Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: bNvujTHEzT+fmrMgEAmZctSap5Bgbg36xETgFN/ytIU=
Subject key identifier: D1:B9:37:D0:04:68:D7:5C:12:51:26:26:6A:CE:93:3A:1F:0D:B9:6D
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 0196C615DB3E40290403B6BCE042C2EF4572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 20:00:43 +0000
Manifest this update: Mon 12 May 2025 20:00:43 +0000
Manifest next update: Tue 13 May 2025 20:00:43 +0000
Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=)
2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: N3kYPOT6Q9RwOpx3Y3rePufqomuKPJ8j/0fBNmOc7/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:db:3e:40:29:04:03:b6:bc:e0:42:c2:ef:45:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: May 12 20:00:43 2025 GMT
Not After : May 13 20:00:43 2025 GMT
Subject: CN=d1b937d00468d75c125126266ace933a1f0db96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:ce:8a:1f:64:a5:f1:d7:7d:c6:f1:dc:f7:
7e:25:2c:c1:7d:46:e5:89:6e:f3:40:57:2e:c4:a5:
39:9c:9e:41:ea:fd:21:65:dc:89:d5:5b:88:f5:d4:
9b:85:fe:b3:50:2e:16:ae:1d:14:c5:5f:57:7b:3c:
68:00:4d:5a:eb:85:f5:f4:2a:0b:46:db:07:63:7c:
4a:6b:ba:ea:7f:35:f5:60:04:b2:9e:72:52:2e:b2:
99:29:21:3c:4c:b5:f2:44:6f:f0:c4:4b:e8:2c:63:
28:c5:1a:6d:89:93:dc:f2:26:d8:16:56:8e:02:fe:
bf:2d:aa:72:c3:23:36:59:4e:00:f6:8c:c5:50:78:
12:13:84:c0:b6:50:50:90:cd:28:8b:dd:dc:b0:a3:
47:2d:1a:3e:19:f6:5e:7a:16:e2:a5:cb:76:ad:7e:
4d:fe:d0:0f:16:3c:e0:d0:bb:2b:fe:88:41:cc:e6:
06:af:89:71:a4:62:ac:9b:91:e1:ea:41:a9:1f:3a:
46:61:88:b4:bb:3e:7e:c8:02:a2:08:af:38:1f:7c:
9c:29:22:9b:9e:38:70:9d:1a:d1:50:da:07:a7:bd:
28:83:b1:b3:52:b1:0d:9e:c7:5a:f3:5f:ee:dc:49:
34:b3:a8:88:fe:24:73:a5:39:9e:a1:0e:f1:e8:85:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B9:37:D0:04:68:D7:5C:12:51:26:26:6A:CE:93:3A:1F:0D:B9:6D
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cd:c6:c5:97:0b:42:60:b7:ff:ec:03:3c:00:33:a1:a8:24:
37:cf:03:2f:94:41:9f:d4:aa:70:9e:52:b8:50:bf:a4:2c:b1:
3f:44:a8:bd:68:5d:5a:00:6d:42:c0:e0:c5:3c:14:ab:ea:1f:
33:bd:2a:d0:66:b3:2c:91:76:9c:01:75:49:45:b5:75:3f:4c:
d3:b6:b8:bb:06:ea:56:74:7a:c0:b4:78:37:da:a0:5c:11:d6:
d9:c4:a6:8b:40:32:b5:14:ce:bb:3f:c0:fc:22:b0:c0:6a:2f:
bd:96:09:2a:fd:bd:bf:af:72:c2:d9:85:63:18:17:33:85:ba:
01:a1:c8:fa:4f:27:8c:28:2a:c8:9a:c5:4b:e2:83:d8:64:68:
59:e8:c6:2a:a0:29:21:20:a8:95:cb:4a:0f:a8:9e:98:db:c6:
c1:56:42:d6:ce:6f:f1:8c:11:4d:2a:42:36:d7:da:55:8d:0e:
bf:08:d6:9b:77:68:8c:e7:af:bd:01:02:62:58:74:0c:eb:16:
5d:26:19:6a:ea:ae:fe:f3:5e:29:c8:ab:aa:bc:f7:22:a4:c6:
77:66:78:4e:32:ea:db:cd:72:fc:10:75:ff:ac:62:fe:21:c2:
cc:b4:e7:b0:72:66:94:9e:f7:ef:ba:8e:13:c7:11:78:83:22:
e1:2e:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:10:19 2025 by rpki-client