Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: FhCDsiUdKybFebuEzUBekl+1KK/dRD18KiOYhpeQUTc=
Subject key identifier: 77:FA:A7:E2:AD:FA:46:AC:31:E7:6F:F6:2C:CA:25:2D:72:7F:BF:07
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 0196C795EE3DFA1CFEFDF2D59A23E147F444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 4D
Signing time: Tue 13 May 2025 03:00:13 +0000
Manifest this update: Tue 13 May 2025 03:00:13 +0000
Manifest next update: Wed 14 May 2025 03:00:13 +0000
Files and hashes: 1: UY81-6OJtOcrPrE4DhCgEFcu2uw.roa (hash: lpvpHr51QilDXnlS7iMzsvab0M6b3NK+tzdIq5lHzpc=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: mL7ZQteZPhiGESLevT7E8XEOOXcDDTmaQyQMlo82RY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:95:ee:3d:fa:1c:fe:fd:f2:d5:9a:23:e1:47:f4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: May 13 03:00:13 2025 GMT
Not After : May 14 03:00:13 2025 GMT
Subject: CN=77faa7e2adfa46ac31e76ff62cca252d727fbf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:f0:f8:a4:5e:6c:ab:7a:87:18:56:ad:61:
24:40:7b:93:e1:7f:d6:91:31:71:5a:d7:82:0b:e3:
97:a1:01:dc:7d:6f:d0:67:a5:a1:73:be:e5:e1:69:
fb:5d:67:e6:59:06:6a:9c:74:01:25:16:99:18:d8:
e2:26:df:92:51:2b:e0:c2:5c:83:40:eb:c4:95:8c:
66:dc:ca:98:4b:d2:7e:db:2e:7f:8a:e2:bb:69:03:
fa:12:9b:87:44:c6:15:ae:3a:1d:df:76:b0:d1:7f:
f1:52:de:6a:00:53:ec:f9:96:7b:d5:1f:b6:e2:ae:
d9:d7:3c:02:9b:34:86:1d:c7:39:4b:ee:d2:1b:ad:
9e:b4:25:1c:f7:e3:14:c7:0a:f7:ef:1e:12:0f:a8:
68:ee:95:ad:fe:78:df:4b:26:8f:18:31:7e:3d:85:
0b:d4:23:d7:6f:de:7d:3c:cc:dd:8d:6d:d8:2f:ea:
38:ff:95:85:3d:bd:b6:c3:77:09:18:4c:24:0c:23:
21:98:4d:88:cf:19:3d:db:03:e9:2c:62:b8:ba:bb:
58:25:54:76:58:69:4f:9e:84:f0:ee:46:74:72:5b:
74:e1:37:7b:7e:ef:0a:71:86:03:6e:64:6b:ff:3f:
f1:99:49:5a:d3:27:0f:cb:f9:f5:aa:4a:cb:a8:4c:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FA:A7:E2:AD:FA:46:AC:31:E7:6F:F6:2C:CA:25:2D:72:7F:BF:07
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:dd:e1:32:f0:f1:cf:8e:2f:38:f4:0f:af:13:ce:1e:92:
7b:97:8c:97:a7:5c:b3:66:e5:e3:29:99:1f:40:67:50:a4:79:
b9:2b:b6:b7:ef:da:a6:4f:0f:ac:3d:e4:b9:3f:76:cd:67:cd:
d9:82:94:ce:36:65:a3:d7:d3:9c:eb:c3:b0:7c:85:f5:3f:ba:
d4:3f:6f:67:00:d3:b0:84:5f:9e:e1:89:06:5a:bf:85:23:32:
be:d9:78:3b:6a:6a:58:08:55:e4:fd:6c:68:30:9e:d8:2c:e6:
22:76:8f:03:1d:f0:c5:09:84:dd:92:4f:8e:5b:27:a1:a4:2c:
ac:ba:08:b8:c9:93:7f:40:b9:01:7c:9a:aa:28:36:5a:df:05:
ed:43:bc:34:76:18:dd:f8:2c:36:67:ee:a2:63:ad:c7:1b:d5:
c7:e1:14:4a:84:09:98:da:c9:9a:05:89:f7:59:86:01:1f:3f:
1a:a4:b8:bc:57:df:1c:4d:5b:fa:d6:2c:7c:dd:4e:3b:04:e6:
2f:41:2e:d1:cc:df:84:af:f0:f4:56:78:09:f0:c8:34:11:76:
38:3f:1e:01:0d:6b:00:7b:9e:2d:35:31:18:e3:a0:df:3e:e9:
df:5d:b2:a3:fc:e7:1a:69:4a:2b:0c:7c:09:32:78:a0:50:d4:
da:40:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:36:15 2025 by rpki-client