Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: VvmPwKrs5Q5QsSN82GEGlslW2qP60vYptycs/H01Na4=
Subject key identifier: 46:0D:73:5D:EB:0C:46:23:47:A8:97:61:40:C6:73:53:A3:D9:81:6D
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 01969C74C29C7BDA4DE3F23CE6E5139DCA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 18:00:19 +0000
Manifest this update: Sun 04 May 2025 18:00:19 +0000
Manifest next update: Mon 05 May 2025 18:00:19 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: HNBZgGswk00g67QqywCCKGdwM8gjnUXpWqTHZ4Qi7Ao=)
2: Qv45l9CC_OtB7OS_57aAR1sJyvc.roa (hash: Mv6sqdxR24sbzw3gEqGiuaVF1p5QjBnxJTiW3StRP2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:74:c2:9c:7b:da:4d:e3:f2:3c:e6:e5:13:9d:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: May 4 18:00:19 2025 GMT
Not After : May 5 18:00:19 2025 GMT
Subject: CN=460d735deb0c462347a8976140c67353a3d9816d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:db:21:1e:f1:ba:68:62:ec:b2:42:f4:ac:
29:09:30:75:77:d5:10:ff:2e:a4:e7:43:9c:51:3d:
3f:22:9f:b2:5c:76:05:ba:56:da:62:03:bc:81:9a:
58:7e:ba:1e:b1:2c:b0:23:30:cb:ce:b7:ac:94:92:
39:b2:b2:ff:b3:d9:a5:df:6a:2b:24:6a:62:ab:84:
76:fc:1a:b5:28:3c:bc:95:db:89:87:df:3d:e6:6d:
5f:93:b7:c1:82:ab:53:14:d6:fd:eb:01:c6:da:87:
2c:cf:1d:c3:6e:a7:fa:9b:d2:15:53:c6:2c:6f:c8:
bd:d2:2e:d3:01:14:bd:8d:f3:9c:66:9a:a8:71:cf:
1d:78:38:e4:33:ee:a8:3b:d4:74:aa:7a:7b:ad:f3:
b0:2a:8e:9c:0b:53:e9:f6:b4:dc:97:f8:80:3e:39:
65:fb:13:d8:0d:87:10:97:5b:33:82:6c:f4:f3:12:
4c:4d:8c:49:d5:ce:c1:e6:1f:97:79:3a:15:19:e9:
a2:99:a4:27:04:51:e3:a7:9b:d8:39:44:b4:ec:f4:
f5:40:a9:d7:e2:43:29:90:2d:72:c3:6d:c4:77:9b:
f0:4b:4d:c1:2c:b9:6b:61:2d:74:b8:b9:2d:1a:fc:
8c:09:20:8f:24:57:d6:09:60:2e:36:90:aa:c4:75:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:73:5D:EB:0C:46:23:47:A8:97:61:40:C6:73:53:A3:D9:81:6D
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c4:03:a8:2d:bf:46:b7:33:3b:12:32:d9:64:f5:61:51:60:
ca:c6:5b:3f:05:43:6f:3f:60:4c:18:7b:b5:54:20:dc:d7:03:
3d:e2:17:cb:ad:6a:b7:00:dd:2a:9d:3a:cf:b1:52:fb:2e:19:
de:c8:23:80:dc:6b:3e:75:f9:a7:2d:10:10:d2:b8:09:f1:73:
8b:f7:80:de:5a:15:7e:84:bb:29:5d:6c:53:53:93:d6:8d:5e:
b4:a5:f4:3c:c8:4b:56:d3:97:ac:40:f4:0f:ef:9d:62:3f:cf:
39:77:2f:70:ab:ba:bb:c7:69:00:90:f0:60:41:ac:b4:5f:78:
c9:a9:4f:54:e6:7f:42:db:97:23:5e:8d:e7:65:0a:97:ef:6b:
62:f2:81:f5:02:42:a2:ba:0d:29:36:ec:40:8c:f2:35:33:e6:
d9:14:26:d6:52:27:c2:35:22:ab:b3:2c:d9:4c:8e:17:e5:96:
1f:84:e7:cf:27:9a:96:01:cf:40:e6:38:f3:79:51:ab:6b:10:
7b:32:c8:4d:0f:19:b3:fc:f7:6d:73:15:fc:aa:51:2a:7b:b1:
c3:1e:2a:65:16:0f:97:8f:10:7d:e8:7f:6c:6f:e1:bd:cb:50:
85:2e:f2:c8:17:cf:be:ef:f9:50:3c:3d:f5:ca:c0:2c:d5:c3:
cc:e8:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:06:22 2025 by rpki-client