Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: 53OdkltmmExKff8wvZwcXTj0fOs7JYBXgpjEAI3wdCk=
Subject key identifier: D9:69:27:7F:8E:F3:5F:1B:CF:A5:BB:A1:E6:FA:13:C3:8D:80:8F:7A
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 0196B3D8652375E47E4B7078533CAEB631BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 11EA
Signing time: Fri 09 May 2025 07:00:25 +0000
Manifest this update: Fri 09 May 2025 07:00:25 +0000
Manifest next update: Sat 10 May 2025 07:00:25 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: fTKKrmLdcSx+4s6WDo5GNztlo9NG+aOEKfpWPWwp6o0=)
2: Xe1gxuRIIOL95lwNFDlJJ4LeD98.roa (hash: E3ThdKoNF/zSVQO/0Rh8O4e1tJqwTsPdKIVV0WmD0l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:65:23:75:e4:7e:4b:70:78:53:3c:ae:b6:31:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: May 9 07:00:25 2025 GMT
Not After : May 10 07:00:25 2025 GMT
Subject: CN=d969277f8ef35f1bcfa5bba1e6fa13c38d808f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:ee:b4:88:29:60:87:f5:04:6d:70:70:50:
89:ca:96:31:ba:9f:6d:2c:b6:63:e7:27:85:5d:e7:
29:1f:c0:f1:84:23:71:65:31:f7:2b:05:a1:50:91:
07:59:86:aa:02:01:fd:60:4e:e8:6d:93:fe:c9:64:
98:2e:e9:8a:31:db:2c:17:82:5c:29:8a:26:ac:ba:
1d:51:44:ca:fd:c0:cb:1a:d1:a2:e4:ae:36:75:a7:
cd:34:6f:79:08:e1:51:a3:48:ef:e1:6b:6e:9e:20:
3f:b5:32:cf:2c:06:2d:81:e7:d7:1c:74:0e:f0:5e:
0d:ca:46:32:ae:4c:af:61:2e:90:73:28:56:14:5a:
08:2b:5f:a1:43:db:32:71:17:d0:43:6c:d9:3c:39:
59:55:d6:3d:eb:f6:f3:26:d0:08:7b:6e:a6:2e:aa:
7e:cf:fd:c4:00:e5:85:36:54:7e:1a:6c:92:a0:a6:
53:30:e0:14:92:41:87:83:fd:5a:17:1a:84:10:d5:
d8:9b:04:99:ec:30:ed:e8:48:23:06:05:53:19:bf:
ee:82:58:4c:01:6c:cc:38:ad:cf:72:1e:e8:9e:09:
49:1d:38:46:5d:d5:54:87:18:5e:8e:fb:af:36:af:
c9:18:ee:cb:1d:07:aa:1a:9b:8f:6c:d2:6e:aa:93:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:27:7F:8E:F3:5F:1B:CF:A5:BB:A1:E6:FA:13:C3:8D:80:8F:7A
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5c:05:a5:eb:58:6c:3f:18:e0:22:7a:e7:c2:7b:ec:4a:94:
bc:f7:ee:c7:1a:38:0e:00:63:06:e6:ff:7c:e1:4f:39:2b:5d:
e3:7c:4b:4e:c6:dc:14:52:39:af:a4:2b:be:fa:6d:d6:0f:e2:
ec:30:6c:f3:19:27:36:c2:e0:fc:e6:af:c2:fe:42:cd:50:9f:
91:ce:b0:d3:68:66:12:9d:2f:2d:c0:26:0f:1b:82:91:50:23:
c7:f8:78:4a:32:31:e7:59:be:ba:0b:fe:2f:33:74:75:aa:48:
d8:a4:f5:94:71:ac:f3:0e:5e:51:d7:d4:8d:21:22:cf:e0:85:
ef:f4:0c:c2:8f:c8:85:28:83:a4:1b:ac:f4:dc:e3:1f:fe:ee:
23:46:9e:c1:3a:07:8a:4a:29:96:d9:43:4f:7a:91:1c:2f:69:
d2:50:49:7d:55:14:d8:9e:3e:fa:81:d5:06:2f:af:30:b5:61:
76:68:f6:41:ca:0b:e8:05:49:4d:2d:ed:6c:d5:22:69:7e:52:
d3:04:bb:04:e4:d1:f4:f3:17:d6:97:0b:4b:11:93:d0:e1:b3:
66:8e:0f:38:36:b3:fb:0e:6a:a2:77:38:cf:d3:54:ab:b2:3c:
ff:82:7b:9e:2f:51:62:05:9a:cb:c8:e2:7c:47:ac:6e:2c:9c:
2e:29:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:18:02 2025 by rpki-client