Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: votwkwlDZC/AQosHlLURWoeg7WZ/GoGDaP2nNHkOCds=
Subject key identifier: 89:FD:16:61:61:8A:F0:A6:85:FA:CF:60:86:6A:DB:FC:D6:4D:B2:BB
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 0196A9F96A0B2A564A60C62DE9AB17552A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 152E
Signing time: Wed 07 May 2025 09:00:16 +0000
Manifest this update: Wed 07 May 2025 09:00:16 +0000
Manifest next update: Thu 08 May 2025 09:00:16 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: o87A7LHJmzJ8qg+aUQi4C39JYKxaz8BGVd/nF2FafBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:6a:0b:2a:56:4a:60:c6:2d:e9:ab:17:55:2a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: May 7 09:00:16 2025 GMT
Not After : May 8 09:00:16 2025 GMT
Subject: CN=89fd1661618af0a685facf60866adbfcd64db2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:84:03:7b:0f:ac:86:97:1d:bb:c1:f3:67:
66:a7:0c:ec:c9:ec:39:c5:89:29:94:f1:b2:7c:27:
e3:1b:b2:fa:ec:59:79:43:f9:4b:4a:26:ba:c7:d2:
ad:e4:bc:aa:20:16:89:7a:83:ff:cb:0d:11:4e:b9:
7a:a9:86:e5:c3:71:d3:7c:66:b4:0b:48:4c:c3:cd:
8e:55:70:f2:2c:42:ac:5b:dc:00:74:0d:30:cf:20:
23:02:b9:23:36:bd:81:44:85:81:ef:e5:d2:4d:60:
55:41:7e:2e:dc:6c:ca:7a:04:8f:e4:d0:2a:65:81:
ad:60:e8:29:00:56:58:64:de:31:ce:6f:01:27:a2:
d1:89:cc:10:cf:1b:97:1e:32:b7:75:07:e0:ce:9e:
ca:74:ad:87:65:c5:57:1c:05:19:df:d7:f9:21:8e:
45:6d:c0:61:d4:8d:a2:25:68:5a:78:40:1b:d0:7d:
86:76:c4:e2:2d:f1:a7:ba:09:8f:6b:c8:66:2b:27:
98:b3:4f:4f:4e:3a:86:23:4e:c8:cb:d5:ea:00:f9:
4b:81:dd:f3:53:7f:b8:7c:4e:87:fc:5f:1a:27:74:
d9:ba:5f:f7:a8:3b:ea:aa:fa:fb:10:67:b6:4c:95:
d6:b4:a1:0c:5e:37:1e:91:e1:60:e9:5f:aa:d2:d8:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:16:61:61:8A:F0:A6:85:FA:CF:60:86:6A:DB:FC:D6:4D:B2:BB
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:f7:25:76:d1:3e:22:ab:86:02:38:90:50:85:37:62:12:
3e:f0:c7:48:3e:80:71:7e:fa:f1:7f:98:6a:0c:85:5b:b6:6f:
4d:56:d6:a4:77:2b:a6:3a:b9:20:01:13:9e:86:b2:0b:98:40:
a7:22:ab:19:62:7a:52:6a:82:a0:a0:42:5c:bd:93:46:3d:7c:
7a:12:67:81:90:6a:86:06:5d:9d:91:0c:6c:cc:80:b0:60:42:
33:65:74:91:dc:6a:07:7d:a1:58:93:83:50:db:2e:0d:6e:2c:
6b:44:f8:0b:18:91:0f:28:53:a7:cb:39:d2:68:3a:b2:5f:29:
be:20:bf:86:3f:97:c0:e1:68:51:81:f6:e7:b0:a7:dc:09:86:
93:c9:e4:2b:c5:dc:17:3a:a9:ca:8e:f9:b9:0d:22:47:d3:17:
e0:3e:4e:63:b1:83:46:33:67:0b:2a:ef:f3:70:c6:5a:2c:0e:
0a:1a:16:8e:16:1d:4c:ec:6a:11:7d:b5:d7:90:69:d6:c3:49:
82:a8:9e:a8:eb:3a:39:c0:4d:d4:48:20:04:2a:27:fb:16:f2:
9f:91:f1:76:24:df:56:11:37:b1:78:89:41:d1:92:eb:b9:c3:
1d:ca:6f:a7:ab:0c:a1:aa:b9:69:5f:4e:78:62:4a:6d:4e:10:
1a:b2:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:55:16 2025 by rpki-client