Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier: PrnfnNhsQeiq6mkCJTLPj4xnxcf3DgiYeTE9qPbj2T8=
Subject key identifier: C5:61:FC:EF:7E:FA:A0:B9:13:55:65:BF:74:AC:25:68:C8:94:FB:62
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 0196AA312F0795CED9A1F09A533AA13C92CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number: 0FE2
Signing time: Wed 07 May 2025 10:01:12 +0000
Manifest this update: Wed 07 May 2025 10:01:12 +0000
Manifest next update: Thu 08 May 2025 10:01:12 +0000
Files and hashes: 1: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: ATZtdwRukkDIq9GbMLUeVFQwPKLVkDRtCbith9EUOU4=)
2: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (hash: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:2f:07:95:ce:d9:a1:f0:9a:53:3a:a1:3c:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: May 7 10:01:12 2025 GMT
Not After : May 8 10:01:12 2025 GMT
Subject: CN=c561fcef7efaa0b9135565bf74ac2568c894fb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:ec:3c:fb:a2:7b:f2:64:80:57:a5:ed:71:
2d:4f:a6:3b:81:49:2d:14:99:ad:01:48:78:d4:3b:
5e:74:ba:2d:49:f0:4f:29:11:b1:16:32:79:99:92:
33:63:7e:6d:68:2e:e4:4f:b6:21:ea:a4:9a:48:14:
b6:ba:a3:73:55:9a:cb:36:dc:23:4e:77:fc:56:fe:
6b:b2:bb:4e:9f:14:35:e7:61:7d:d6:8c:cf:99:53:
44:31:b0:39:f0:b8:50:68:33:4e:80:a2:4a:09:6a:
0e:cf:f9:d7:15:81:5a:63:5a:67:82:8a:fe:0a:fd:
c9:9e:ad:e5:ac:68:26:22:7f:23:28:35:75:0b:55:
ff:9f:58:fd:66:09:e7:cd:11:74:34:30:74:c1:50:
89:0e:2a:af:3a:e1:c1:0a:89:cf:22:ec:ea:fe:af:
a7:7b:b0:f4:cc:0b:f9:e8:64:fe:da:d7:d7:39:ba:
17:78:3e:52:01:49:69:0f:e5:3e:10:86:6d:c0:c9:
f0:0f:10:aa:1a:b6:cc:c7:be:9a:55:b1:a9:d6:ef:
32:c9:45:1c:26:74:22:10:a6:7f:0d:3c:35:9b:bd:
44:66:6a:fc:84:c0:91:ce:35:c9:4c:9d:9d:87:16:
e6:d2:fe:ff:3d:65:60:99:1c:01:c5:af:54:bd:95:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:FC:EF:7E:FA:A0:B9:13:55:65:BF:74:AC:25:68:C8:94:FB:62
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:30:34:7a:54:7b:ee:37:c3:43:b2:7c:6c:a4:3d:df:99:b0:
db:2c:0a:94:65:b8:18:4b:02:24:76:de:ad:5c:fa:03:2f:b9:
53:0a:69:7a:1a:db:aa:b3:78:15:59:5b:19:22:6e:a6:ce:4d:
f4:f2:24:fb:46:5d:af:d0:91:cb:d1:5e:7a:e4:8e:52:51:f3:
39:20:fb:c8:fd:79:20:71:cc:d1:1c:0f:6d:da:de:06:9a:b9:
9a:d3:52:ff:11:11:58:95:91:8f:b7:19:3c:6f:94:2e:99:07:
cc:bb:61:0f:38:01:06:da:a8:8f:6a:03:ed:d2:31:9c:0c:e2:
00:a2:fb:69:4f:35:64:2d:2f:f7:79:5b:56:89:44:5b:14:7e:
07:df:b4:a3:e4:32:28:26:4c:e4:ba:36:65:a0:75:8e:45:b0:
2e:f7:59:f2:f2:fd:be:69:51:1b:b0:93:fa:0d:41:19:2e:85:
34:dd:c3:15:18:fe:1a:7e:b0:f6:65:71:13:27:9f:5e:94:b0:
1b:b3:47:27:cd:cc:66:57:3a:c1:1f:d7:ab:ff:f3:68:98:24:
76:29:fc:8b:28:31:cd:0b:6a:c0:a8:13:31:33:a0:09:24:c2:
4f:3a:3f:41:da:4f:31:74:56:11:2f:d3:6d:85:8a:18:db:5c:
b3:24:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:23:50 2025 by rpki-client