Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: 47v2HZgU8gITeTW4kD1cpZVPpIS48RdO/KFXPa71Zyg=
Subject key identifier: C3:AA:A4:96:3E:19:D3:45:7F:F8:A5:70:56:FE:E2:25:C8:1F:6B:EE
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 0196C8720BB5A7AFA3A6C0BA4BCE2AC4AA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 015C
Signing time: Tue 13 May 2025 07:00:39 +0000
Manifest this update: Tue 13 May 2025 07:00:39 +0000
Manifest next update: Wed 14 May 2025 07:00:39 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: W66ieFXayrNugSyy7E2DguEvsNrTiDze8FkemTEzMYk=)
2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:0b:b5:a7:af:a3:a6:c0:ba:4b:ce:2a:c4:aa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: May 13 07:00:39 2025 GMT
Not After : May 14 07:00:39 2025 GMT
Subject: CN=c3aaa4963e19d3457ff8a57056fee225c81f6bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:d8:ce:29:68:52:d8:8d:59:e8:0c:9e:49:
5f:92:0f:6a:06:68:d2:df:83:39:7d:bd:fd:de:5d:
d3:64:31:d0:42:66:8e:a7:5b:b9:60:4a:fb:61:48:
14:4d:8f:8b:5a:49:76:32:dd:7a:f7:b9:b7:f9:8f:
3a:cf:72:8d:b2:39:bf:0d:a5:1b:68:86:e5:0f:e5:
37:76:fe:55:b8:68:44:f9:65:5f:ab:28:10:dd:62:
62:5b:ce:2a:9d:a7:19:42:9d:f1:eb:90:1b:3c:05:
a7:e9:23:12:f6:03:d0:83:18:4e:fe:8a:fe:57:7d:
50:4c:0f:de:e2:4d:f5:6d:50:f8:73:98:3d:7a:b7:
0e:ba:f4:69:d9:58:db:00:00:5d:6b:c2:e6:5b:fd:
92:5b:fd:b5:66:6f:b9:fc:c5:ee:46:fe:b5:13:16:
32:d6:40:d8:f3:73:79:7b:88:3c:95:0c:30:0f:ac:
03:e8:27:bb:6f:9d:9f:ee:b7:8b:64:aa:e4:8a:1b:
8c:84:8c:f5:49:ba:2d:f7:b2:9a:c5:c0:d0:0a:c2:
37:51:a1:4f:fd:70:d4:a5:a0:2f:6a:2e:62:73:b1:
12:ad:17:84:b6:92:ae:39:9b:3c:4f:d5:a1:d2:70:
28:6d:00:d2:8f:85:e9:f1:5a:ba:dd:5c:a3:c9:ea:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:A4:96:3E:19:D3:45:7F:F8:A5:70:56:FE:E2:25:C8:1F:6B:EE
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c1:98:85:c8:e8:c9:82:14:f3:6d:2b:74:78:d1:7c:0f:31:
77:3d:a3:28:64:71:e4:e0:2d:97:ca:fa:fd:10:c4:87:4a:0a:
be:bb:22:54:80:e6:6b:88:b7:e3:4d:1e:fc:c3:aa:79:e9:5e:
a2:c4:50:f4:61:7e:ec:48:e9:4d:b6:a2:52:98:5f:fc:fd:c3:
55:4d:19:6f:10:82:47:6e:0f:28:f0:70:40:93:90:9e:4a:b2:
84:6b:ad:4b:74:e0:ac:05:c7:3e:09:74:d3:20:19:8a:bf:a9:
ec:20:16:a6:8f:2d:29:97:b1:0c:e0:a3:22:7d:0b:7b:9a:16:
4f:82:c1:3f:97:61:38:2f:68:fb:08:81:2a:ee:ac:f0:02:c3:
24:7e:ba:cd:aa:3a:bc:87:86:71:b5:66:c8:e0:6e:ca:17:0c:
3f:03:ce:a7:ba:2e:d4:b2:de:87:80:03:9d:29:2b:90:24:57:
f8:e9:85:23:86:ee:d9:09:3b:93:29:fe:94:ed:22:6c:59:76:
14:46:71:b3:42:b4:db:3e:96:7a:fc:94:ba:8c:f5:b5:4a:3d:
39:22:b7:2e:81:5f:f4:03:96:fe:34:04:f2:40:d0:52:43:a8:
25:ca:2a:5d:76:6b:11:82:45:4a:60:51:39:4b:cd:e8:59:c8:
d4:64:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:55:06 2025 by rpki-client