Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: sWfg+LLkzoiwIOwZD1eprWIQp+63bmTaoGwGzXy2fNI=
Subject key identifier: 28:7A:EB:2E:09:38:22:C4:B3:1B:D1:A0:95:DE:FF:3A:A1:00:03:3C
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 0196B63565EE397C9997F1B4252799DE9A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 0642
Signing time: Fri 09 May 2025 18:01:14 +0000
Manifest this update: Fri 09 May 2025 18:01:14 +0000
Manifest next update: Sat 10 May 2025 18:01:14 +0000
Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: /C5d7RifH8u88Hd0bXjpe8CshjvLTuXIYUKYnl7TrgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:65:ee:39:7c:99:97:f1:b4:25:27:99:de:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: May 9 18:01:14 2025 GMT
Not After : May 10 18:01:14 2025 GMT
Subject: CN=287aeb2e093822c4b31bd1a095deff3aa100033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:fd:a1:8d:c3:4a:6c:23:00:0e:99:f5:42:
0c:2f:93:9a:b9:4e:88:3c:52:9d:de:fb:ee:25:69:
92:89:66:94:98:dc:70:c2:ac:8e:7c:b1:ef:25:85:
dc:93:09:bb:06:04:5f:82:77:76:28:c7:fc:4b:4d:
27:e0:f0:4e:64:27:a2:e5:2f:c4:a4:b2:ea:b8:6d:
62:fe:9c:d2:2e:cc:4f:7d:c9:00:22:f9:86:28:bb:
c3:f2:95:43:d6:02:66:4f:35:39:b7:c7:99:4d:ed:
bc:77:d1:73:0b:c7:f1:85:b6:a2:6b:26:49:88:1c:
ca:43:e0:ed:f4:5e:21:72:ca:cf:e6:02:7c:52:e7:
cb:ed:2b:cd:2c:74:06:f7:7a:16:23:b6:01:70:a9:
9f:3c:3f:c9:ae:89:4a:fd:2f:d6:ee:6d:67:68:1f:
1b:a6:b6:ac:78:6f:63:ac:53:a9:ef:f1:1b:e5:7c:
57:d9:2d:72:27:dc:6f:9f:99:83:30:04:28:57:86:
a1:ec:74:ce:4a:bf:44:ea:97:15:fc:ea:32:79:7b:
11:68:6e:fb:a6:42:7e:ef:03:a8:3d:81:30:9e:82:
0c:45:db:38:77:04:66:3b:04:63:b4:9b:1d:61:d5:
74:fc:2b:05:ae:e0:9d:65:fa:73:2c:e3:ad:f6:72:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7A:EB:2E:09:38:22:C4:B3:1B:D1:A0:95:DE:FF:3A:A1:00:03:3C
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c3:77:22:8b:45:22:70:c6:e7:30:69:54:79:04:0c:d5:f8:
bb:4d:66:f8:74:83:69:f5:25:a6:33:31:b7:04:ac:ac:7e:81:
cd:48:a0:40:7e:f6:bf:93:05:9f:12:b1:0c:d4:ff:c2:39:7d:
1d:34:bf:c6:71:98:8d:88:83:d4:bb:f1:e9:6e:67:25:18:b6:
17:7d:ba:16:c8:b0:76:6a:d7:eb:e6:55:8c:d8:2f:ef:63:60:
e4:b7:7c:e2:a4:24:93:92:82:66:72:75:f0:64:ae:01:a5:47:
d9:c4:03:72:46:d1:ff:8b:b6:c7:40:29:88:c0:4f:11:6f:cd:
a4:b7:5a:01:98:54:59:39:e1:f4:72:bb:92:e1:cf:17:4c:f9:
55:1b:98:a1:44:cd:fc:8a:89:64:ef:58:26:db:c6:70:dc:fc:
7f:25:6e:94:dd:e3:c6:b0:5f:de:9c:d8:e2:36:2a:f5:5b:9f:
b7:04:4e:06:fe:c9:02:c3:13:8e:2f:1c:3a:df:bf:b9:b7:e5:
a8:79:d3:eb:aa:56:b9:89:4c:2f:23:83:20:3c:9e:5c:2c:41:
68:c2:c3:6d:c2:16:90:45:69:0d:1c:7f:c3:cc:e5:fd:dc:a5:
88:cc:bc:4d:c1:29:49:6f:64:aa:84:2f:21:c4:82:df:c4:a0:
c1:50:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:49:50 2025 by rpki-client