Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: m3mOVCm5WRp4HDZvdAFek8E4b94JYNkhRkwSeA2hwzU=
Subject key identifier: A4:F4:8E:87:6A:AE:68:A1:2B:D7:7F:22:46:22:8E:53:89:B6:04:BF
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 0196CE73CF19CEB618A549D3A93D07CE6C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0A75
Signing time: Wed 14 May 2025 11:00:18 +0000
Manifest this update: Wed 14 May 2025 11:00:18 +0000
Manifest next update: Thu 15 May 2025 11:00:18 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: 234bs6h84VdoSGKueuTNDy5YeXLul6Up0Law7xogZnM=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:73:cf:19:ce:b6:18:a5:49:d3:a9:3d:07:ce:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: May 14 11:00:18 2025 GMT
Not After : May 15 11:00:18 2025 GMT
Subject: CN=a4f48e876aae68a12bd77f2246228e5389b604bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:54:b0:2f:9b:a8:c1:86:7e:5b:1d:c7:31:
39:ea:2d:3b:40:f0:16:e0:75:c9:0c:9f:9c:e8:a1:
77:35:93:9d:94:90:e0:d3:a2:5c:a0:7c:85:37:c9:
86:10:95:32:0d:a6:ac:da:f6:df:53:62:32:4b:cf:
57:ba:1d:d8:7c:75:d4:f7:15:03:ee:79:75:6a:7e:
a1:1c:5c:9c:ad:18:f0:63:f0:33:44:9e:97:d0:25:
2f:af:86:ed:31:95:6d:36:cf:4c:5c:22:72:0e:50:
27:40:de:1a:43:07:fe:2d:ed:aa:a8:73:15:5d:27:
9d:78:12:ef:b8:cf:ec:40:e2:fe:4d:b5:31:70:9e:
78:30:a4:6c:32:2b:62:9c:70:70:32:99:0b:84:f6:
18:8d:c1:6c:46:a0:7b:15:8a:97:ea:d7:cb:08:50:
85:93:a9:30:9a:c1:f5:85:56:ea:c9:f0:37:e3:2d:
28:f3:db:54:a0:f9:10:fd:94:8c:ba:78:da:84:5a:
7c:a2:76:ca:61:c5:91:c9:3b:13:74:f8:79:b6:f6:
b4:38:18:c4:ba:c1:86:31:98:cf:57:7e:f4:46:bc:
17:7d:2e:81:72:10:bc:74:67:bd:43:16:5e:97:fd:
d6:19:38:fe:cf:fc:b1:7d:3f:25:74:36:b8:b2:5b:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F4:8E:87:6A:AE:68:A1:2B:D7:7F:22:46:22:8E:53:89:B6:04:BF
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:a9:e7:7c:12:fd:9f:df:d0:47:31:88:49:20:90:df:09:
70:72:5e:b1:12:32:b5:fd:c2:8d:4b:b8:89:9a:71:4c:42:4e:
ca:5e:34:5b:1b:ac:84:b5:7d:6e:15:34:8b:c2:bf:c6:1b:0f:
f2:54:0a:e7:0c:00:3b:9a:88:68:72:a4:4a:cb:b6:4c:85:d0:
36:cb:00:82:36:7c:58:ee:cc:82:a1:ff:d9:67:63:1e:97:54:
c7:5e:92:2c:87:dc:d5:bb:8e:c0:4e:61:16:64:b8:23:0b:b1:
19:31:74:79:14:98:51:82:b1:c9:41:f3:39:25:a1:5a:c0:72:
5d:c0:b0:c9:6b:b5:4b:6d:82:d4:a5:11:74:c7:8f:98:91:d6:
f3:f7:37:05:b9:22:dd:3a:6d:6f:f9:94:d6:40:0e:7b:26:a4:
4d:fe:e1:a0:5e:7b:60:e3:22:1e:54:93:1c:6a:d5:c8:43:27:
8c:f0:06:ba:65:6c:5c:d1:ee:2c:f0:4b:ad:f1:26:5b:29:32:
1b:13:58:1c:22:d8:cc:0f:8a:7d:47:08:8d:2d:07:5e:a1:a9:
3d:e4:9c:d1:0e:dc:40:25:ee:5c:9e:f2:13:74:a7:4f:0a:ff:
8e:b3:be:af:b7:9a:ca:83:7e:df:51:aa:50:29:73:fe:d5:5e:
ae:5d:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:17:33 2025 by rpki-client