Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: sH6qX2rjgsN/FO0ktlDkTl31103204nL4fAwSTBvArI=
Subject key identifier: 05:77:D7:C7:46:D1:94:AC:FD:BD:60:73:32:4B:24:9A:FE:00:16:51
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 0196AA31316BF176C9E7735630D2A339B3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 0661
Signing time: Wed 07 May 2025 10:01:12 +0000
Manifest this update: Wed 07 May 2025 10:01:12 +0000
Manifest next update: Thu 08 May 2025 10:01:12 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: xoGMq59b5npFy1WC/scFMUzNEzlN2ly1LHVO1a7MSt0=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:31:6b:f1:76:c9:e7:73:56:30:d2:a3:39:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: May 7 10:01:12 2025 GMT
Not After : May 8 10:01:12 2025 GMT
Subject: CN=0577d7c746d194acfdbd6073324b249afe001651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:2c:aa:3f:30:c4:f3:a5:44:44:c0:94:15:
b6:11:00:43:e0:0f:4c:a8:42:32:02:d4:3e:5c:9a:
e6:73:2c:8b:2a:12:3c:be:da:c4:2c:d9:37:dc:44:
73:2b:03:08:cc:06:3d:68:d3:43:c8:c9:6c:49:3d:
13:a1:8c:47:27:84:e8:22:47:cd:55:46:cc:d9:4d:
e7:02:77:a6:40:3a:00:ef:7d:f8:1e:1b:fb:09:fb:
44:5c:ca:c5:4f:f7:c5:dd:17:95:bc:a1:8c:00:c3:
b4:26:06:10:42:e1:91:bf:d3:3b:de:ea:90:22:18:
1b:3b:83:4e:0e:42:cc:fe:58:a2:8c:44:4f:4d:56:
78:67:e2:77:fe:b3:a2:8d:26:a9:41:df:b8:ba:0f:
ae:e5:1d:eb:05:71:59:61:41:eb:f7:c7:61:a2:95:
89:59:ae:66:2e:c4:b7:f6:4e:0f:91:e8:a0:b7:5b:
a3:8d:38:a5:c8:9b:8b:5b:d6:59:5d:9d:66:16:93:
5b:e9:ed:c4:1d:b7:d2:6c:00:df:07:a1:39:ad:5f:
06:00:f6:6e:06:b9:0a:b3:ed:7f:6c:11:64:f7:94:
f7:d5:b6:66:72:26:df:ab:5a:f7:2a:b5:65:7c:7b:
56:af:6b:70:2a:2d:b5:cc:ae:5a:65:c7:18:db:b0:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:77:D7:C7:46:D1:94:AC:FD:BD:60:73:32:4B:24:9A:FE:00:16:51
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:74:c9:50:78:36:c9:f6:ca:b5:4f:79:10:ee:82:f0:c8:49:
1c:81:66:ec:58:9e:20:3a:f7:a5:d4:ed:2b:08:d6:ec:c4:5a:
04:7d:ef:12:75:71:20:12:f6:4e:2f:69:ab:63:68:95:f0:a5:
02:bc:84:53:ff:0c:43:3e:53:64:d1:92:9e:4f:c5:62:35:a2:
29:d0:5d:e6:f9:3b:07:90:c6:c7:0e:06:77:e5:7c:6e:38:15:
aa:d7:f1:84:be:81:fa:84:75:b0:08:fc:94:c3:91:ae:3b:99:
a5:e0:67:35:cb:6c:c4:b4:2b:4e:98:eb:98:43:16:38:76:f4:
34:f3:8f:f1:01:98:c5:31:be:a0:f4:d0:23:ab:a3:52:c8:ff:
ed:be:39:b6:bc:89:48:7b:88:38:f0:38:fb:d2:66:26:92:6c:
1b:35:b4:08:62:1a:03:df:a2:33:1b:12:aa:04:7b:d2:b0:00:
09:0a:8f:49:25:40:b8:ef:91:42:b0:e8:ea:7e:92:ec:fd:7e:
d0:6b:e3:8c:93:fc:e7:b9:47:ed:a2:88:b3:07:25:fa:52:e9:
b5:d2:75:f1:35:65:92:5c:27:12:3d:34:24:d4:51:77:b2:aa:
36:44:36:1d:c7:a6:00:89:b4:a7:77:24:a0:63:43:2d:68:f6:
2a:9b:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:37:31 2025 by rpki-client