Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier: jpE+og6GddqjEjDk++5e89RNWYqueFF9UJ+HhZfpQws=
Subject key identifier: D3:E1:6E:1D:22:A9:60:53:10:9C:6C:98:79:EE:BC:79:49:6D:81:EC
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial: 0196B17C3BA78DDA50BF5C036AF7EAD68897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number: 14BF
Signing time: Thu 08 May 2025 20:00:30 +0000
Manifest this update: Thu 08 May 2025 20:00:30 +0000
Manifest next update: Fri 09 May 2025 20:00:30 +0000
Files and hashes: 1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=)
2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: vGFzalES2TceIQGgj9P5VYoIIYADnW5ii6vH8FkCfqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:3b:a7:8d:da:50:bf:5c:03:6a:f7:ea:d6:88:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Validity
Not Before: May 8 20:00:30 2025 GMT
Not After : May 9 20:00:30 2025 GMT
Subject: CN=d3e16e1d22a96053109c6c9879eebc79496d81ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d3:a2:f2:2b:ec:88:88:f0:27:d6:90:9a:1b:
11:dd:00:ef:77:95:80:e9:52:da:62:6f:90:11:88:
c5:14:54:b9:1c:58:7d:28:fb:d6:4c:ec:70:bd:86:
27:17:23:25:09:e5:2b:fb:f7:84:81:4c:b1:e6:31:
0b:bd:b4:ab:3f:a1:47:10:60:fd:a6:c5:b6:74:c6:
66:66:63:66:f0:8a:30:ea:dd:ee:b6:65:87:52:eb:
79:9d:91:9f:af:91:22:37:41:09:c6:22:d4:f6:48:
3d:aa:af:9b:f8:10:76:70:67:02:59:d2:ed:ca:7e:
ee:73:24:91:a9:f1:ae:84:11:41:83:aa:80:b2:6d:
a6:5c:ba:78:62:44:11:30:be:d6:b3:a5:9d:a6:b1:
a7:8e:a8:04:34:05:d4:18:29:34:ce:37:ee:d2:c7:
ff:7a:c2:63:93:d6:f8:66:19:78:d1:87:53:d5:38:
52:0d:c4:4a:97:42:2a:4f:e7:d8:f8:0f:d3:05:89:
ec:f6:e5:bb:dd:ed:54:9a:7a:5b:c6:22:d4:77:79:
22:5f:eb:e1:89:36:d5:fe:b7:c9:9d:a1:3b:c5:12:
43:f1:4c:5b:7d:c8:24:d7:20:80:86:68:0e:0d:c6:
ee:62:e2:1e:2d:45:7b:82:a0:52:3a:f4:e7:93:62:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:6E:1D:22:A9:60:53:10:9C:6C:98:79:EE:BC:79:49:6D:81:EC
X509v3 Authority Key Identifier:
keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e2:0d:08:82:b9:7c:71:ec:db:2c:60:d3:63:20:9f:ee:75:
33:29:06:af:db:90:96:dc:d5:a4:8d:fc:32:65:75:4e:02:d5:
54:30:92:78:fa:1a:84:2d:1b:a0:d1:a2:57:fc:8e:cb:f4:be:
f1:65:ca:a4:20:77:1b:ba:b1:18:30:f7:58:f0:cb:eb:73:2c:
e1:30:6f:fe:27:7c:10:13:9f:4c:b0:1d:4d:43:e8:c6:28:b8:
c0:1a:24:a2:99:dd:32:70:64:0f:a0:72:6b:f0:14:68:7e:f5:
d2:81:9d:3a:0a:ec:79:d5:fe:72:f2:69:a6:83:a9:9d:7d:30:
bd:67:21:74:db:fd:0b:68:4c:d4:97:f3:fd:ca:b8:b2:1c:1c:
73:b5:78:2b:5c:ad:35:fe:00:c7:e2:5c:0e:42:ca:1f:0a:65:
1b:a4:04:d4:4d:5c:94:57:af:a3:cd:44:4c:c9:3d:8d:45:dd:
eb:4f:78:44:ad:f1:57:27:48:b4:99:a7:05:74:6f:7b:87:0d:
6d:c8:38:ed:6b:1f:52:80:85:65:30:9b:86:34:e2:9b:67:d6:
88:45:76:49:47:7a:35:4c:88:50:25:94:52:3b:c2:10:c4:0a:
12:39:d8:27:02:38:4a:b4:03:cb:03:63:cd:1d:6c:56:07:38:
96:ab:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:25:43 2025 by rpki-client