Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json)
Hash identifier: 4X3UqT+SqlKycDJhxZkmWoGgGdoEobfdagztQYqKERs=
Subject key identifier: A2:89:F7:B2:6C:ED:EE:1E:B1:45:D2:D2:0A:E1:74:9B:DB:3C:87:9C
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 0196BF6F59003FE5367B50F457BA6728644B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
Manifest number: 14C6
Signing time: Sun 11 May 2025 13:01:07 +0000
Manifest this update: Sun 11 May 2025 13:01:07 +0000
Manifest next update: Mon 12 May 2025 13:01:07 +0000
Files and hashes: 1: 8J4KQUM3SG2tOx7Qy412tzcCyVE.roa (hash: WDRfkd7NWCeGm5AnO0id+VmgIMVtNw9JsJNLGC4miyg=)
2: F3xqvw__Ry6FbR1QISJmpPzSw80.roa (hash: lZUN0lo02iToEWBcU9heTh5ikClvs/fsdLuL0ZtWzgs=)
3: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: MMQc22WXpaoFTaXE8/F7YZ1q99NybjrCir8SB30ESFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:59:00:3f:e5:36:7b:50:f4:57:ba:67:28:64:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: May 11 13:01:07 2025 GMT
Not After : May 12 13:01:07 2025 GMT
Subject: CN=a289f7b26cedee1eb145d2d20ae1749bdb3c879c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:68:31:0a:a8:81:5e:1c:a4:54:ea:85:2b:
e6:b5:d3:36:db:0d:1f:3e:69:1a:8c:fb:94:a7:f5:
de:79:00:48:df:3b:f1:26:c4:1c:ec:24:8f:b7:ad:
02:6b:71:bd:5f:23:97:57:f0:b2:d9:03:97:70:2c:
03:34:4b:1b:53:68:f2:31:52:04:b6:f5:f6:74:62:
7e:af:9e:07:e0:bf:5f:d4:bf:9d:03:fc:30:c7:de:
f7:71:db:4b:4c:6e:56:bd:b9:90:ed:a9:02:78:8e:
32:b7:4f:31:9a:51:6a:a3:1b:f2:06:1b:7e:82:ef:
36:b4:64:b5:f0:72:ea:79:fc:89:60:88:14:95:e2:
ac:fc:64:9d:87:63:c4:94:38:19:72:ab:db:ae:92:
1f:ed:31:5b:19:c4:e5:4e:6d:de:3d:4a:91:4a:09:
37:63:2f:ae:72:04:d3:d8:85:b1:d6:40:c9:3b:38:
b3:87:e5:5b:a2:c4:6a:c8:70:12:d3:9e:6d:8f:82:
fa:9b:d3:24:e1:7b:fb:9a:10:04:b7:41:9a:1b:91:
63:e4:39:f8:45:ba:9c:a2:fe:76:42:c6:b5:c3:11:
ec:37:15:ba:9d:d8:ff:86:72:26:65:a1:52:f9:ac:
62:04:41:3b:ea:2c:cd:99:c4:8f:e4:b0:2a:a5:0f:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:F7:B2:6C:ED:EE:1E:B1:45:D2:D2:0A:E1:74:9B:DB:3C:87:9C
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:64:c4:94:4a:29:e6:00:08:96:94:77:a4:c1:bb:53:f2:e6:
d8:de:00:c5:aa:df:33:d3:7a:77:59:88:6f:b4:53:d0:fe:74:
fa:17:32:e9:a9:83:32:5e:ff:2f:ce:fd:a6:b8:5b:be:06:e1:
9e:0d:dd:11:25:33:26:f2:6a:b5:5e:51:44:0d:da:1a:e4:fd:
62:e6:68:8b:2c:44:f1:39:84:67:82:df:b6:be:cf:79:6a:79:
18:bc:24:49:bf:a3:b3:57:21:ee:dc:1c:de:c8:1c:30:05:83:
4f:5a:c3:0b:a8:81:fb:1a:66:23:89:02:e5:70:b5:d6:3b:78:
f7:5b:17:1f:af:46:07:0c:42:4b:b7:d5:bf:c5:66:81:d0:cd:
44:4c:b2:b2:57:e0:fd:e2:48:b1:48:7e:c1:8a:b2:96:4a:fd:
98:82:ca:40:7e:42:00:9e:7a:20:bc:8d:19:7a:ef:bc:0a:04:
e0:74:4d:4d:cc:b3:f1:e3:c0:03:c6:b5:51:7c:d4:29:24:8a:
d6:c4:31:39:06:57:1b:52:15:0f:b0:4b:ef:c2:8a:59:91:df:
bb:4b:58:66:aa:ca:5a:37:58:1d:04:be:60:b8:ea:94:b6:1d:
e7:2f:f1:af:91:fc:1f:c6:3c:45:a1:3d:a9:4d:31:ba:aa:9c:
20:9b:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:08:25 2025 by rpki-client