Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
File: SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft (raw, json)
Hash identifier: iCSm++asXp5zMzZdGVPNImweJNLaRFGGTYNm2owJirs=
Subject key identifier: B3:08:C9:88:93:89:8D:ED:D6:F0:F1:AD:48:7C:82:BB:22:7F:70:AB
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Certificate issuer: /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial: 0196A98C114575A1424CA264B4C6D2EF06CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
Manifest number: 146B
Signing time: Wed 07 May 2025 07:00:51 +0000
Manifest this update: Wed 07 May 2025 07:00:51 +0000
Manifest next update: Thu 08 May 2025 07:00:51 +0000
Files and hashes: 1: 5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa (hash: 4s92BezBLCr6XDiFpPfCSDr/ke7pRUF4VnT2G98F0hQ=)
2: SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl (hash: sVCndNDMxlsIhiIKON9YX47WZbTT3zb8eNQJ+u5bbRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:11:45:75:a1:42:4c:a2:64:b4:c6:d2:ef:06:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Validity
Not Before: May 7 07:00:51 2025 GMT
Not After : May 8 07:00:51 2025 GMT
Subject: CN=b308c98893898dedd6f0f1ad487c82bb227f70ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:aa:b2:8e:b5:3b:20:01:fe:26:17:ec:2f:
11:ca:ee:d5:b1:0a:07:80:0c:14:ee:60:08:cc:75:
0e:1d:64:51:56:58:0a:c4:d9:04:36:ee:a4:b0:27:
97:4e:3d:03:cb:e7:b8:33:ad:fd:61:44:c5:1a:9d:
1b:d5:cb:ee:e9:51:dd:45:86:58:0b:7c:b1:f3:f9:
1e:4a:c1:67:ad:5b:86:f1:a3:2e:cf:ca:bd:fd:48:
1e:08:43:8b:05:48:cd:8b:24:e3:e0:03:55:f9:7e:
06:a7:51:04:9b:95:64:df:a6:62:71:55:24:a0:65:
d5:01:9b:97:ae:a1:a2:b8:1f:7f:07:c0:2b:85:1a:
ac:e7:48:9e:55:fb:19:49:1e:c1:8a:76:07:0f:04:
0b:c9:0c:7e:b3:71:c6:8f:47:1b:1f:04:32:f5:d2:
ce:6b:bd:d0:8d:45:cc:5c:46:83:0a:e2:2e:1b:f2:
e5:fe:a1:ac:50:09:1f:88:24:19:88:61:ca:26:64:
f7:e6:ef:63:71:c8:37:2c:6f:ca:0e:a1:c4:e8:01:
09:e8:7d:f9:8e:69:80:7a:08:f2:2f:bc:bd:1d:79:
30:9b:c2:5b:6e:d4:6e:75:26:37:03:a3:d4:ed:cc:
cc:80:28:0d:0c:26:3c:6f:ff:b6:18:e8:74:f5:1c:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:08:C9:88:93:89:8D:ED:D6:F0:F1:AD:48:7C:82:BB:22:7F:70:AB
X509v3 Authority Key Identifier:
keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:c7:3a:9e:35:ce:eb:e4:e8:a6:b0:8b:a2:b3:ed:c4:87:
ba:61:83:0f:28:b0:91:e1:e9:26:51:85:a5:12:7e:18:31:c0:
79:17:66:79:df:93:f0:4a:de:36:33:1d:3e:99:12:b2:f2:b6:
a3:63:60:1f:78:63:79:b1:b0:16:4f:54:e7:28:ac:58:24:76:
66:aa:0f:df:4c:90:ac:36:23:24:c2:4b:4e:bc:99:27:06:4b:
63:55:34:5b:e0:2e:a3:2e:26:2a:a6:7b:1a:a9:2e:a6:54:82:
6e:fe:9e:f2:29:d7:22:fd:54:13:04:4b:0a:81:c9:9a:95:f4:
6c:11:d0:57:e1:3c:bd:6b:cc:9f:6a:f8:01:45:51:28:99:d5:
7d:54:6b:f3:ed:ed:a6:ee:4a:ab:dc:88:6b:79:9f:96:0d:cd:
29:71:e0:41:e7:fa:5e:3f:fa:68:8a:68:d1:a2:df:4e:d9:99:
50:ba:4b:76:f2:74:c0:91:52:16:ca:28:2f:d6:82:1a:37:51:
02:04:03:07:b9:e7:e7:de:ca:da:3d:60:6b:e8:db:28:de:ec:
86:b7:07:ac:35:54:df:0a:c0:71:36:56:dd:a1:a8:ed:fc:6c:
1b:4f:ee:85:ca:43:63:5a:98:ea:50:b7:55:bc:93:b8:3f:ac:
28:2c:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:45:13 2025 by rpki-client