Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: 1DVvhEroq5Oa9tBtOvAb+jRaZBv0F32qJ570dz9vo3I=
Subject key identifier: A5:47:1F:56:B8:D1:37:47:84:32:F2:09:62:56:1E:50:8C:AE:44:A9
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 0196C3B9A2B589B832E995177BB41714980A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 01F0
Signing time: Mon 12 May 2025 09:00:44 +0000
Manifest this update: Mon 12 May 2025 09:00:44 +0000
Manifest next update: Tue 13 May 2025 09:00:44 +0000
Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: GSiFlDLv9qnM40zBwIa2j/QgWINlHdnllHpG0ZINMFs=)
3: qU7NS3z4dR2Yct7lYNkAomkkhy4.roa (hash: A8aF09Arb1zd931tk4sAEkJct2PD6hOi6RvyzXv8HWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:a2:b5:89:b8:32:e9:95:17:7b:b4:17:14:98:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: May 12 09:00:44 2025 GMT
Not After : May 13 09:00:44 2025 GMT
Subject: CN=a5471f56b8d137478432f20962561e508cae44a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:90:8d:9e:2c:44:eb:0a:33:d1:c3:a5:b5:
b9:82:c2:78:8f:28:24:ce:57:80:6d:99:ad:51:f3:
c4:ff:dc:a5:e2:d5:de:8e:f7:09:fa:09:f2:9e:c5:
25:d9:46:42:2c:9c:2c:a2:91:3d:a0:66:c4:e4:8e:
b2:47:a5:2a:ad:77:d8:67:ae:e0:2a:e0:9c:53:b9:
4b:00:ae:6f:45:c1:0d:4c:98:7f:64:78:20:21:d9:
b0:82:8e:f8:28:31:9e:00:0d:88:0c:2c:98:9e:1e:
7f:54:3d:e4:96:6b:10:39:f0:44:d3:8d:36:ba:d8:
4a:1e:d4:88:17:1b:e2:b0:4e:39:c3:69:bb:7f:df:
c0:84:33:45:dd:de:5a:84:de:d4:f4:f9:38:b8:5f:
e8:1c:68:64:00:be:2d:b7:b4:c1:31:13:90:d5:b8:
26:1b:c4:2d:60:52:0b:e2:a6:b1:80:b6:01:75:a3:
3f:6a:81:19:9c:42:0c:63:10:27:8c:a5:b3:c0:43:
29:d2:2f:9b:19:82:53:43:41:76:4b:9b:af:4a:13:
7b:7c:a8:9c:bd:a8:20:02:10:9a:41:eb:88:f3:57:
9f:b3:d0:8b:7c:47:5f:81:07:00:54:0e:f5:ee:1c:
42:b1:6a:56:3b:3e:78:0f:60:51:0e:f8:65:9e:da:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:1F:56:B8:D1:37:47:84:32:F2:09:62:56:1E:50:8C:AE:44:A9
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:41:a6:48:7b:f2:5f:38:e6:69:92:65:e1:45:6d:c0:77:18:
96:93:49:b7:0f:f4:de:4b:8c:7f:d1:9d:65:53:fe:af:8c:37:
aa:5c:62:53:85:48:22:47:78:a9:04:9c:f6:41:a8:dd:26:e4:
ef:aa:4c:78:8e:e9:b1:25:08:2c:90:a2:b0:80:77:77:31:52:
b1:63:1d:23:3b:82:33:6e:31:3d:5d:2b:22:24:27:ca:49:47:
5f:31:9c:ce:9c:45:d2:96:5f:dd:9e:2b:db:8b:39:ed:7e:b8:
4c:46:c5:a5:dd:1d:a1:e2:94:33:6c:69:31:4e:36:87:2f:03:
1c:f1:43:0e:6e:06:cc:d4:69:18:5e:27:07:d5:b0:82:2a:36:
4c:57:76:84:be:9d:09:f7:fa:d7:83:4b:d8:bc:91:00:8e:63:
32:ea:d2:26:51:53:8e:f3:b3:f4:7d:d7:dd:3b:b5:da:98:07:
85:02:16:4e:2d:cf:f2:24:8d:91:2c:95:35:ee:10:b9:63:41:
79:9d:55:1b:3f:30:73:e4:08:d0:72:a0:12:c0:44:54:ca:c3:
10:47:7f:f9:08:13:ac:e2:ee:25:f4:79:ad:2c:b1:6f:bb:8d:
36:28:03:1d:9c:b6:b6:18:52:27:1d:9a:2f:eb:82:a1:37:91:
d3:eb:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:30:05 2025 by rpki-client