Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: cnNERGCbru9GRvfxDxwQRnHFc34k6dig1vDk+ZhafNU=
Subject key identifier: 9E:19:DC:0B:AC:F6:11:DD:70:28:56:BA:E8:8F:C2:D2:28:44:B1:20
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 0196A0BFC8F9CF1C41D6AEA4C5993F553F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 1372
Signing time: Mon 05 May 2025 14:00:45 +0000
Manifest this update: Mon 05 May 2025 14:00:45 +0000
Manifest next update: Tue 06 May 2025 14:00:45 +0000
Files and hashes: 1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=)
2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: XBsXKYo3y5v0kwMiFFcGijHWf5JwhfhqpoVsat9ByTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:c8:f9:cf:1c:41:d6:ae:a4:c5:99:3f:55:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: May 5 14:00:45 2025 GMT
Not After : May 6 14:00:45 2025 GMT
Subject: CN=9e19dc0bacf611dd702856bae88fc2d22844b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:8c:b4:23:b9:59:01:a7:32:31:f0:08:70:
9e:ec:2a:4f:88:29:52:ee:c3:e5:17:15:ef:d0:9c:
d7:0d:8d:8f:d9:1b:6b:19:28:d9:cb:f9:ec:08:17:
78:80:7a:c8:00:39:be:35:fd:43:76:90:bb:f6:7d:
58:25:e8:76:02:fd:6e:93:aa:c4:a4:ed:f0:30:45:
44:4b:10:a3:81:04:98:40:74:12:81:dc:cc:89:ce:
3b:63:23:80:e0:56:76:95:6a:28:f9:98:f2:0e:b6:
2b:90:24:6a:9b:a9:43:48:be:05:21:cd:f4:af:b3:
86:46:8a:b7:1d:36:bd:b7:27:9a:7f:56:45:cf:23:
13:ae:28:c3:1b:31:d4:28:27:51:60:31:b2:d2:01:
cc:3a:f2:7e:22:c5:e5:24:d7:e5:99:4d:96:ae:02:
94:73:84:d4:59:7f:43:1c:23:18:a2:5a:e3:56:a2:
16:f1:1c:69:81:94:5b:7b:62:1b:29:e8:31:dc:dc:
9a:2a:f8:89:d8:f8:60:82:3a:f6:f4:da:ca:2f:95:
ea:5b:ea:ce:0b:61:3a:a6:3f:65:86:9d:09:62:b9:
44:8b:39:d1:4a:1e:6e:bf:cc:a0:dd:be:b8:35:1c:
29:09:70:f4:79:25:c2:99:69:74:29:d6:52:74:ca:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:19:DC:0B:AC:F6:11:DD:70:28:56:BA:E8:8F:C2:D2:28:44:B1:20
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:57:43:c0:f6:1b:fa:a9:1d:07:82:b4:36:07:bf:8e:0b:
f0:11:e7:94:6c:be:3c:47:fc:98:78:6d:5d:56:e9:fb:b3:42:
55:8c:39:3f:d4:1f:a7:2d:24:f7:43:41:77:a8:bc:8b:4e:25:
e9:fe:50:03:b3:b2:89:d1:23:b9:78:53:39:df:74:e5:ba:36:
8d:af:25:ea:ab:21:52:a9:d3:4b:1b:16:08:74:aa:f7:29:12:
f1:70:3e:c5:74:f6:a6:3d:92:17:b0:c7:3d:56:86:7a:24:16:
cc:60:8e:78:77:07:d7:b1:82:3e:b6:73:3c:f6:a4:2a:b1:8a:
92:db:e5:82:c4:77:8f:64:35:a6:15:99:50:0b:e5:68:87:43:
19:15:dc:0b:0b:8d:08:61:3d:b1:b0:b6:5e:30:a2:08:78:b2:
d2:c2:83:0e:fc:64:3e:f6:66:ec:8d:b5:5a:17:87:c9:0a:d3:
36:bb:61:d9:ea:5d:61:99:96:b2:48:9d:06:9b:72:67:af:4f:
69:f6:ec:61:9b:14:25:76:50:20:16:2e:e5:64:a5:25:4d:21:
ea:dd:83:2a:52:8c:e5:c1:20:46:ff:0c:5d:34:eb:18:75:07:
3e:28:b4:49:26:ff:e3:d1:ed:d5:c0:1a:49:41:b8:72:b4:79:
54:d7:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:02:17 2025 by rpki-client