Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: dgz1KVp93nn/hqC606CxMt9B815Ohb/kmYwAiRC1qbE=
Subject key identifier: 3E:45:83:0C:48:4D:A2:EA:34:F9:83:40:20:23:AB:F2:D1:17:33:11
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 01967679E42FC99BBBC4043A3D5543293678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 0EDB
Signing time: Sun 27 Apr 2025 09:00:21 +0000
Manifest this update: Sun 27 Apr 2025 09:00:21 +0000
Manifest next update: Mon 28 Apr 2025 09:00:21 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: QHbIIVgj+l0RbEyqsyBp9ARXt3gEM1VcBRkk5RtEKok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e4:2f:c9:9b:bb:c4:04:3a:3d:55:43:29:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Apr 27 09:00:21 2025 GMT
Not After : Apr 28 09:00:21 2025 GMT
Subject: CN=3e45830c484da2ea34f983402023abf2d1173311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:d6:55:3b:fe:ea:52:52:19:b7:d5:04:8c:
bb:ea:f3:78:cf:1d:d4:1c:cd:aa:8a:5c:d6:c1:30:
fc:da:aa:86:e6:14:d0:62:3a:2f:12:e0:59:7b:98:
14:2a:5e:95:d8:f4:f0:be:25:01:c4:25:40:07:6f:
07:b4:27:40:a8:12:9a:1f:63:6a:4f:73:b0:ce:da:
59:57:49:aa:8b:30:ce:84:35:e9:aa:13:d2:02:b6:
b7:2d:b5:49:b6:69:cf:de:31:b2:31:2a:8e:79:e7:
32:bf:6f:5e:3e:9e:bf:66:b4:95:77:31:43:b5:0f:
3c:4e:ee:35:de:51:f3:fb:98:98:6c:87:53:fe:e4:
4b:c2:79:2f:70:83:52:60:4b:41:cc:d3:eb:b1:c4:
bd:b7:1d:bc:e2:41:fb:9a:d4:9b:c5:c2:6a:a3:49:
84:54:61:dc:07:a2:dc:dd:92:49:13:9b:2c:a5:dd:
47:9f:45:ec:97:1f:f3:2b:2a:c8:3d:f9:ba:61:2b:
77:1c:62:18:db:c6:c4:07:0c:1b:d4:19:0f:6e:d2:
1e:5a:b5:1e:49:9e:81:bf:ae:f7:46:e3:ea:85:14:
05:bc:21:08:e5:a1:e9:00:c7:e7:40:d3:97:27:d6:
66:92:a1:3d:e3:b5:a7:b0:fb:af:c8:17:a4:14:23:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:45:83:0C:48:4D:A2:EA:34:F9:83:40:20:23:AB:F2:D1:17:33:11
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:92:46:ae:0a:20:9a:6c:e1:0f:c5:70:26:84:5e:e0:46:
3e:88:30:e6:98:60:3a:67:25:85:b6:fd:d2:f4:38:15:67:3a:
11:1e:2a:e1:77:8e:c7:18:d4:6b:d1:57:18:0b:db:e7:21:11:
78:63:c5:36:98:c7:4d:0c:6b:f9:b6:62:52:58:3a:ed:44:68:
cf:84:a8:cc:c8:62:8c:5b:9f:77:31:d3:cc:80:73:4e:9d:b6:
22:e2:1a:40:79:9e:5c:b4:31:27:e6:5c:5f:6c:85:8b:03:83:
d1:17:b3:a3:7d:21:dc:a8:22:ae:c3:5c:60:c5:af:50:19:20:
da:63:72:b6:a4:a2:93:22:e3:31:bb:c9:c6:88:d9:2a:b7:11:
78:f9:37:5d:a3:66:a9:e4:74:64:f7:bf:f6:09:a5:40:30:4a:
f0:4d:1c:f6:fb:45:19:d6:32:68:54:d1:c1:eb:6a:8e:7a:70:
b9:1a:e5:a6:6d:09:7c:42:ae:b3:1d:ae:45:46:0e:f9:61:61:
e7:1c:73:2e:2a:16:e4:15:b9:a0:18:e1:e2:c7:76:db:64:50:
c7:98:ae:37:90:b5:54:49:3b:27:e6:09:d2:00:b4:0e:72:ad:
6b:17:21:82:61:a7:27:42:a3:1b:87:c0:49:ac:f8:2b:a5:bd:
cb:f5:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:01 2025 by rpki-client