Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: jTekNYzAhwS3fI3LyBjb2eGG8ZhQSwQcPkdrjOxWubM=
Subject key identifier: 68:0B:CC:66:F8:95:39:ED:4B:68:CB:2B:1A:A2:E5:38:02:6E:A9:5D
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 0196B17C1966CEBB4F8B5EB5C1B6370B0AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 14AC
Signing time: Thu 08 May 2025 20:00:22 +0000
Manifest this update: Thu 08 May 2025 20:00:22 +0000
Manifest next update: Fri 09 May 2025 20:00:22 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: ZBklKsY9Ln+sg+JPWBLNfVOfds9PtjzKDsIv9DbNFFM=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:19:66:ce:bb:4f:8b:5e:b5:c1:b6:37:0b:0a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: May 8 20:00:22 2025 GMT
Not After : May 9 20:00:22 2025 GMT
Subject: CN=680bcc66f89539ed4b68cb2b1aa2e538026ea95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:3a:fc:92:f3:c4:5e:fd:81:ca:50:a5:f5:
ff:5b:4d:ee:90:6d:93:92:90:6f:67:da:93:e1:f3:
70:3b:05:5b:fd:a4:8b:16:6e:72:58:c1:a1:f8:2e:
5c:fe:d2:0e:ba:76:89:aa:0d:04:3e:c7:56:69:c6:
7f:4a:a9:f9:03:04:27:d6:fc:98:a5:79:39:e3:ef:
e9:41:e8:10:02:f7:41:a9:e1:74:ae:18:bf:12:b0:
be:4f:14:e0:7f:2c:97:f7:eb:84:54:e0:d2:43:0b:
3b:9f:85:74:d0:cf:cf:35:d8:94:ec:1c:5b:2a:b1:
25:8b:34:14:20:d4:df:07:31:93:06:7e:e6:7f:2b:
8a:1d:fa:63:f2:0f:b7:24:36:fd:25:09:2d:8b:cd:
d4:4c:2a:c9:46:ea:b2:c9:d1:90:02:c9:84:41:be:
4e:2f:6f:2d:68:e0:a8:5d:7e:f4:57:4d:b9:bc:dc:
05:60:34:7f:03:4c:87:43:5f:9d:19:73:10:8a:12:
fb:50:9d:e4:34:43:e1:01:48:7f:83:0d:0b:de:bc:
bb:a3:40:17:70:37:2c:4d:0f:c7:79:9e:25:d1:8b:
09:6e:a6:37:f0:5c:54:89:87:ff:ce:69:18:66:67:
2d:e4:b2:dd:b2:a5:31:f3:ea:c6:56:d3:15:63:b1:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0B:CC:66:F8:95:39:ED:4B:68:CB:2B:1A:A2:E5:38:02:6E:A9:5D
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f6:f6:c4:98:1a:a3:5b:a4:9f:41:f6:a7:ae:d7:4b:d6:6c:
a3:3b:a4:1e:1d:d6:b3:7f:91:96:37:11:a0:2f:32:42:55:54:
ad:1d:55:bb:84:81:53:42:7c:09:d2:91:ed:7f:cf:8f:80:4b:
25:93:b1:91:88:0f:c2:1a:f6:95:44:21:54:51:a9:a1:c3:1d:
44:7a:88:7d:64:e3:8e:ef:bc:74:ba:39:f2:ab:2f:ef:28:e4:
8b:b7:41:72:91:1d:4d:a3:f1:fe:d0:1a:97:32:1a:cf:c3:ee:
23:1b:ee:1a:63:ab:e0:f4:c2:94:c0:9c:f2:07:34:64:b0:87:
6c:8d:06:8d:58:1c:16:b7:ec:e7:7d:52:9f:89:0b:29:f8:21:
b5:fc:73:a5:a3:7d:e8:61:d7:96:81:14:1f:f8:7a:bf:cc:69:
bd:67:e3:89:36:0d:c1:a7:7f:04:16:a8:a9:d9:4c:3a:f3:6b:
e6:db:ab:cc:70:3f:e9:7f:38:b2:c7:af:dc:25:c8:e9:7e:a3:
a3:c3:49:ad:84:77:03:6e:35:7e:cc:51:53:b8:5a:d7:4a:ae:
77:dc:50:08:d1:01:fe:e3:ce:55:ce:b6:a5:ec:8c:c6:54:12:
de:ba:c6:5e:af:30:f0:b1:6f:e9:d0:b4:c1:fd:bc:a9:a2:9c:
f9:31:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:45:11 2025 by rpki-client