Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier: 4YKxpF4l7LZT7ev3h6hjxHrY4E2BqWaCjK7VnoQPLyk=
Subject key identifier: 22:89:D6:71:67:36:1E:34:A1:9F:C2:1B:29:DC:08:6A:6B:C4:1A:25
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial: 0196AA6762FE6B86FB049DEFE1B7FCED1447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 11:00:24 +0000
Manifest this update: Wed 07 May 2025 11:00:24 +0000
Manifest next update: Thu 08 May 2025 11:00:24 +0000
Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: sJa+tDE9PoMo3x56mWmSElT1GCd1YAsIyQuujVaqoLM=)
2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:62:fe:6b:86:fb:04:9d:ef:e1:b7:fc:ed:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
Validity
Not Before: May 7 11:00:24 2025 GMT
Not After : May 8 11:00:24 2025 GMT
Subject: CN=2289d67167361e34a19fc21b29dc086a6bc41a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:c4:0f:19:57:a1:1a:86:70:ae:b5:a9:ba:
dd:b9:b6:d3:5f:b7:9e:b4:a3:74:a4:74:5a:ca:d8:
6b:e7:85:e8:1d:4e:3c:29:e3:53:89:16:98:9d:17:
bf:d8:69:af:0d:2c:54:cc:bf:9b:ea:bb:b1:19:1c:
fb:ea:5f:44:03:4a:4c:1e:c0:7c:74:27:d3:99:95:
14:cb:5f:52:4e:bd:bd:71:a1:5b:57:24:ce:d1:f1:
69:dc:05:22:b7:e3:e0:63:50:52:fc:63:b2:ba:30:
67:f6:c2:27:c3:3a:1e:e1:c6:4e:9b:c6:3e:3d:60:
7d:96:33:7f:74:80:65:38:9b:04:b0:e1:01:87:af:
3b:16:dd:95:4e:64:96:6c:8e:ad:7f:6b:3d:99:2b:
c1:6c:3f:d7:9e:6d:4d:7c:95:d1:de:ad:f8:db:ea:
62:6e:7b:46:20:de:6d:79:32:45:fc:a1:88:b7:c5:
4a:69:fe:82:3b:fe:ec:ab:c6:30:05:0f:5e:df:fe:
77:28:0d:76:ca:04:d4:d7:1b:4d:84:e5:3c:7d:94:
8e:42:8a:df:4f:41:58:54:ab:b4:af:78:4c:f4:f0:
bd:04:e0:b3:f5:17:34:62:f9:31:65:f3:68:0d:3c:
86:7c:60:89:35:22:5a:33:c2:9f:f1:8e:bc:22:b0:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:D6:71:67:36:1E:34:A1:9F:C2:1B:29:DC:08:6A:6B:C4:1A:25
X509v3 Authority Key Identifier:
keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bf:e9:c0:f1:68:4b:14:b3:f3:f5:72:6b:8e:18:c4:de:48:
d2:94:d3:64:b3:d5:6d:ba:75:a2:6c:e8:d5:50:38:19:b7:6f:
1f:57:ad:76:d7:be:ed:0b:b3:08:1a:ea:dd:8a:63:87:06:d6:
e5:33:3b:48:c7:65:79:69:4d:cd:33:7b:ad:7c:5f:a4:9e:7f:
cc:34:c9:ca:74:31:53:3e:eb:ce:76:b6:6d:54:67:26:45:69:
33:a5:a0:dd:6b:80:be:cb:fe:bc:15:2e:f1:1f:c7:3f:38:88:
50:23:8b:f4:15:b4:59:6a:c8:36:50:6a:75:4c:4d:56:41:a7:
3f:11:b2:ab:2e:12:b3:db:83:67:30:df:42:44:40:48:98:3d:
7a:c7:c1:fb:68:46:8e:87:e0:9f:5b:65:93:9e:49:01:d1:e0:
3c:23:dc:40:09:70:b8:1f:32:6d:d2:b6:73:d7:9f:e3:41:2d:
9c:f9:61:22:69:8d:24:57:d6:79:83:57:ff:82:36:ef:80:11:
08:95:5e:25:9b:ea:50:09:19:0f:70:f9:5b:04:7b:e0:a5:be:
57:75:03:94:79:7c:ee:4f:01:de:82:ff:e1:f2:8b:7f:98:c8:
a9:97:8b:70:b5:b6:dc:3c:53:c0:22:6a:16:e3:96:84:e4:8f:
63:55:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:03:45 2025 by rpki-client