Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: b19aoCVMXVAcvQElonPe6cF0RSyr9f5CQCThCOZG3X4=
Subject key identifier: 1C:84:E7:FF:E1:EB:AD:34:01:4D:D5:0E:7D:59:03:C3:E4:AE:D1:E9
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 0196789F0C7B4BE316B5864B475DEFF207FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 1146
Signing time: Sun 27 Apr 2025 19:00:11 +0000
Manifest this update: Sun 27 Apr 2025 19:00:11 +0000
Manifest next update: Mon 28 Apr 2025 19:00:11 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: a5JrmKtgiCo4AODntSJaH7nc5pdAtVvLS9u109ycnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:0c:7b:4b:e3:16:b5:86:4b:47:5d:ef:f2:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Apr 27 19:00:11 2025 GMT
Not After : Apr 28 19:00:11 2025 GMT
Subject: CN=1c84e7ffe1ebad34014dd50e7d5903c3e4aed1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:e2:ea:f0:4a:b9:0e:41:d6:1b:04:6b:a6:
c2:43:b6:80:96:77:38:c5:82:3d:b2:09:e9:d7:2d:
4f:36:79:46:43:1a:e1:4d:13:5a:cc:e9:1b:91:31:
e0:59:02:29:f9:0c:a4:19:00:0f:4b:ac:d4:db:6e:
64:ab:f7:84:87:30:bf:a3:86:4c:aa:5d:38:32:17:
82:05:6b:60:28:67:09:15:e6:8c:3c:b5:f7:74:ae:
94:87:05:1b:ea:a3:62:42:be:74:5b:2c:22:a3:45:
9b:eb:a9:40:03:5b:25:9f:69:df:2e:3c:94:1b:ef:
5d:d2:a1:86:4f:10:78:a6:5b:56:7c:5f:44:2d:a6:
be:1c:82:c6:74:e8:83:52:58:0d:36:9e:13:75:7b:
8c:2a:19:83:a5:f2:d3:27:6b:a8:20:29:17:33:4c:
48:fa:b9:dd:ff:97:1d:54:c7:f4:4d:58:67:02:8d:
65:a8:22:28:16:3f:95:9c:9e:ab:9c:f6:a0:91:75:
82:c7:a7:9d:37:9a:5c:67:0f:7d:e6:b6:1a:68:b3:
87:f0:8f:b9:8e:75:de:05:be:63:cf:00:fc:c3:76:
e8:97:fd:dc:17:e7:8e:96:b5:83:5b:73:f4:a7:e4:
12:81:2a:0d:bb:53:dc:74:d9:7c:ef:1c:14:0e:3b:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:84:E7:FF:E1:EB:AD:34:01:4D:D5:0E:7D:59:03:C3:E4:AE:D1:E9
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4d:ac:91:5d:47:8f:14:d6:9a:04:ba:a9:d2:59:2f:86:54:
58:ce:0b:f9:1e:e9:7c:9d:d7:4c:81:d7:e2:51:0d:ab:35:df:
d5:9d:84:79:36:bc:b7:24:32:aa:1e:a0:38:bb:3f:a8:7d:65:
11:fb:9b:bc:69:96:25:15:e3:39:c5:66:39:2f:33:36:f7:11:
f5:34:fc:04:0b:dd:85:3c:a0:ff:0b:19:5a:03:36:8b:6f:44:
cc:b9:7a:2b:29:c3:ca:3d:55:d6:01:d5:49:91:9a:9c:5e:5b:
db:47:ec:d4:9d:05:c1:ad:df:9c:67:61:02:ee:d4:96:f0:72:
07:ee:08:36:90:7a:fc:f8:70:c3:e1:23:2e:17:56:cb:ca:df:
71:55:30:b5:8a:df:50:9c:2d:4e:1e:95:95:c1:85:b0:1b:e1:
0e:cf:26:b8:cd:db:b1:27:d9:7f:7f:81:f1:16:a9:e0:48:1c:
80:43:76:42:3a:f9:7e:38:1a:2a:b4:eb:64:d6:bc:8f:31:5c:
38:7c:a2:a1:d7:87:13:e8:6e:a6:c8:25:4d:f1:8d:8b:77:be:
73:32:ba:da:12:9f:c6:1e:57:c1:a0:6c:b8:99:da:8f:03:7b:
57:fd:37:11:df:63:a4:08:d5:be:cd:67:cf:72:ff:41:83:81:
55:60:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:14 2025 by rpki-client