Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier: zYVpOnGZBDEQrAaXylP3N84Ms/S75rhJepP08E4HVRg=
Subject key identifier: 04:A9:6F:A2:4F:B8:2E:1B:57:48:1F:7C:60:E5:4F:CA:2F:CA:9F:6D
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial: 0196BECA3A75575F62A0952F1B87F6E0951C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number: 0164
Signing time: Sun 11 May 2025 10:00:46 +0000
Manifest this update: Sun 11 May 2025 10:00:46 +0000
Manifest next update: Mon 12 May 2025 10:00:46 +0000
Files and hashes: 1: fySblURiBoP5SziKdVGmimST7RI.crl (hash: MrTMdJV82MG/MC1wuCn875VNCuzbrt0gA+7PMQtT60s=)
2: h7ETLfyQmL_b22CUnmqfJbv8XcU.roa (hash: GvscP45iqYd2rs4fdmtdGUU7bJ6EyKUaKDdAzQiywgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:3a:75:57:5f:62:a0:95:2f:1b:87:f6:e0:95:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
Validity
Not Before: May 11 10:00:46 2025 GMT
Not After : May 12 10:00:46 2025 GMT
Subject: CN=04a96fa24fb82e1b57481f7c60e54fca2fca9f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:35:ef:d3:64:64:d6:ea:64:6c:56:97:a1:
1c:59:06:c4:12:95:06:d4:e1:62:ee:90:a2:eb:c0:
23:8e:87:6b:26:59:53:76:3c:2b:0f:e6:88:f8:86:
92:3f:4e:bb:77:50:5e:3a:1d:6a:b5:91:12:f9:ab:
a2:1f:50:c1:f0:2f:15:3a:f6:ae:a9:5f:5b:2d:92:
52:06:2e:cf:6a:7a:1f:79:8c:39:d2:ca:8f:ff:5f:
63:6d:87:ba:16:ec:f9:f2:7d:fe:d0:7e:d5:f3:42:
6b:ca:02:5b:8b:e5:26:d2:cd:f9:c3:3b:73:2b:de:
bd:b9:f1:df:f4:47:47:80:38:79:22:aa:81:bf:d9:
f5:7a:43:c2:b7:0e:37:4b:39:86:e8:41:8c:9a:70:
56:85:0e:64:a7:99:d2:f0:72:93:f2:59:af:37:b9:
98:84:5d:bd:b2:e8:f9:2a:cb:4d:8c:3e:2e:0a:5c:
0a:d2:71:3c:b4:12:cf:7a:d1:4a:18:90:8e:7d:53:
c7:1e:af:2e:bb:f2:d1:f6:d1:b9:ea:5b:1b:35:61:
37:28:07:ef:bd:6a:35:a5:6a:d9:cd:f5:ad:0d:ac:
c0:61:de:21:3f:75:f6:3e:48:dc:21:d5:b6:bf:9f:
f6:b4:46:e2:93:a6:86:72:23:b5:6e:05:cc:a0:b9:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:6F:A2:4F:B8:2E:1B:57:48:1F:7C:60:E5:4F:CA:2F:CA:9F:6D
X509v3 Authority Key Identifier:
keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:e6:f2:75:54:76:76:ab:d9:7a:7e:36:57:bf:21:bf:a3:
8a:1d:48:c1:a9:5b:9d:28:50:a0:bf:35:10:ca:d4:97:93:4e:
ba:2a:48:70:20:5c:92:fc:c0:d8:77:50:e3:92:f1:6b:5b:86:
b6:22:96:0e:cd:a0:fa:9e:cf:ae:92:a8:d4:77:8b:51:e2:99:
b8:ce:c1:c0:68:4f:ae:f2:c9:e8:71:a6:82:91:3f:0c:3e:07:
c9:61:f7:43:c5:db:6f:d2:7a:02:42:68:e1:7b:06:16:61:c9:
1d:2b:ab:17:00:99:14:26:ae:28:47:e7:ee:77:00:da:89:43:
3d:df:e1:8a:d3:39:7e:75:97:86:0c:51:f6:5c:42:8b:26:93:
bc:3a:c4:1e:c9:a8:43:8d:4f:7c:ed:29:db:7e:4a:88:bb:f4:
4a:be:15:1f:05:e2:26:bd:32:ce:9d:98:af:fc:96:9d:39:48:
0f:55:36:88:54:8b:26:0f:72:73:e4:22:c5:f1:e9:25:66:80:
ec:f5:0c:a1:a0:c4:d0:63:a1:f0:e9:b6:64:01:73:9e:41:92:
5c:8e:3a:3a:f0:76:3a:f1:4a:5b:80:a3:f6:42:f5:e0:65:a8:
13:f6:b7:9a:4c:55:2f:08:2a:38:85:ef:02:20:35:1a:c4:e2:
df:5a:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:14:02 2025 by rpki-client