Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: aURRPZVbE4849gDI9zv8XqHCyRysSsXkvL9ERabTaz8=
Subject key identifier: 41:98:72:66:11:A5:5F:48:A1:BD:97:B6:6C:70:1B:FB:13:F5:16:E6
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 0196AEB23F094A69149AF8055BDB929CE793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 0FEF
Signing time: Thu 08 May 2025 07:00:39 +0000
Manifest this update: Thu 08 May 2025 07:00:39 +0000
Manifest next update: Fri 09 May 2025 07:00:39 +0000
Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: f94mlclcLvVnnKaDi8y5JtFBRgt7UksGW6GgJj1hqcs=)
3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:3f:09:4a:69:14:9a:f8:05:5b:db:92:9c:e7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: May 8 07:00:39 2025 GMT
Not After : May 9 07:00:39 2025 GMT
Subject: CN=4198726611a55f48a1bd97b66c701bfb13f516e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:4a:97:1c:dc:ca:1e:7e:0c:7e:4b:f3:38:
15:1a:57:3a:f8:4e:ca:57:6d:d8:9d:9c:ea:64:53:
78:81:11:a7:af:e5:7d:48:5c:a9:6a:55:5f:09:8c:
e3:df:3f:4a:e1:e5:90:c2:65:5f:fb:ec:48:d2:cf:
ca:32:26:61:04:4a:41:6e:de:de:0a:d4:15:e7:ad:
cb:b1:70:67:b1:9f:f3:47:a7:93:b2:a6:2b:08:23:
1b:74:13:a6:07:54:2d:3c:dd:34:c4:b4:97:09:fc:
31:fc:0b:f8:d7:63:6e:6a:2c:96:de:f0:c8:5e:d2:
95:34:f6:d4:67:e0:93:52:22:ca:4b:3d:61:18:9a:
93:97:08:7c:16:4e:98:e1:7e:6e:89:c6:dc:9d:2e:
a3:36:c1:92:fc:f8:2e:15:97:38:a1:df:af:28:a5:
b6:96:4c:c8:7c:0a:41:a3:8c:09:ba:57:33:9d:36:
ea:4f:36:19:1b:73:22:d4:63:58:fd:99:cf:42:ea:
90:e5:e9:2c:46:31:62:74:f2:09:05:99:68:89:1c:
bb:ec:99:8a:c3:8b:28:75:e7:a8:b7:d4:2c:93:bd:
74:8f:68:30:18:34:0f:9e:28:fb:f0:d5:9d:eb:ea:
54:43:b6:ac:89:be:7f:6d:7f:24:1e:34:39:66:e3:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:72:66:11:A5:5F:48:A1:BD:97:B6:6C:70:1B:FB:13:F5:16:E6
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d3:87:35:aa:af:15:72:03:6f:65:5c:30:5c:19:5d:9d:6a:
85:a7:5f:66:65:5b:da:da:ae:79:de:d0:33:1e:70:54:d3:de:
1e:9d:86:f3:72:82:7b:0a:75:a6:75:24:c4:1c:5a:06:64:72:
b2:88:73:be:2d:2d:88:a3:f8:20:ff:3f:d9:80:5d:d1:55:97:
3c:d7:59:8a:74:d8:bf:6f:0f:cf:6a:09:40:41:9b:3d:36:f8:
8f:6b:5a:4c:f8:08:da:a0:41:8d:9a:87:ae:82:eb:64:78:2b:
97:e1:48:f9:d1:9d:ee:4e:af:41:b9:29:47:85:67:a3:66:a3:
f4:3b:0e:63:82:26:02:60:a8:be:4b:a2:ac:ac:cc:89:52:34:
01:2c:23:bd:2d:1d:5d:10:03:c9:9f:79:c0:cd:af:8e:97:bb:
9a:a2:3b:b7:19:7b:b1:c6:df:24:e0:d2:5f:6d:0c:71:c7:95:
88:5c:37:9b:28:77:81:2d:b5:a9:af:34:e2:7a:4b:a8:d3:ed:
11:03:9a:91:e0:e7:1a:b3:35:05:ab:b8:b5:82:8e:26:1d:c8:
4d:d5:6b:b1:5a:62:32:e3:d9:6d:8a:e9:00:ed:ff:7f:a4:bb:
2c:3c:20:29:93:13:04:52:aa:ec:bc:69:f9:b4:c8:6c:22:63:
94:13:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:03:38 2025 by rpki-client