Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
File: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft (raw, json)
Hash identifier: e6q7YJ7psVr0mthuCb5xjyJfWmpw5Z6llMFKvdVPAlM=
Subject key identifier: 44:F3:72:3D:21:C3:78:F8:BB:CA:EB:6E:20:F0:72:0C:F1:24:FD:78
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 01969D87A4A5C74B42881555CE8D82B3F414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
Manifest number: 152C
Signing time: Sun 04 May 2025 23:00:34 +0000
Manifest this update: Sun 04 May 2025 23:00:34 +0000
Manifest next update: Mon 05 May 2025 23:00:34 +0000
Files and hashes: 1: 3KUq_UtAlAJJlZN5IvjwrjZ47dM.roa (hash: bj9EPm/Zl9VNqii4xedVhy7HdLZBWsFZ4Eeye1T5m3A=)
2: W2BuG8RslZuNWC6TDHZNFeUTCEY.roa (hash: +B77DKlelA4p5jWRpiPjtjH8suz5E4rMKyxyDqtqToM=)
3: btWfzHoqqvCj7SwksK3sEa_GGss.roa (hash: 35nmBZjfYPLc1DjqtenJ/YTwHQyVVKy8N+n70T+IfxM=)
4: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl (hash: oEm3lMSSezHKfgTc6m9R+xW82W8yMOZTMoR6gANK5Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:a4:a5:c7:4b:42:88:15:55:ce:8d:82:b3:f4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: May 4 23:00:34 2025 GMT
Not After : May 5 23:00:34 2025 GMT
Subject: CN=44f3723d21c378f8bbcaeb6e20f0720cf124fd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:d1:43:52:d9:7d:fd:78:7d:e7:24:e9:49:
b3:b2:9b:b3:cd:96:be:e2:ef:fb:a9:bb:68:3c:b4:
1c:a9:74:33:93:ab:5d:38:44:16:51:99:26:03:c1:
8e:fd:e3:e1:9c:e1:65:58:88:f6:7f:42:1f:c2:98:
63:40:2f:23:c6:20:cc:04:71:0c:e0:68:db:7e:3c:
3f:38:97:3a:47:6e:f6:8a:e3:f1:85:78:0b:fe:0c:
6e:2f:e4:6b:1e:5c:9a:3e:81:f1:a6:76:9f:c0:64:
af:32:89:69:40:10:1e:82:62:6f:d7:08:c0:f7:d8:
e5:9b:6b:82:11:6b:5c:8a:b8:41:e0:9f:6f:0f:d3:
2b:6f:33:55:99:c8:03:0d:e1:4e:6f:40:f4:6e:20:
45:21:de:ed:af:2a:49:41:61:09:bd:f6:0b:30:e3:
39:e9:c9:5b:dd:b2:8c:51:7a:0c:9d:32:33:9e:2f:
a0:b4:82:2f:cd:b2:d9:47:91:7e:ac:7f:35:d0:e4:
fa:02:47:4f:b2:93:31:2d:9b:fb:34:da:65:2d:82:
14:7a:e7:52:33:17:c3:b2:79:68:39:36:c1:da:bd:
92:48:4d:a1:a9:6e:e8:02:9c:d2:73:64:3d:e2:4a:
06:bb:b7:24:22:5c:c7:3f:a6:c4:ed:6b:04:67:ca:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:72:3D:21:C3:78:F8:BB:CA:EB:6E:20:F0:72:0C:F1:24:FD:78
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:f3:42:69:a5:06:4b:f5:90:85:d8:1c:98:d3:d1:f6:0b:
bc:04:cf:56:3d:c0:6b:10:e6:ce:0a:dc:22:37:2d:20:3f:95:
97:1f:39:c0:1e:78:76:c0:db:08:6e:af:11:03:e9:17:27:ed:
5b:c2:a8:8a:d4:56:08:f0:4c:2a:17:5f:d6:d4:4b:77:b1:e2:
eb:86:f5:c9:3b:94:73:9b:0e:99:5b:6c:38:4a:49:95:b3:cf:
be:6c:3a:4d:f8:db:b2:c9:e4:03:58:c3:2a:a8:0e:d7:96:04:
08:65:05:4d:83:54:e4:ec:e2:45:c6:17:d9:29:a3:4d:02:7d:
43:22:86:f0:56:13:82:92:76:4c:44:da:28:05:db:74:e5:fe:
37:ac:06:d4:ff:a8:84:5b:f9:04:d3:11:4a:17:fa:5e:43:26:
21:c9:f7:9f:90:a2:0f:55:e4:1b:43:d9:64:9c:ac:3f:64:b3:
6e:b5:c3:da:a1:81:c2:22:71:24:60:6f:0f:12:81:69:d0:8d:
d8:2b:79:d9:a6:be:7d:c0:5c:a0:10:ac:cf:3a:d5:27:04:b3:
a3:05:c0:fb:44:79:3f:ce:87:3c:7f:9c:d3:fa:eb:86:0c:9e:
62:07:ce:19:2d:dd:3c:97:da:ae:b1:08:9f:d5:15:78:b2:7d:
aa:95:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:46 2025 by rpki-client