Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: VkDIHhrTf72FToyep9BSLz9ohT1BBllXyH2wAWALgak=
Subject key identifier: 54:89:ED:EE:94:14:F0:29:98:6B:B5:40:A1:CB:4E:05:7A:A7:F9:76
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 01967D8F0EA309264A91B28469D66D58C0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 18:00:49 +0000
Manifest this update: Mon 28 Apr 2025 18:00:49 +0000
Manifest next update: Tue 29 Apr 2025 18:00:49 +0000
Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=)
2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: zmoaEFKQHfZGJsSgt5+NK7yjVPplzsk53irOs6RZneg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8f:0e:a3:09:26:4a:91:b2:84:69:d6:6d:58:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Apr 28 18:00:49 2025 GMT
Not After : Apr 29 18:00:49 2025 GMT
Subject: CN=5489edee9414f029986bb540a1cb4e057aa7f976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:a7:c5:bb:83:d3:a9:c7:af:db:fa:00:21:
79:79:e2:67:ee:63:59:62:61:ac:7b:5d:da:85:46:
7e:53:a3:a7:c0:1e:2f:79:e1:db:90:7a:57:27:38:
71:86:f2:87:db:21:46:ff:8a:b4:6f:68:c6:d9:08:
90:52:22:c4:7b:74:b1:f9:35:dd:d6:bf:48:97:86:
75:86:23:dc:22:f4:88:d3:83:82:a4:1c:6e:be:f5:
07:4f:81:41:91:dc:12:25:f4:fd:81:30:09:34:8c:
a4:9e:d8:3c:4b:55:23:c8:67:56:0c:f9:00:7d:b2:
b5:ce:50:b0:de:3d:49:0f:b7:95:eb:7c:d6:b6:c7:
af:bf:3c:7c:b5:d8:8f:dc:4b:08:e3:56:45:8e:02:
32:39:77:db:79:b3:7f:54:77:72:c3:da:16:9f:52:
f6:a2:36:ff:d0:1f:98:bb:15:70:d0:3e:aa:e2:02:
bc:11:0a:81:d0:c3:82:e8:d3:8b:63:3a:d4:42:f2:
b0:e1:f8:1d:53:c2:72:b0:75:c4:24:9b:db:51:b7:
59:9f:e8:06:e0:de:13:f7:ed:3b:d7:5a:83:64:06:
3f:eb:80:ba:cb:ba:02:90:8c:32:b3:09:62:7f:ab:
9a:f2:e7:94:fe:25:df:80:5c:99:d5:cb:05:35:e9:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:ED:EE:94:14:F0:29:98:6B:B5:40:A1:CB:4E:05:7A:A7:F9:76
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:c7:18:c1:25:b4:c9:98:ea:dd:37:60:b9:36:74:03:6a:
17:01:95:fc:9e:89:d7:07:fd:00:d9:63:c3:79:53:98:58:37:
16:b7:f0:72:e8:f3:c6:e0:83:33:e5:89:00:c3:77:d4:d4:b6:
54:1c:bf:8b:ce:ff:0a:ba:ea:7a:d2:7e:fc:42:28:30:f8:f2:
64:83:fa:06:ea:59:9b:5e:91:14:53:57:d2:1e:46:e9:ef:88:
42:31:e7:93:7a:56:3b:39:ff:e5:c0:a4:b6:77:a1:f8:22:9e:
f3:d3:e6:78:8e:a0:6a:5f:ef:a7:f8:07:a0:1b:36:d4:74:12:
a9:62:fc:e9:f5:18:b7:30:f3:22:6b:45:f4:16:de:ec:ae:54:
1b:9e:ae:12:c8:8f:2b:03:6f:4c:ef:df:76:5a:70:7b:31:3a:
85:f5:9b:c2:59:8e:40:32:8b:9f:c2:51:7c:69:17:4e:1d:8a:
ae:66:a5:b5:8c:1c:4f:97:2f:a9:05:21:7a:4c:2b:4e:46:23:
2e:c2:8d:a4:41:95:b0:1e:02:3c:c5:58:06:6b:f8:5d:c3:e2:
eb:e4:f1:43:11:98:4e:77:55:86:ee:75:56:5c:8b:cc:e0:13:
12:96:ba:e9:75:3f:7c:82:70:11:e0:9a:d8:63:96:56:00:83:
da:4c:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:43:15 2025 by rpki-client