Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: 4Vm+kpOw0+4g6TuTIEWPQ1seuNPSB/UJEojUAPgfudc=
Subject key identifier: 7D:66:BE:00:43:4B:D9:56:27:27:70:4C:00:EA:F3:38:DF:B3:35:05
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 01967AC5146EA1B4412D31F4249EB2F1A144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 10A0
Signing time: Mon 28 Apr 2025 05:00:58 +0000
Manifest this update: Mon 28 Apr 2025 05:00:58 +0000
Manifest next update: Tue 29 Apr 2025 05:00:58 +0000
Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: SsYj4OPDM94YVw8jTGrW1rRtdsgzcutBu//coINy1Zw=)
2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:14:6e:a1:b4:41:2d:31:f4:24:9e:b2:f1:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Apr 28 05:00:58 2025 GMT
Not After : Apr 29 05:00:58 2025 GMT
Subject: CN=7d66be00434bd9562727704c00eaf338dfb33505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:77:5d:0b:79:60:ec:c8:4b:b0:d2:d8:de:
b5:71:1a:f0:cb:1e:66:f9:be:df:32:b5:2b:67:8a:
ce:87:4b:1e:de:e0:bf:6e:6a:ac:7a:39:be:7c:34:
d3:20:08:53:47:e8:32:84:46:6b:53:1b:d8:c9:f2:
71:c3:f9:ec:f0:2b:86:3e:1c:3a:8c:78:fe:2e:f5:
66:cc:be:eb:43:af:ee:c2:33:db:1f:cc:8f:65:f8:
9e:5a:2f:05:18:4b:eb:32:ae:a6:6f:93:21:b3:01:
ba:96:76:09:05:09:19:88:6c:74:ce:62:96:bf:34:
57:8b:28:a6:a0:12:b2:a5:60:a2:14:97:af:ac:df:
38:2b:70:55:96:e3:11:fd:5b:cb:2e:29:08:eb:1c:
a0:9f:91:3e:45:b2:f2:bc:52:47:a2:bf:5a:ce:e8:
b8:44:8d:88:ff:d5:0f:dc:34:94:a7:57:d8:9e:69:
ea:66:36:a7:00:7c:f1:1f:83:21:4c:a0:51:c1:d4:
ce:12:28:1c:a6:26:44:8d:3b:39:13:a5:f9:11:1e:
1a:9d:9b:1b:c1:80:47:12:27:8e:1e:c4:66:a8:4b:
d8:f4:f2:46:dc:71:a4:22:2c:e7:fd:dd:1f:97:93:
07:4c:fd:cd:22:24:fd:dd:f0:21:3f:1f:b3:c6:64:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:66:BE:00:43:4B:D9:56:27:27:70:4C:00:EA:F3:38:DF:B3:35:05
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:22:b5:01:fe:11:e2:2b:a0:d0:ff:c6:cf:a2:bd:1a:92:24:
8e:f9:f5:4b:5a:ab:ae:8e:04:4a:9f:e7:55:d3:f4:bd:63:be:
dc:e9:88:bf:14:af:90:ec:6b:90:fb:79:66:1f:7b:f1:d5:5b:
2e:09:ba:75:b5:42:69:3f:41:ae:43:54:04:15:d7:a0:36:8e:
0b:18:2b:76:c2:be:2d:c2:8a:8a:58:b9:ee:0a:1b:d7:ae:d9:
9f:7d:64:b4:46:50:42:65:59:5a:75:fa:9a:25:87:ce:28:86:
6e:81:fe:1e:05:20:b6:25:91:3f:b2:ca:59:2e:ff:82:fc:6e:
6d:f2:f9:e0:44:b7:10:ab:dc:5e:9f:a3:93:fb:a9:45:14:a6:
bc:6f:a0:7c:05:42:55:83:12:3a:a9:e8:9f:1a:07:39:77:92:
56:60:4b:35:5c:1a:c7:ac:a3:09:2a:c6:85:c8:2f:87:a9:2a:
0f:06:8e:88:f4:2a:dd:db:e2:62:4e:b6:b7:db:bd:0b:23:6a:
d2:6e:ec:6c:fe:7f:fd:e6:0f:06:12:a7:6b:31:15:f9:9d:a8:
93:27:10:28:d8:45:73:47:f3:35:fb:ca:7d:cc:10:9e:9c:0c:
7b:e6:d8:e9:28:0b:fd:ac:ef:34:ed:66:8a:50:84:21:67:14:
3c:25:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:07:13 2025 by rpki-client