
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
File: SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft (raw, json)
Hash identifier: e1kfl7iFxulkur35wTlNcEPLUnWf03Sbz5Khinp71PE=
Subject key identifier: 1C:58:9C:95:D1:01:97:0C:1E:8C:62:A3:11:CB:84:CB:A7:F1:AC:7A
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 019686FFE389827623E6DF45C020DF6B05DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
Manifest number: 0944
Signing time: Wed 30 Apr 2025 14:00:38 +0000
Manifest this update: Wed 30 Apr 2025 14:00:38 +0000
Manifest next update: Thu 01 May 2025 14:00:38 +0000
Files and hashes: 1: B5U5hiuj472vo3lxpeeTGMOW5Ps.roa (hash: 5BiNFG9KLdrNVXjd/lTiLpF2pyPe+QUD5bM50jqM//w=)
2: DlNfl6KgR_MUNI_dJxw9ErXDeIE.roa (hash: eSCVIU9rH872alqy7/aU0fAeLMAeeiberdc7Lc5APRo=)
3: SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl (hash: GZLU7NuOQ95mtTjAoVv6eFvyjfbFiIbi0bj03LTIOxc=)
4: SM7IhaAEsmGDuZlqZRpqw-w85LY.roa (hash: /+5Lzb4i3irljEq7HlV5I6aQL6bwOiyhOurXz6ixdIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:e3:89:82:76:23:e6:df:45:c0:20:df:6b:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Apr 30 14:00:38 2025 GMT
Not After : May 1 14:00:38 2025 GMT
Subject: CN=1c589c95d101970c1e8c62a311cb84cba7f1ac7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:c3:40:b7:94:c4:83:87:2f:d7:81:1d:23:
8d:cb:fc:f2:dc:c0:34:8e:de:47:50:26:79:62:0e:
23:4f:a9:a9:a1:a3:cf:b9:64:df:e5:3b:4a:44:42:
f4:f8:1d:d8:1e:5e:af:1d:00:69:c8:ac:7c:ed:63:
b4:b6:74:b5:1b:ac:b5:11:3a:0d:d3:a9:80:0c:c4:
7c:68:a8:ca:c0:0b:fd:41:c3:1c:3d:90:6f:84:a0:
23:e0:d1:a5:60:ec:48:10:95:bc:fb:84:f0:4a:ef:
65:2e:4f:6b:7c:91:1b:54:32:8d:3c:c2:00:c5:80:
ca:46:73:28:f1:8e:c4:81:58:e0:4b:ff:12:b7:a0:
e1:2a:20:2b:47:51:3b:06:b7:74:6b:23:6a:29:6b:
a0:cd:e8:a8:2c:6b:a9:e7:90:61:27:48:20:66:6a:
0c:16:a4:c5:e9:17:4c:9b:c6:b1:8e:eb:23:4c:6f:
1c:a8:81:83:f3:d5:5e:a2:f7:2d:14:3f:d8:09:b3:
96:9c:e4:41:41:05:e0:8b:0e:2c:6c:37:6e:18:c3:
52:48:75:9f:30:5d:4f:12:4a:51:be:6d:14:52:a0:
f0:fe:1e:7f:be:31:5a:ba:ca:d7:b7:d9:52:a3:1c:
3f:8b:72:b2:a0:90:02:40:1d:93:3a:00:ef:77:79:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:58:9C:95:D1:01:97:0C:1E:8C:62:A3:11:CB:84:CB:A7:F1:AC:7A
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b3:12:f1:7c:15:1d:b3:40:1c:15:65:3d:98:9c:0d:b1:7b:
69:7a:62:2b:f6:57:20:08:68:f4:cb:08:3d:40:0a:56:91:cf:
eb:d2:d2:bb:59:b7:52:07:48:53:3f:8f:93:d7:7a:80:d0:3e:
9a:57:b1:bf:4f:fd:cc:b9:ba:b2:67:95:ce:0a:0a:35:fa:91:
58:76:fe:75:ca:25:6e:18:f4:c8:25:57:92:e5:61:46:d2:23:
5c:a4:c6:c7:d3:39:09:67:2a:12:aa:67:69:c8:3d:f9:61:a8:
2d:5a:12:ca:25:76:92:fe:a9:4a:5b:30:0e:89:1f:78:32:a4:
52:09:1d:6c:bc:93:c6:24:fd:43:ee:76:9d:ab:05:a2:83:01:
f8:cc:72:4b:5a:8c:9a:1d:3c:65:1e:9e:9f:2d:f1:e7:68:58:
72:f2:76:9d:92:10:db:e8:a1:d4:20:f6:97:b6:1a:13:13:50:
e3:e9:b9:23:8f:47:38:3a:11:b7:eb:73:20:45:8b:79:0c:91:
3b:de:96:dd:f0:b8:7b:2b:92:57:5f:9f:49:10:01:9d:f6:bc:
cb:1c:95:d3:e8:2c:a2:8b:87:11:fd:2e:47:58:03:98:08:93:
78:38:4e:03:c3:48:8a:7f:63:c3:8d:35:12:b4:37:fb:97:8f:
43:00:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:28:26 2025 by rpki-client