Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File: SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier: DCXT71gbVEWnEaqx/nWY/bjuM6kJg5jJUhM8REMG4+c=
Subject key identifier: CB:B9:C2:98:3E:91:2E:81:53:C0:30:CB:55:44:21:A9:3B:03:F6:22
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer: /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial: 0196846D1A12974E19E958C16369164A38BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number: 1278
Signing time: Wed 30 Apr 2025 02:01:04 +0000
Manifest this update: Wed 30 Apr 2025 02:01:04 +0000
Manifest next update: Thu 01 May 2025 02:01:04 +0000
Files and hashes: 1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: OcN0tKtX6W5kk5p+G+5dWu1LtJbW2zboLXCIETw2qb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6d:1a:12:97:4e:19:e9:58:c1:63:69:16:4a:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Validity
Not Before: Apr 30 02:01:04 2025 GMT
Not After : May 1 02:01:04 2025 GMT
Subject: CN=cbb9c2983e912e8153c030cb554421a93b03f622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:30:7a:bb:45:d7:4c:68:1a:8c:e8:78:6a:
1f:da:d5:dc:7e:68:2f:48:bb:6e:dd:a0:22:61:4f:
27:cf:0f:0e:4b:3c:aa:af:26:3b:ea:bb:5b:36:d6:
16:44:17:2b:f9:5e:d7:bf:a0:23:68:df:61:4f:bc:
2c:cb:c0:2d:27:b3:f5:99:2d:20:98:76:89:07:b2:
a8:64:af:a0:7d:0f:68:42:90:3a:da:07:44:93:d9:
3b:20:d7:ea:cc:4d:f0:c8:56:54:b9:ab:92:6b:ed:
2e:ed:da:8a:df:1b:e9:43:23:25:11:a3:46:6c:41:
a3:8d:e7:14:d0:19:5c:e0:35:f1:91:61:4d:61:bf:
6f:e4:61:08:ee:43:6e:59:56:60:39:14:bc:2c:c8:
0e:3f:df:a6:17:26:81:41:ef:fd:23:e3:a1:bf:25:
b4:63:05:15:73:68:05:85:61:f8:bd:22:4a:46:6b:
8d:68:6a:f2:94:76:e5:fb:2a:ac:56:a2:2c:01:97:
48:31:30:83:2e:92:f3:d2:77:d5:e7:9c:b3:04:1c:
6d:0d:84:7e:27:b0:2b:40:b7:6b:e6:c7:b2:bc:e8:
91:48:e1:c5:bd:51:6a:45:90:b9:68:2e:fc:a9:d9:
93:1f:e9:49:08:4b:28:43:f5:63:d4:a1:19:cb:ea:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:C2:98:3E:91:2E:81:53:C0:30:CB:55:44:21:A9:3B:03:F6:22
X509v3 Authority Key Identifier:
keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:76:47:54:c0:1c:4f:ad:a6:d6:bb:f4:70:a1:72:b2:60:d4:
c1:1e:1a:8e:cf:51:27:6f:7a:d1:74:a4:9a:c7:05:68:1b:45:
a7:d7:ce:84:4f:79:ad:32:44:fc:b7:7f:ec:3e:9f:d6:79:b0:
13:00:69:f8:9d:6b:87:37:90:7f:32:ae:62:a6:8f:e7:d7:30:
d0:e0:11:82:99:28:ea:72:28:0e:14:fb:7f:b3:bb:5d:43:7e:
2e:4e:ad:87:32:60:d8:a6:4d:1a:17:8c:e8:a8:bd:a1:86:60:
c0:15:13:47:51:d4:f6:e9:e9:93:38:6d:08:06:a1:a5:c8:a7:
d6:77:d6:52:57:40:3b:9b:e3:3c:93:07:cd:8b:49:63:e7:9b:
fb:85:1d:e8:70:a7:f7:3a:0e:f2:1a:7c:6a:a0:f7:6e:af:31:
78:5d:18:b3:ab:89:69:ee:f6:c5:67:14:0e:dc:81:ae:3f:13:
96:81:fa:1b:72:3d:b5:e1:3b:2b:f9:ab:52:a4:e1:e6:98:e0:
77:86:31:e5:ed:f9:cb:3b:34:92:42:7e:d6:77:b2:75:2d:29:
d4:6d:7d:24:95:8b:c7:ba:42:89:78:d2:ae:ff:9d:ec:bb:15:
96:3e:b9:91:64:d8:ad:fb:98:28:8b:ae:f6:a5:1e:88:04:21:
27:9e:00:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:27:57 2025 by rpki-client