Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: QVaOUrDzVpM985XFYhDCRELoGD27LsdfxKioVJh8u28=
Subject key identifier: A0:F8:08:E8:57:E6:EF:B8:50:7C:D6:2A:96:37:E0:F9:C2:53:DC:31
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 0196A19B9966355A05D8CB9E9E048BEE0659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 1436
Signing time: Mon 05 May 2025 18:00:51 +0000
Manifest this update: Mon 05 May 2025 18:00:51 +0000
Manifest next update: Tue 06 May 2025 18:00:51 +0000
Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: HrywYY6q1LgjU6jGCDSx0mTsecakXSosEJxJjh/RfRY=)
2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:99:66:35:5a:05:d8:cb:9e:9e:04:8b:ee:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: May 5 18:00:51 2025 GMT
Not After : May 6 18:00:51 2025 GMT
Subject: CN=a0f808e857e6efb8507cd62a9637e0f9c253dc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:b8:ec:00:f4:5f:c8:b5:cd:54:47:4a:2c:
6a:09:b3:fe:cd:22:4e:8d:35:64:a9:d5:42:16:10:
11:fd:c6:7a:ce:8c:41:7f:64:f5:88:88:32:10:5b:
65:19:5e:9b:57:3f:a9:7e:20:5d:d1:5f:a5:9f:c4:
e2:5f:2b:eb:1b:60:65:c5:ab:56:68:f3:40:36:ab:
6e:63:0d:21:92:45:7f:af:cc:94:15:19:6d:80:f6:
e7:2d:48:0e:88:71:6c:97:86:c4:1d:80:7f:dd:5e:
b5:bd:40:9e:2f:bc:74:9e:c0:93:5b:20:a9:cf:e2:
2b:0f:7c:31:a0:a8:57:52:d8:88:b5:58:40:e3:74:
63:2c:19:19:1e:19:70:66:92:f1:ab:59:3e:ed:c5:
e7:79:23:82:59:66:56:e2:69:ff:f4:85:87:f1:32:
19:6d:75:1a:b5:1b:a2:34:07:8d:1e:fd:5f:e9:de:
e7:ad:84:32:cb:ea:6e:37:a8:c7:65:24:f5:2c:f3:
51:30:83:90:58:aa:b2:d9:2f:64:28:bc:94:be:c6:
9e:db:96:be:ff:ed:15:15:56:5e:2a:a9:e9:d0:12:
24:ee:05:41:6e:ec:45:f7:61:d5:42:d1:ba:00:be:
d4:4d:37:0a:25:81:96:74:25:4f:e7:e9:8d:f3:bf:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F8:08:E8:57:E6:EF:B8:50:7C:D6:2A:96:37:E0:F9:C2:53:DC:31
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:34:db:f4:4c:f1:63:33:7a:40:01:89:4d:eb:98:e6:22:94:
70:20:4e:f4:1e:9c:b6:8b:43:5e:81:44:85:28:e8:10:1f:80:
37:4b:23:53:68:24:9e:66:3b:bd:ca:15:8d:02:7e:e3:42:ea:
90:7b:4b:53:e9:98:67:44:ea:0f:e2:d2:b2:b4:37:f0:eb:79:
48:89:cd:bf:a4:5d:e8:0a:ff:a8:f6:70:65:13:8c:a5:c0:1f:
80:1f:42:fb:16:36:8f:a5:fd:e4:0c:7c:67:7e:55:8b:68:57:
65:93:9d:01:05:a5:16:8a:76:6f:6b:85:77:5c:eb:31:87:44:
21:fc:2c:cb:80:ed:f5:9a:d1:b1:d4:67:5f:3d:fd:91:6f:cb:
4b:6b:61:40:0e:40:b8:a4:28:bd:99:93:55:14:b7:ac:17:8d:
31:4e:e4:0f:1f:48:06:e0:c1:82:94:ff:85:57:f3:a6:8f:7b:
73:a7:72:d7:3a:f6:95:63:4b:cc:50:4d:ec:b5:5b:31:70:35:
2d:8a:9e:23:d0:42:4e:3d:37:5d:bd:9b:8e:9c:64:5b:4c:cc:
03:70:55:8f:b2:83:53:30:60:08:f7:c5:44:6e:16:d6:c1:60:
77:cd:29:67:18:7d:7c:f9:3a:ae:23:bd:64:08:8e:91:a3:0e:
72:6b:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:25:13 2025 by rpki-client