Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File: faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier: /AP7SfXMhb8AwN7nCTjoURLxqBQPtw4VzYyoyCwoyQU=
Subject key identifier: 82:A3:A0:35:8C:6B:AB:A0:0E:10:4A:DD:45:95:07:3D:6F:E0:2B:A7
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 0196B9A417FC60311C04C9FC4E0EF57BF2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number: 0D20
Signing time: Sat 10 May 2025 10:01:00 +0000
Manifest this update: Sat 10 May 2025 10:01:00 +0000
Manifest next update: Sun 11 May 2025 10:01:00 +0000
Files and hashes: 1: UmPdXcB87LTnfP1Vg3oW_URaukk.roa (hash: 83EUHwQ3blWBwS3edM/z7UuelSE4PX5MSdHszZ1a7QU=)
2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: I5dKVPDckwbunqkjhtbWocHzqrcE4f9+WBH3nIkr4xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:17:fc:60:31:1c:04:c9:fc:4e:0e:f5:7b:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: May 10 10:01:00 2025 GMT
Not After : May 11 10:01:00 2025 GMT
Subject: CN=82a3a0358c6baba00e104add4595073d6fe02ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:71:05:0e:03:1d:e8:5f:22:5e:34:49:2b:
a1:cc:d0:88:7a:c2:c6:a0:ae:2b:bf:9c:e9:cf:cb:
49:19:fe:75:45:86:f4:ff:e4:51:7d:1e:d7:33:69:
4f:80:be:90:84:37:45:55:37:fb:9d:4a:98:93:ce:
86:1f:2f:9a:9c:dd:88:c2:e3:39:2f:cc:33:27:6f:
c5:41:f2:34:cb:e1:ff:ef:d1:22:40:9a:1c:0c:4d:
0c:48:1b:7b:a3:61:67:78:07:a1:18:7a:46:9c:79:
63:d1:7a:4e:63:f5:7b:67:fe:a7:f5:79:7c:97:61:
4c:58:fe:ac:32:1e:a8:30:06:9a:b4:51:c5:0c:d0:
35:9f:e1:1d:68:37:93:59:1f:d1:94:5a:bd:61:68:
05:25:bc:10:c0:04:9c:4c:08:aa:20:3a:10:60:9f:
08:5b:62:56:89:39:c7:3a:7e:2f:1e:d7:0c:7c:b2:
02:9b:c3:e9:fd:b5:dc:8a:8e:0b:41:d6:41:ab:ae:
d8:08:33:67:61:e5:a7:36:bf:ac:73:3d:f8:bf:ab:
54:e9:d6:83:b2:ad:44:b1:c3:a6:e2:fb:d0:24:cf:
e5:3c:d6:0c:09:f3:f8:78:78:59:b8:17:93:a1:4e:
52:36:03:0f:1c:04:a3:5d:d8:69:0a:f7:37:91:83:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A3:A0:35:8C:6B:AB:A0:0E:10:4A:DD:45:95:07:3D:6F:E0:2B:A7
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:96:bd:0f:51:d7:26:80:4c:56:67:ff:db:9e:27:4c:5d:0d:
8c:5f:1d:25:81:23:79:54:c5:67:aa:2d:ae:15:3e:ba:ce:61:
11:17:56:91:17:74:b1:97:38:8e:78:33:4c:0c:f7:a7:74:1f:
79:3d:a4:29:1c:dc:88:d4:6d:5a:22:b0:15:b1:e6:52:38:ac:
80:11:6a:74:1b:0d:2b:20:70:01:32:ae:de:ef:53:a2:eb:38:
c0:95:fa:06:48:fb:9e:3e:3d:8e:b7:40:ea:ea:0c:9f:ef:83:
a6:eb:a9:d8:68:6e:72:69:b8:a8:66:d1:e1:c8:c8:10:f4:5c:
7a:7d:a6:16:28:a2:7c:d4:76:0f:31:0d:2d:9f:4e:c2:3e:4e:
81:31:7e:26:51:33:48:3c:12:49:dc:f0:4b:43:2b:45:cd:28:
15:65:ea:a8:ea:9c:f0:54:7e:3d:01:cf:d3:59:48:43:62:6c:
98:bc:c3:94:fd:42:23:30:3f:48:57:e2:62:ea:a8:70:d6:92:
f4:1f:98:1f:b2:82:74:1b:f3:38:51:9f:b3:db:66:78:d8:07:
fd:ef:6f:3e:7e:aa:00:cc:ba:75:80:70:8c:e4:f9:3c:07:e4:
9e:05:89:f6:52:32:9a:24:7a:bf:c7:bd:bb:0d:9f:6a:61:f7:
eb:87:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:12:38 2025 by rpki-client