Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: D8U+83jwjm7LkOx9RfU1imZsD/lZnrz9hKxuqRbtgQI=
Subject key identifier: 33:54:E9:11:44:F1:09:D3:1C:DB:00:FA:C8:06:F7:DC:A7:71:37:BB
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0196D69BF4A4EF39FACC82193D3F779E5FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 12FF
Signing time: Fri 16 May 2025 01:01:07 +0000
Manifest this update: Fri 16 May 2025 01:01:07 +0000
Manifest next update: Sat 17 May 2025 01:01:07 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: 1qTZ+d3R8QYTmVvVG8umMGej35OLbso90jEcO0HbUKY=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:9b:f4:a4:ef:39:fa:cc:82:19:3d:3f:77:9e:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: May 16 01:01:07 2025 GMT
Not After : May 17 01:01:07 2025 GMT
Subject: CN=3354e91144f109d31cdb00fac806f7dca77137bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:b6:3f:81:a0:08:f3:ec:c1:21:0a:c4:4c:
4b:ca:ff:8b:60:f5:da:a1:17:10:72:d9:56:14:6b:
32:3d:68:90:19:70:be:a0:3c:aa:8d:69:90:46:79:
9b:a6:22:d5:7b:9c:d9:9f:2f:34:94:bf:58:80:af:
14:10:39:d5:e6:89:61:a7:1c:b9:20:49:3d:a6:bc:
d3:75:20:72:94:ce:03:cb:2e:73:b7:80:86:67:20:
b2:d2:59:a0:14:75:fc:d5:2e:ff:ab:67:31:bb:14:
3e:97:56:4d:11:b0:17:a9:51:a9:50:19:67:1a:64:
2d:58:55:9f:46:f2:b5:95:cd:1e:cc:f5:63:3c:65:
c1:14:fb:36:50:53:3e:9f:36:01:97:38:3f:fd:cd:
b3:35:11:08:7d:fb:b8:78:0b:31:23:41:3c:05:52:
2c:ed:ae:34:3c:00:22:c0:df:87:55:09:2f:72:bf:
5c:8d:83:78:1f:58:ab:85:69:8c:23:b4:0d:af:87:
05:9a:e7:66:b9:e1:47:b4:97:5f:8d:65:df:11:07:
4c:c0:d2:c7:61:a8:5d:2f:45:77:59:8b:f1:3e:95:
8d:1d:00:c9:c6:40:f3:9a:63:62:2e:f3:b5:0f:16:
5d:12:76:ad:c9:79:8d:34:7c:3b:c2:e5:95:b7:53:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:E9:11:44:F1:09:D3:1C:DB:00:FA:C8:06:F7:DC:A7:71:37:BB
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1f:b0:1f:8f:09:ed:54:68:c2:66:52:b6:c9:52:e2:0c:db:
0d:c0:98:e7:b7:12:ab:35:65:c1:72:96:a9:23:97:74:85:6e:
79:76:6e:1a:59:55:b3:5b:27:f1:11:48:82:e2:6e:e7:56:88:
5d:72:da:79:e3:43:cf:ae:3e:e5:34:8e:06:dc:20:b1:7b:50:
f4:0e:ac:a5:de:ef:c1:89:dd:af:9b:74:61:ad:ea:82:14:75:
67:bd:8d:ac:01:ce:78:e8:ff:4f:9b:f8:4c:b0:14:06:c8:b2:
41:b9:57:0c:70:36:6a:ee:83:20:a8:83:3c:83:60:01:72:0c:
f4:92:11:7b:3f:68:e8:60:58:fd:fa:29:58:03:aa:2a:fd:26:
a1:9d:e4:d7:89:d0:ad:b3:1c:c3:dd:c6:b1:9a:d8:2e:0f:01:
99:68:9b:a1:c2:e8:ce:44:67:79:a7:a4:b4:b1:cc:31:40:c6:
d6:a6:0f:0b:fc:70:3e:cf:1e:d7:75:f1:65:c2:4e:3e:67:0a:
a4:c2:4a:af:72:63:43:03:f1:d8:d1:5c:b8:24:f3:81:60:69:
c4:81:04:d2:8c:bf:73:34:5e:68:b8:6e:75:0f:86:7f:c4:b6:
20:56:60:e4:30:51:60:1c:e2:cf:2d:e8:68:a6:9e:1b:a6:00:
ed:0c:22:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:47:56 2025 by rpki-client