Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier: gqcmPJyQewS6ByuSYgTD8bzekSvu6TzB4iSRiiUu9Yo=
Subject key identifier: 56:40:94:00:FE:AD:EB:6F:F7:C8:87:71:78:61:11:1E:7F:B5:AD:53
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 0196C4271F561DFD585C60207BB2D2B49437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number: 1336
Signing time: Mon 12 May 2025 11:00:20 +0000
Manifest this update: Mon 12 May 2025 11:00:20 +0000
Manifest next update: Tue 13 May 2025 11:00:20 +0000
Files and hashes: 1: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: MOxNi5hTrzBLt9hFRsK5K8QnwCz2KU9XV1cpMYpgUng=)
2: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (hash: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=)
3: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (hash: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=)
4: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (hash: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=)
5: z4qyX-331qkRpNendrVE2vuUwMg.roa (hash: 1tgnSBh6zavqUvITN/dHmAA7avLexZgbuVDSxY+JNpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:1f:56:1d:fd:58:5c:60:20:7b:b2:d2:b4:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: May 12 11:00:20 2025 GMT
Not After : May 13 11:00:20 2025 GMT
Subject: CN=56409400feadeb6ff7c887717861111e7fb5ad53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:26:2c:18:f0:af:f0:1a:42:e2:c0:86:ba:
0a:90:83:f4:ce:40:38:5b:87:d2:ce:6c:02:cf:15:
73:6f:53:01:ba:1d:3b:25:19:6f:b9:3e:6b:79:6a:
f9:9b:43:5e:76:c0:3d:a7:28:75:54:db:75:d3:76:
4b:6b:83:e4:b5:2d:c3:2c:16:48:bf:c8:6f:44:43:
f6:86:e2:94:fc:57:0f:44:35:a4:e2:b4:d9:c8:cd:
eb:1e:72:21:f9:22:13:07:9d:4d:a2:05:53:80:09:
f7:78:7d:79:84:fa:f6:aa:b7:b8:8e:b9:42:0d:04:
65:13:da:4f:89:fa:62:34:d1:7e:e8:7e:26:e4:4f:
26:90:2b:f8:ae:f6:f0:a8:65:bf:e2:80:19:3a:83:
c3:18:45:58:43:f4:bd:7c:74:1a:64:35:aa:e1:27:
11:a7:fe:48:8a:fa:f0:2b:c8:05:37:c2:e4:92:63:
f7:7a:5b:cf:ff:e9:63:08:ce:fc:1e:f4:98:60:d8:
28:9d:24:a1:6c:5d:54:ef:aa:19:de:c5:b7:01:e5:
b0:4a:5c:08:8c:97:2a:2c:f5:7b:da:39:bd:78:6d:
01:d4:6c:bc:6e:11:d2:d0:d2:47:70:3f:2f:3b:f8:
b3:2a:03:28:5c:d9:0d:ce:a5:a5:9c:5f:54:d0:37:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:40:94:00:FE:AD:EB:6F:F7:C8:87:71:78:61:11:1E:7F:B5:AD:53
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cc:88:cf:b6:34:1c:a1:41:41:8f:df:78:8b:c5:cf:82:dd:
2b:75:17:dd:bb:ae:0b:b8:38:b0:b1:79:e9:a4:96:6f:dc:8c:
a6:89:da:49:46:77:b4:00:44:d6:e0:2d:69:fc:4f:fe:88:7a:
21:ff:cd:c2:f2:e2:d8:69:8d:d4:7b:bb:04:41:5c:5f:bd:df:
15:71:b9:97:9a:5b:68:f5:c6:32:ab:c0:7a:0c:59:c5:62:bc:
0d:fd:16:92:2d:e8:ea:90:10:69:83:7b:81:0b:3a:ae:e4:24:
3c:16:7e:05:e5:93:42:7a:c2:c0:13:c6:0f:98:0a:ee:19:00:
10:d0:97:46:60:11:c7:e1:7a:78:1e:83:8d:56:b2:cc:a1:f1:
85:4e:d9:20:8b:c9:19:ca:27:d7:e3:a4:b6:fa:02:19:cb:0a:
23:48:ce:38:07:f9:62:14:05:58:c2:4b:4f:9c:dc:d3:90:f9:
86:b1:1b:42:9b:fe:d3:94:de:25:7c:1b:94:8a:e8:57:37:d5:
55:a5:9a:de:29:98:e4:8b:70:8e:45:b1:fe:9f:2c:f4:81:9f:
51:4b:56:12:7a:16:05:41:1f:f0:4f:23:af:42:ac:66:b2:c9:
e0:c9:2e:01:2a:91:7c:56:7a:e1:e5:07:cf:24:cf:1c:05:21:
62:9b:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:25:39 2025 by rpki-client