Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: Nz6ek1O2HzTwmZIIPW6opslFg4QkUnxQdCjlCbvXBlo=
Subject key identifier: E3:B3:1C:71:64:B5:A3:A3:63:79:8B:BC:B6:15:1A:FA:8C:24:ED:D9
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 0196C2DDEE2259295A32BBC806ED97419538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 1114
Signing time: Mon 12 May 2025 05:00:46 +0000
Manifest this update: Mon 12 May 2025 05:00:46 +0000
Manifest next update: Tue 13 May 2025 05:00:46 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: TKxgns29j9mGvkEkoxpnlQKqwLxB611K6b0+JP9nI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:ee:22:59:29:5a:32:bb:c8:06:ed:97:41:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: May 12 05:00:46 2025 GMT
Not After : May 13 05:00:46 2025 GMT
Subject: CN=e3b31c7164b5a3a363798bbcb6151afa8c24edd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:a2:df:da:a0:c3:5f:8a:10:6d:e7:ff:98:
bf:03:90:7e:86:cd:02:48:97:81:83:41:7f:f0:5b:
5a:fc:f6:02:c3:d7:dc:3a:a7:c9:42:70:bc:cd:49:
c1:60:d6:d4:c2:f3:2b:f3:2e:29:b3:4f:08:d9:f4:
5c:f7:5c:7c:39:c3:c5:e3:53:d7:26:44:20:ce:26:
ab:58:8e:c7:d9:17:ae:e6:2e:f7:d9:9c:a0:2a:af:
19:e9:cb:49:28:36:c1:41:86:7b:9a:5a:a6:64:2d:
ff:a4:5a:b1:00:15:87:c9:e1:6f:16:b9:c9:fc:84:
00:e1:a9:ed:e2:99:b5:64:9d:f4:f2:30:4e:6c:25:
81:cc:66:4a:7f:21:31:d3:8b:61:1b:13:c2:9f:b0:
6b:16:2c:7f:ac:f9:30:2a:ce:4d:0b:15:62:9b:dd:
18:6c:30:0c:92:90:1a:77:54:94:72:4e:51:39:d0:
f1:dc:db:68:8a:a8:6c:ea:b2:d3:7f:18:a0:5f:9c:
3f:0c:17:5d:5d:91:90:ee:12:63:5e:c4:ad:99:35:
a6:c8:47:24:83:36:bc:e0:63:3e:c0:d6:a5:45:b4:
3b:28:ec:3c:7d:c8:8f:48:57:16:4a:a4:3d:ab:fd:
18:4e:fc:f8:2e:a9:36:c3:39:1a:85:48:9f:b2:55:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B3:1C:71:64:B5:A3:A3:63:79:8B:BC:B6:15:1A:FA:8C:24:ED:D9
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:16:c0:46:ef:84:8e:b2:cb:54:ec:e3:1d:c4:ab:98:1a:c2:
dc:91:ea:c2:e8:95:01:d3:a6:bf:e9:1b:c3:5b:f4:c7:69:6a:
28:54:8c:80:05:29:c8:00:e1:d9:7a:d8:83:e4:a0:c3:6b:a2:
bf:dd:55:58:b7:20:7c:e2:4e:58:a3:7d:49:a2:35:bb:47:4d:
d3:34:44:94:53:af:c9:a6:21:96:ce:44:df:2e:a1:66:99:91:
97:3a:0e:b3:35:04:53:fe:6b:66:c2:47:39:c0:f5:ee:4d:a2:
7c:e8:3e:37:43:db:02:ea:28:c4:96:c4:89:73:08:8f:42:34:
f5:d5:fb:95:58:db:05:5c:69:65:1f:08:29:68:46:4d:47:f6:
13:f9:b5:b8:58:b1:f6:c1:5a:d9:e7:34:54:0d:5e:57:32:4f:
27:93:c7:77:ba:6e:ea:d6:19:e2:b9:24:b2:d0:ee:6e:c7:c7:
dd:bc:3e:f0:4f:57:7e:60:fd:12:18:81:3b:24:22:73:51:71:
5b:22:6e:50:c2:58:a6:06:f9:77:24:dd:d7:a8:b3:73:98:a3:
4c:15:c0:46:97:6a:c8:e0:49:63:c1:67:43:33:e7:00:bd:c8:
c6:6c:cb:1a:86:3a:e1:86:32:10:76:52:72:8a:e2:5d:2b:8f:
7c:de:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:16:17 2025 by rpki-client