Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: jVidLUr1EW0N/G3s5FTLVt7SEZcH6R+qajNK9cPjXyg=
Subject key identifier: C6:A9:BE:56:C0:A3:2B:AD:EF:A8:AF:B2:9B:14:43:29:6D:AA:4B:A1
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 0196CCBC678B476D5CF8623745B878B8B9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 0EE5
Signing time: Wed 14 May 2025 03:00:21 +0000
Manifest this update: Wed 14 May 2025 03:00:21 +0000
Manifest next update: Thu 15 May 2025 03:00:21 +0000
Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: GCM1GpYmjV8asW38O+yVSvYB544kev7ROz2UZR52Bls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:bc:67:8b:47:6d:5c:f8:62:37:45:b8:78:b8:b9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: May 14 03:00:21 2025 GMT
Not After : May 15 03:00:21 2025 GMT
Subject: CN=c6a9be56c0a32badefa8afb29b1443296daa4ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:d6:7d:36:73:6e:0e:7d:84:e8:89:3b:12:
fd:30:68:18:c5:83:a1:2e:30:ba:18:1c:fe:9b:79:
94:a2:5c:12:75:df:cf:74:50:ad:0f:f5:da:fe:53:
8d:71:94:27:32:0d:75:92:f2:1e:5c:f8:c8:13:25:
18:61:c6:5d:96:54:8a:a0:f2:5d:f1:ae:b5:3e:ac:
10:e1:d3:15:32:da:79:2c:cd:b0:63:c6:85:e2:03:
3f:2e:08:e7:84:80:ff:20:c4:37:2a:36:70:63:3e:
43:e4:85:59:2b:94:64:5a:7b:1a:fc:6c:05:5b:97:
4a:68:4e:3d:e5:08:02:3f:58:2b:4d:17:8c:af:52:
54:b5:13:b2:4a:49:f2:95:c2:09:1c:ec:7b:0a:58:
7d:25:31:8d:97:f9:2d:82:ef:24:6f:07:2f:a6:82:
c5:e6:c8:2c:67:30:4a:b1:4b:63:d4:46:b0:ba:94:
5f:0e:5c:43:d4:03:a5:5f:ea:d6:6e:08:36:ca:09:
b6:33:d5:d3:ae:2e:f5:a8:ed:c3:94:c8:e1:38:34:
67:a9:e1:e1:35:a8:4e:43:69:57:0a:45:42:69:60:
1c:cf:8c:2c:52:d5:b1:5a:27:6a:e3:b2:5c:69:e6:
1b:d5:c6:59:fe:04:66:35:43:de:6e:eb:25:bf:32:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:BE:56:C0:A3:2B:AD:EF:A8:AF:B2:9B:14:43:29:6D:AA:4B:A1
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2b:13:c5:d0:49:19:a9:76:59:74:ca:c9:85:5b:7f:52:f0:
1b:2e:56:9e:ad:ce:29:e5:5c:90:a5:0d:3c:fc:cf:87:72:16:
b8:a6:4f:aa:d6:b5:09:9e:58:0c:ed:a0:3a:d6:83:c2:71:8a:
15:6e:29:a9:e5:c7:e6:96:f0:6f:41:24:5a:eb:5e:0f:d9:ac:
05:70:40:50:ca:b3:0f:f6:bd:d5:20:8c:40:20:57:eb:a8:2f:
fc:f1:73:4e:f7:00:85:75:da:db:7b:73:b4:ce:23:c7:ac:87:
f8:43:36:10:88:ad:ee:30:9e:63:37:ee:9f:94:e7:3b:d0:41:
8d:72:c4:75:89:75:e7:8c:c7:64:34:18:13:d8:9c:90:3e:af:
49:15:9a:cd:51:17:78:84:56:59:71:6c:e1:b7:53:13:80:22:
4e:ae:73:28:a4:70:c5:62:da:54:52:97:82:67:c4:30:de:f0:
c4:6c:e6:80:db:6a:28:db:2e:1d:67:17:8f:6e:83:35:ea:22:
25:1e:2c:19:43:02:9a:96:00:d4:98:8d:91:a2:55:c2:c3:cb:
1f:d9:89:62:71:f0:bd:90:36:15:43:b7:7a:4b:78:ad:4a:9c:
1d:5d:ea:0c:3c:8e:f2:49:ac:89:0f:2c:ca:84:0b:28:f3:91:
8c:0a:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:56:07 2025 by rpki-client