Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: Doy9SisrpOajJFVmMJvxxUdkDX03e+CrGUSx0inget4=
Subject key identifier: F3:61:10:BE:9D:DA:1E:C9:AC:C9:B6:36:E5:DC:14:F4:D1:2D:23:55
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 0196A68AFEC378D11017EC79CE6E35AFA126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 0509
Signing time: Tue 06 May 2025 17:00:49 +0000
Manifest this update: Tue 06 May 2025 17:00:49 +0000
Manifest next update: Wed 07 May 2025 17:00:49 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: jyZFicX7zRpqlLbSiXn17h9GLF1X1KQOTolOocRpHKo=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:fe:c3:78:d1:10:17:ec:79:ce:6e:35:af:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: May 6 17:00:49 2025 GMT
Not After : May 7 17:00:49 2025 GMT
Subject: CN=f36110be9dda1ec9acc9b636e5dc14f4d12d2355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:08:64:48:a8:b5:eb:aa:47:8f:4b:6d:a0:
57:11:0f:7e:92:13:59:cd:41:69:c9:77:a0:f8:c7:
44:b6:08:e9:06:49:62:77:5c:3a:b0:49:e2:5f:83:
2a:54:73:8a:a9:56:82:7f:ef:4b:ac:c6:c8:dd:cf:
60:d7:58:e8:5a:00:2d:db:10:b3:69:4c:be:1b:96:
29:86:fe:62:af:b2:d1:15:6d:7b:81:81:3a:be:77:
62:59:08:48:29:1d:75:89:3b:b3:6d:e7:28:64:4f:
8f:45:44:7f:c0:d1:cb:3e:de:ba:17:38:db:e7:bf:
b0:5d:f5:c8:0c:aa:d5:57:ff:68:27:24:99:e0:fc:
70:be:6b:f4:4e:12:c3:de:b1:9c:a2:1f:84:a9:f6:
18:6c:16:34:5a:f6:c5:3a:fe:9d:a9:51:26:93:12:
bf:4e:94:ca:0b:9b:62:28:2c:ef:0b:06:70:22:c7:
81:9e:a9:61:83:41:40:66:f2:3c:da:59:5b:92:fb:
f0:f4:1e:ca:b9:48:f5:5c:fc:e0:bd:c0:fb:a2:21:
0b:a6:7f:79:54:65:d7:d7:22:2f:9a:7d:d9:83:7c:
85:81:83:07:63:7f:43:88:bb:38:38:c3:72:65:ea:
9d:6f:a5:38:09:48:f2:8f:69:b8:ec:7e:79:d8:12:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:61:10:BE:9D:DA:1E:C9:AC:C9:B6:36:E5:DC:14:F4:D1:2D:23:55
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e4:e0:0a:58:be:48:59:1e:df:f5:68:79:ab:e7:33:61:31:
c4:d4:62:4c:d9:4a:a0:f1:69:07:66:2f:57:55:35:80:ab:50:
19:40:4f:6d:ab:13:7c:6d:75:ce:e7:3d:45:79:ed:36:13:ed:
65:9a:ea:4a:80:57:57:1b:d3:5a:49:a7:90:af:cc:b8:0f:09:
24:2e:02:04:97:8e:42:d8:98:4f:09:3d:bd:99:30:04:4c:e3:
fe:56:0b:b6:e8:b7:20:1a:51:6a:10:29:15:21:33:5b:75:73:
86:15:1b:e5:fc:2f:4e:70:eb:b4:3f:fa:47:4a:4e:8f:47:5e:
9b:d2:3f:72:7d:cc:20:3f:79:8e:05:50:07:93:04:61:ca:30:
15:11:90:5d:94:52:46:6e:02:dc:a8:a0:44:53:35:f3:00:a7:
e2:60:f1:b7:ad:6e:16:18:7a:fe:74:41:b1:1a:06:d7:03:a4:
56:38:bd:5e:09:bd:a0:d6:7b:76:5c:0c:d5:11:7b:55:4a:ad:
df:c8:f9:24:5b:24:f3:5f:ce:cf:c2:52:53:45:37:06:74:6e:
8a:d1:1b:4d:db:c9:d1:fa:c6:fd:9b:d3:2b:97:0b:af:45:62:
a9:b5:01:4a:92:37:53:12:2a:85:c7:45:68:a5:fc:26:b2:68:
62:34:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:44:02 2025 by rpki-client