Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: OdXqlsKn19GVPrQR1AH2OalRSkmZY0VzkAqwtxyLe5Y=
Subject key identifier: 24:80:B8:46:71:EF:26:17:A7:1F:31:2F:3B:EE:3B:C6:90:7A:31:81
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 0196A38A2019361A979EC49FDBB2B925875E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 14DE
Signing time: Tue 06 May 2025 03:01:00 +0000
Manifest this update: Tue 06 May 2025 03:01:00 +0000
Manifest next update: Wed 07 May 2025 03:01:00 +0000
Files and hashes: 1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=)
2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=)
3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: DAWTAV2g6QruPCfK6C/n9EiCzFOhVmf3974SMY7PjvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:8a:20:19:36:1a:97:9e:c4:9f:db:b2:b9:25:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: May 6 03:01:00 2025 GMT
Not After : May 7 03:01:00 2025 GMT
Subject: CN=2480b84671ef2617a71f312f3bee3bc6907a3181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:c6:d4:83:7f:d8:14:f2:08:86:8a:41:c3:
03:97:60:e8:7c:e9:03:c4:73:8b:74:bd:15:c1:f8:
f2:3c:1f:c4:48:a7:e7:f9:db:d3:d3:d5:35:86:c7:
15:ff:a1:8e:73:a0:e6:e1:3b:ec:b9:ca:33:b9:63:
0e:13:36:8c:07:fb:45:83:7d:4e:cb:45:54:2a:6b:
fc:13:2b:6e:17:99:85:d4:88:dc:84:d9:03:69:d6:
d9:b1:99:0a:b0:ba:8f:ff:e4:fb:7d:ca:48:4d:cd:
51:8a:37:c0:a0:9a:83:32:18:7e:9e:c3:3b:2e:6e:
36:99:03:2e:11:82:96:dd:8c:c2:91:7b:67:9f:d3:
c3:12:b5:a6:3a:38:48:f1:41:06:47:c7:cd:c9:82:
70:55:53:f5:e6:eb:3c:18:80:7b:db:e9:53:a8:14:
36:77:cf:d3:1d:18:9b:5c:c4:13:bd:d3:21:13:ed:
55:9f:ef:d1:b5:a9:db:6f:69:b3:db:75:e0:f9:aa:
93:7e:40:ee:2c:7e:f4:02:c8:aa:bb:67:29:f7:eb:
30:af:89:8f:92:15:26:7f:20:9c:8f:19:e5:ee:9e:
f4:61:2a:a9:6d:63:10:a7:00:1f:74:54:9c:6d:c9:
10:8c:54:25:75:96:d6:82:23:50:83:95:3f:ff:56:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:B8:46:71:EF:26:17:A7:1F:31:2F:3B:EE:3B:C6:90:7A:31:81
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:12:72:c0:b2:c2:36:74:4b:6e:40:0d:d8:cf:9e:42:6a:87:
1e:18:87:3e:68:64:de:59:6f:26:2f:09:68:34:c8:f0:ec:ee:
ff:00:34:f6:bf:0d:c1:a2:cc:f9:19:8b:e2:4e:e7:af:72:81:
5a:40:94:6b:79:d3:eb:78:d0:19:1d:c6:3e:77:45:e2:a8:c1:
62:6c:90:76:cf:c0:35:f6:ba:9f:69:d5:5d:23:10:54:e4:71:
bd:5f:65:b1:a4:af:28:4e:a8:2e:4b:58:98:f0:0d:b4:61:7a:
42:c6:77:46:14:ea:cb:ea:9f:0a:49:02:32:73:9a:5d:bf:7e:
15:d9:9b:c3:22:4a:46:4f:60:a3:b7:3b:ec:7b:d6:09:8d:43:
6e:f2:7a:a9:2a:76:55:88:0b:51:47:2a:76:7d:a4:57:de:a2:
16:0e:d9:17:4d:5e:43:6c:38:ea:d6:6b:ac:40:f8:2e:ad:af:
69:a0:ee:93:03:e4:8d:09:2d:80:3c:8c:db:89:ad:a6:ca:3e:
a2:cc:40:4f:f5:b6:f8:94:d3:fc:d4:69:d3:dd:77:51:ed:c2:
b1:5d:e2:e3:de:8d:71:60:17:d9:79:52:b0:d0:e2:2c:1c:17:
8e:30:33:82:63:b2:12:a8:ee:71:74:39:fa:03:29:70:a7:03:
e5:98:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:33:56 2025 by rpki-client