Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
File: fh10krjoNfLk4q3k0sVNqat4r4w.mft (raw, json)
Hash identifier: 38iA/AP/VrK0Lih/B83+2jMIovRizz4v7yjFJxnwkq8=
Subject key identifier: BF:F6:E5:CE:F4:F3:5B:84:98:02:9E:DD:87:97:73:55:06:3E:7A:82
Authority key identifier: 7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
Certificate issuer: /CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Certificate serial: 0196B710401F47F676FCD9FFDBE79FF4275F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
Manifest number: 0688
Signing time: Fri 09 May 2025 22:00:17 +0000
Manifest this update: Fri 09 May 2025 22:00:17 +0000
Manifest next update: Sat 10 May 2025 22:00:17 +0000
Files and hashes: 1: PgE9BW67Hzl1H_iUdCM9hiaWebE.roa (hash: /s5fkdZBUcDDsN3IZL7N+u3huKwHv5y1+anQQJEUKPw=)
2: fh10krjoNfLk4q3k0sVNqat4r4w.crl (hash: RUUSR+lghcyx1tk3BMR27wyPDYCJHe5Oeg+r6o0EaXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:40:1f:47:f6:76:fc:d9:ff:db:e7:9f:f4:27:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Validity
Not Before: May 9 22:00:17 2025 GMT
Not After : May 10 22:00:17 2025 GMT
Subject: CN=bff6e5cef4f35b8498029edd87977355063e7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dd:d7:74:67:2b:c1:93:f6:44:19:30:a4:57:
27:b0:54:20:f1:2f:9b:fd:ba:56:98:f2:37:88:b6:
bb:2b:9b:97:aa:ae:3f:79:d9:05:a0:23:01:6e:57:
3f:c2:6e:f8:b8:89:b3:7f:bf:ed:0f:77:96:55:6b:
78:2c:bd:a8:9e:10:9b:8d:dd:0f:0c:22:db:0e:c8:
fc:06:c3:52:8b:fb:3a:1d:3c:f2:89:c5:7f:62:05:
1c:e8:9e:dd:3a:f2:91:0d:ba:9e:ee:2d:7a:42:89:
65:5b:90:21:a5:c6:d4:ac:6a:c8:7c:58:63:06:24:
0e:8e:e0:6c:2e:e0:5a:b8:84:d9:40:16:b0:69:85:
99:4d:38:81:18:65:b4:b5:93:8e:57:dd:20:c3:7c:
a7:a4:83:a9:69:df:1a:da:8c:97:cd:0c:05:f5:31:
0d:ac:21:ee:ba:5a:2b:6d:f9:1e:69:46:b0:16:69:
33:bb:86:74:cf:47:54:96:ff:40:a3:85:41:5b:36:
f7:a6:fb:0f:56:ae:1b:e0:67:9a:7c:e5:d2:54:13:
69:1e:c8:e8:0c:3b:bc:a1:6c:94:db:97:36:77:2e:
ba:d8:fd:68:d5:b3:23:b4:dc:18:53:dc:44:09:97:
02:d1:e6:39:c7:27:c9:0d:77:a1:6a:20:29:46:bb:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F6:E5:CE:F4:F3:5B:84:98:02:9E:DD:87:97:73:55:06:3E:7A:82
X509v3 Authority Key Identifier:
keyid:7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d7:d0:20:3a:3f:2f:ad:31:ee:9d:03:b8:34:66:1f:fd:1a:
a0:7c:2b:12:20:8e:72:03:bb:61:03:19:25:b6:4c:ff:46:5f:
61:4a:46:81:fa:1e:9f:a4:3d:cb:57:a3:b0:a1:5c:19:d5:91:
75:eb:a6:24:69:24:80:bf:81:05:dc:7c:89:d5:5a:93:1e:bf:
0a:87:9b:35:c9:51:f8:0c:aa:54:e2:97:8a:60:46:29:a0:fa:
5e:3d:27:af:60:b7:56:4d:3b:6e:8d:d0:77:73:ec:15:e6:a6:
25:21:a4:e9:7a:44:37:c5:dc:cc:4f:5f:86:62:6c:82:ce:87:
75:e9:3b:53:90:26:81:8c:53:cb:56:87:5e:43:57:1d:78:b5:
c1:e6:d3:b0:86:9f:17:75:88:89:e2:ae:5e:5c:17:11:79:39:
89:42:a6:58:e2:2b:1c:29:bf:99:89:c2:51:d8:6d:2c:ce:8d:
ff:06:32:78:29:f7:fa:ff:b6:2f:d7:70:4c:b1:e6:a6:c0:94:
ff:1d:13:30:e3:6a:d7:e8:98:b0:ae:4c:3f:b3:1d:a2:bc:21:
52:53:17:3c:35:96:15:3e:f3:ed:e1:b1:70:c5:a5:d6:96:e2:
38:ff:15:61:99:64:6b:af:02:65:90:50:ba:25:63:eb:94:64:
1b:69:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:39:23 2025 by rpki-client