Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: 6qFUj3TSzMj5VhEZSzvPwwPDsz52IXwbOBF/xBO77vU=
Subject key identifier: 11:A8:72:AC:8D:73:20:AF:ED:72:5D:60:02:CB:96:7B:50:83:FB:2A
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 0196C1CB73DC704F4D7068E4A308B63AD634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 0F98
Signing time: Mon 12 May 2025 00:00:58 +0000
Manifest this update: Mon 12 May 2025 00:00:58 +0000
Manifest next update: Tue 13 May 2025 00:00:58 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: m4Owih9gyVHh1Ve590eN3XsyNff3JFMplWtRyoNaKOA=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:73:dc:70:4f:4d:70:68:e4:a3:08:b6:3a:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: May 12 00:00:58 2025 GMT
Not After : May 13 00:00:58 2025 GMT
Subject: CN=11a872ac8d7320afed725d6002cb967b5083fb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:08:52:7e:de:c8:58:5a:81:f2:9e:cb:12:
f3:ba:19:6d:17:30:8b:03:b0:ce:b9:da:96:40:b9:
b9:d3:a7:56:90:4f:49:5b:55:f0:58:ca:98:b6:e5:
c3:c5:0e:11:63:b8:64:f3:37:32:1d:d9:08:4b:3d:
3b:69:34:f6:41:02:5b:b4:77:b8:80:8b:1f:63:cf:
8f:86:b5:ff:2c:cf:da:2a:a0:3c:9a:97:64:74:c6:
e4:17:15:ae:d6:ea:55:0b:18:39:f6:25:73:ce:d7:
d5:f0:6f:aa:fd:79:50:aa:57:b7:2c:d3:e6:c2:18:
5f:10:3f:25:02:df:6b:a4:d4:cb:92:60:ce:26:84:
d3:07:34:4b:ad:9c:0c:cb:d3:36:85:cd:d9:c1:0b:
f9:69:40:f4:34:73:43:d0:d7:b7:88:03:f6:52:ea:
c6:6b:87:33:6f:dc:56:62:92:a8:2a:42:7f:1b:f7:
73:8e:91:55:ee:d2:db:db:e9:e4:b7:15:7f:77:5f:
46:e0:e7:3e:6b:64:8d:f0:1a:19:61:18:b4:dc:f6:
f1:40:f0:ab:2a:2f:9b:7b:46:42:23:7a:34:93:6d:
46:d2:47:21:d6:ff:b7:8b:58:41:f5:84:39:b0:18:
1c:02:71:6e:86:a3:98:5c:2d:ac:fe:62:b2:09:e1:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:72:AC:8D:73:20:AF:ED:72:5D:60:02:CB:96:7B:50:83:FB:2A
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:39:02:18:51:79:99:d5:7e:9d:aa:12:01:68:08:31:76:4c:
cc:a6:5a:b7:3d:95:11:eb:3d:7d:fd:6a:29:22:ef:a7:38:fd:
64:1f:80:5a:5a:92:a5:4e:02:02:5f:13:b5:d1:eb:b4:5a:27:
d2:ce:83:a6:1b:ce:c8:64:e2:4b:60:64:e1:e5:51:57:9d:48:
f5:83:db:0f:1e:44:39:1c:1c:19:d0:3c:ba:74:b4:fa:52:f1:
b9:44:f7:a7:67:85:35:fd:67:3c:0f:bb:72:ec:d7:46:ed:9e:
3a:5b:1e:85:a5:19:82:b1:6f:4b:42:b4:4a:db:67:f0:3c:0a:
45:89:23:74:93:68:1a:c5:8c:71:78:75:72:ab:f4:31:4f:b9:
95:e7:fa:b1:16:b9:61:71:2a:b9:f9:4f:cb:f6:9f:aa:e9:be:
48:b2:58:5e:b4:69:95:d2:2b:80:38:be:c7:b4:ca:60:9a:eb:
55:91:7e:72:67:0e:9c:9a:64:d5:5c:1e:2a:e5:e0:26:f8:ac:
63:e0:61:c3:24:d5:de:dc:b1:f9:a0:5b:fd:86:78:e7:e8:d4:
8a:39:2a:fb:06:07:8b:e5:77:f2:d1:74:65:29:59:42:04:19:
97:3d:4f:64:45:98:90:26:c4:d0:cc:65:77:32:7f:86:ac:84:
62:fd:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:16:09 2025 by rpki-client