94:07:
22:21:de:5f:96:0e:95:89:d4:06:51:a9:cf:51:66:00:17:2d:
fb:c2:ed:ba:54:3e:37:d2:fa:93:15:ba:a9:0d:88:5b:57:76:
0a:49:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:39:45 2025 by rpki-client