Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: aRT5PUmakAN+ctrWs/r/8mY6BLdebWf8Uhr9O4/yvGw=
Subject key identifier: 97:FE:1D:E2:5A:FB:FC:D8:A9:FC:BD:79:F3:B4:F8:19:20:8C:25:50
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 0196A5E6172EDB0A5ED6D29C8103F1D89F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 14:00:41 +0000
Manifest this update: Tue 06 May 2025 14:00:41 +0000
Manifest next update: Wed 07 May 2025 14:00:41 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: fneFqjvJ5bR7x/ZUcAvQLSdGR4Esiv3xDPAahbYaJgA=)
2: TLZicJ-oF3y9XbymZF6MTAhyYvk.roa (hash: 4HeSyTBfKiFSQT/0BeZ4MVQL/epSIUIfB43B7ezWkA0=)
3: kB2vNLIHiz3zrtVPA7_yVuKTR5I.roa (hash: 9AzHx/X53rT3duIhqykEiCb52nN9gduGX1KbZI/pxcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e6:17:2e:db:0a:5e:d6:d2:9c:81:03:f1:d8:9f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: May 6 14:00:41 2025 GMT
Not After : May 7 14:00:41 2025 GMT
Subject: CN=97fe1de25afbfcd8a9fcbd79f3b4f819208c2550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:a0:bd:48:97:67:c7:23:b6:00:14:c5:76:
89:b3:80:14:54:cc:73:72:41:37:61:a5:73:78:7f:
13:10:ec:46:4a:4c:d2:1a:8c:5c:ac:b0:d0:c5:09:
b7:b1:70:a1:a2:06:b4:e5:eb:f6:22:ab:95:4a:f7:
a6:b4:b9:23:e7:28:e8:a7:20:82:ea:ed:0c:2d:b4:
2b:f9:32:84:0e:9c:ab:36:15:ff:6a:6c:34:be:75:
ac:2f:6b:31:b8:56:97:43:69:f5:db:58:55:27:ab:
8e:17:12:26:21:7f:4a:10:e6:50:6f:f3:8d:fd:a1:
2f:44:d8:8a:ac:d4:19:81:f6:96:a7:b2:5b:13:94:
24:d6:3c:a8:fe:b6:a0:3f:38:3b:0a:17:de:06:b6:
9d:10:d0:c4:97:e8:3f:15:b6:96:0b:89:aa:eb:fc:
e8:1a:a1:78:2a:3a:d8:33:7a:95:4d:71:d1:c7:5b:
1e:4d:9e:42:be:63:cc:bc:e2:6a:b6:71:93:cf:02:
1c:c5:ad:81:11:1b:9b:69:a4:5d:8a:41:1a:74:54:
ee:83:6e:76:92:63:3b:11:d4:26:c1:44:98:a8:72:
0a:01:75:4f:03:c7:27:7d:29:06:ea:18:77:02:a8:
e6:9c:4f:2e:c9:63:a0:0d:57:b7:48:84:d5:97:b0:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:1D:E2:5A:FB:FC:D8:A9:FC:BD:79:F3:B4:F8:19:20:8C:25:50
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3c:18:97:33:1c:a7:9f:54:ed:26:21:8f:be:46:e7:6b:3e:
49:ee:fb:df:c1:a3:7b:1c:5e:d6:ae:6c:81:6e:20:15:9d:d9:
96:26:20:fc:f5:7e:c8:98:6e:bd:e9:50:31:e8:5e:69:68:f7:
24:a1:50:68:cc:e7:a4:6d:ff:80:99:8a:66:64:c6:52:1a:f4:
e5:f6:b4:18:65:2e:c5:25:c9:97:1f:30:6a:15:80:ef:ea:e6:
80:75:e5:22:77:33:be:6f:b4:21:ed:62:47:d0:0c:f6:a8:18:
8d:2d:71:8d:7b:8f:ab:b3:a1:1d:f3:b7:5a:0f:8a:ab:88:77:
00:aa:81:cc:f7:b9:c6:91:23:3b:51:89:e1:4a:5d:51:b2:a4:
4e:b9:2c:3c:71:b8:8f:fe:a7:8f:d2:96:99:60:8a:e1:7b:a6:
25:6f:b4:e8:0a:ef:6e:c5:75:df:25:02:85:58:f8:47:8a:7c:
c0:19:40:81:2f:de:8c:32:02:35:03:95:0f:58:9e:11:87:d1:
d0:35:b7:6a:25:88:71:67:a7:81:87:33:fc:1e:ff:fe:9f:d5:
83:3e:27:cc:5f:e2:10:a8:9b:81:e5:61:8f:2a:b7:75:7b:6e:
27:5e:49:fc:81:9e:77:46:a3:46:b6:30:b7:8b:e2:7d:79:ef:
55:3a:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:13:48 2025 by rpki-client