Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: MK5kIf4p4ULFMD1pcPDT16HkwZu1GdHQmCjD1peWStc=
Subject key identifier: 95:49:3B:2F:14:30:FE:74:03:A3:1B:53:98:A5:4F:5E:B2:75:6F:0B
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 0196AE0E120DDEBDBC2181ABDAD9B63F19B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 1021
Signing time: Thu 08 May 2025 04:01:19 +0000
Manifest this update: Thu 08 May 2025 04:01:19 +0000
Manifest next update: Fri 09 May 2025 04:01:19 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: 1EJoRx9MqaGK1PzIhxzbG0Rh2NBx8240R4s4IbKAcCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:12:0d:de:bd:bc:21:81:ab:da:d9:b6:3f:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: May 8 04:01:19 2025 GMT
Not After : May 9 04:01:19 2025 GMT
Subject: CN=95493b2f1430fe7403a31b5398a54f5eb2756f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:fb:f3:a8:78:2d:d8:e3:c0:7a:47:72:55:
e8:2c:30:9c:dd:ea:a9:0b:8c:55:4e:a9:b3:dc:29:
c5:96:ed:69:b5:a8:3f:2b:f5:d1:28:6b:78:84:8c:
e4:08:41:7b:a7:7d:04:09:66:c5:d4:0f:db:e1:81:
40:15:84:2f:d4:fb:86:fd:f7:83:36:2c:af:7b:7e:
ad:e6:de:d2:a2:84:f4:64:81:3a:18:23:9a:83:9a:
b2:d8:78:97:af:cf:88:62:e5:89:d2:c7:66:82:55:
ae:0b:11:9e:b2:57:68:c4:61:5a:d7:d9:fa:c3:f0:
65:94:b1:0d:2a:1a:35:21:f7:7b:4c:ab:65:c5:66:
e1:ce:82:83:38:f1:e8:49:7f:15:fb:01:01:88:cf:
30:b4:a1:53:68:c9:ac:4f:09:b7:ec:f9:82:71:7e:
7a:df:17:a0:24:cf:10:84:c2:1e:ac:06:c1:f6:3a:
6f:d5:fb:1f:5f:27:bd:74:16:7a:cf:f0:ce:fe:c4:
fa:6d:24:39:31:61:39:33:92:c0:64:28:8b:9b:4f:
8c:3d:52:af:7d:19:da:d2:ca:46:a6:0a:1d:d4:ce:
b5:47:c4:5c:e3:b4:b6:48:99:1b:d2:b3:d8:67:db:
60:b0:cd:f1:83:78:7d:57:e1:80:8b:19:55:b6:40:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:49:3B:2F:14:30:FE:74:03:A3:1B:53:98:A5:4F:5E:B2:75:6F:0B
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:48:45:b7:05:aa:69:10:4f:c8:e5:7d:72:0e:57:83:55:86:
30:e4:c7:60:72:07:ef:5f:a9:35:3c:f4:b0:c1:df:9b:4a:b3:
99:ed:66:5e:f1:39:d8:fc:7a:97:1a:d2:c3:e7:02:13:be:70:
fa:3a:05:e4:f8:50:8a:18:b2:b5:e0:0c:58:b4:b1:c3:5e:47:
61:89:08:5e:2e:7d:a7:0a:ae:20:80:fa:17:43:ed:9a:1f:44:
12:5d:dd:b0:41:00:b6:f0:c8:96:6b:5e:6a:93:30:9d:15:c0:
9e:27:8d:e2:06:e5:63:6c:03:b9:04:5d:a0:df:74:d7:26:82:
75:90:61:d6:31:df:e0:fa:62:7d:c0:31:00:ca:5b:17:ab:d9:
8f:a1:b7:a7:e4:5c:5c:a4:ec:ea:d6:5a:93:fd:86:a0:cf:3a:
51:95:cd:ed:f9:14:f4:15:6e:4d:9d:60:39:98:e1:9e:7b:1e:
fa:f1:9a:75:fe:f0:36:c0:ae:e1:a8:94:be:7a:fa:81:e0:a7:
03:59:d4:7a:46:61:39:1e:dd:ec:78:a8:2d:f2:82:9f:b5:22:
c3:34:4a:ef:72:30:45:89:4e:c7:b5:4c:5a:87:9e:7f:a9:66:
0d:a0:94:62:69:49:db:6f:4d:b5:fe:d0:b1:dc:04:50:09:54:
7f:22:eb:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauDhIN3r28IYGr2tm2PxmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk
Y2UxNjgwHhcNMjUwNTA4MDQwMTE5WhcNMjUwNTA5MDQwMTE5WjAzMTEwLwYDVQQD
Eyg5NTQ5M2IyZjE0MzBmZTc0MDNhMzFiNTM5OGE1NGY1ZWIyNzU2ZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqez786h4LdjjwHpHclXoLDCc3eqp
C4xVTqmz3CnFlu1ptag/K/XRKGt4hIzkCEF7p30ECWbF1A/b4YFAFYQv1PuG/feD
Niyve36t5t7SooT0ZIE6GCOag5qy2HiXr8+IYuWJ0sdmglWuCxGesldoxGFa19n6
w/BllLENKho1Ifd7TKtlxWbhzoKDOPHoSX8V+wEBiM8wtKFTaMmsTwm37PmCcX56
3xegJM8QhMIerAbB9jpv1fsfXye9dBZ6z/DO/sT6bSQ5MWE5M5LAZCiLm0+MPVKv
fRna0spGpgod1M61R8Rc47S2SJkb0rPYZ9tgsM3xg3h9V+GAixlVtkBiqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVJOy8UMP50A6MbU5ilT16ydW8LMB8GA1UdIwQY
MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et
ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2
LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0hFtwWq
aRBPyOV9cg5Xg1WGMOTHYHIH71+pNTz0sMHfm0qzme1mXvE52Px6lxrSw+cCE75w
+joF5PhQihiyteAMWLSxw15HYYkIXi59pwquIID6F0Ptmh9EEl3dsEEAtvDIlmte
apMwnRXAnieN4gblY2wDuQRdoN901yaCdZBh1jHf4PpifcAxAMpbF6vZj6G3p+Rc
XKTs6tZak/2GoM86UZXN7fkU9BVuTZ1gOZjhnnse+vGadf7wNsCu4aiUvnr6geCn
A1nUekZhOR7d7HioLfKCn7UiwzRK73IwRYlOx7VMWoeef6lmDaCUYmlJ229Ntf7Q
sdwEUAlUfyLrpg==
-----END CERTIFICATE-----
Generated at Thu May 8 06:28:17 2025 by rpki-client