Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier: 7oUQh657PBm2IHP9yFCkAbjt9YulwD2d+ZF0aSKbNNk=
Subject key identifier: 6C:F1:7A:BE:DB:51:A6:70:9D:62:DB:2C:A4:35:FB:89:73:FC:07:BF
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial: 0196B1EA619BD0A570617C4BA4765FBC2725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number: 0607
Signing time: Thu 08 May 2025 22:00:49 +0000
Manifest this update: Thu 08 May 2025 22:00:49 +0000
Manifest next update: Fri 09 May 2025 22:00:49 +0000
Files and hashes: 1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=)
2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: 2+DRXLd7tBnZyX1/W9oWv82groZL7DoJ6ASA7opYQM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:61:9b:d0:a5:70:61:7c:4b:a4:76:5f:bc:27:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Validity
Not Before: May 8 22:00:49 2025 GMT
Not After : May 9 22:00:49 2025 GMT
Subject: CN=6cf17abedb51a6709d62db2ca435fb8973fc07bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:26:4d:5d:24:3d:a3:ec:1e:cc:f9:6a:0a:
43:78:2c:5b:f4:46:21:5e:4d:3b:11:87:27:ac:50:
2c:c0:38:91:b1:63:5f:de:d8:a5:e4:25:18:09:46:
55:39:13:87:03:a7:13:60:7d:5e:32:b7:61:bc:60:
b8:ff:b6:ef:12:a3:54:9c:9d:5c:2d:b3:06:85:13:
f7:e3:e6:5b:ce:c4:68:56:21:be:d2:73:56:36:e0:
01:85:74:e8:13:c3:f3:90:3d:82:0e:df:88:52:e9:
84:c7:a9:b9:d8:72:a7:b9:64:d2:12:0a:f9:cc:ad:
ea:64:d6:77:20:00:c8:0b:8a:d0:fe:8a:79:d0:91:
e4:2b:2c:10:cb:3f:3b:da:45:78:bc:9c:e2:07:f2:
f0:58:91:44:12:9d:cb:85:c5:b9:c4:d2:50:39:9f:
8c:8e:41:cd:38:41:b7:9a:83:aa:65:9c:80:3c:9b:
63:45:74:93:dd:bb:51:16:ab:2d:cd:93:d1:66:12:
95:d1:f1:4e:4d:f7:65:bf:40:52:6b:32:6f:e6:9a:
e8:90:a1:bc:d0:b9:a0:6c:bb:a3:55:e6:bc:6c:3f:
c7:80:0b:da:3c:6c:82:06:74:39:ba:4b:d9:2b:f5:
5d:78:16:e8:de:65:09:8b:ba:97:13:eb:89:e5:72:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F1:7A:BE:DB:51:A6:70:9D:62:DB:2C:A4:35:FB:89:73:FC:07:BF
X509v3 Authority Key Identifier:
keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:16:f5:80:81:aa:c1:56:76:94:6b:2f:91:ca:0a:25:52:e1:
d0:ab:22:9a:e8:a6:7b:bd:d0:e3:24:08:3f:29:51:55:42:95:
14:ff:cc:80:ee:d8:9a:8e:80:7d:88:d3:f0:5c:65:14:fd:bc:
49:33:cc:45:70:03:94:e6:63:e0:9b:22:5e:bb:8f:26:05:7a:
cf:06:85:4e:99:0a:18:2c:62:11:22:8f:eb:69:1e:dd:43:1f:
f5:c4:1a:55:95:ae:22:03:3d:48:3f:7c:0a:1d:b9:ea:c8:51:
e6:c1:6b:67:bf:26:6e:a2:d1:8e:45:de:01:aa:4b:d7:6e:51:
0b:93:9f:ff:d3:77:cb:d8:0e:7d:4e:49:c5:29:c3:01:46:ff:
8b:78:2a:86:41:3a:85:69:d6:cc:0d:88:85:4f:e3:86:c1:88:
80:84:b7:65:12:a0:0a:bc:96:d1:6c:f8:a5:2b:81:2e:27:d9:
4a:e1:d4:97:bd:b0:45:26:b0:97:ae:83:79:0b:12:00:a5:b2:
ab:c6:dd:37:56:20:b9:3c:56:5e:5b:ad:24:c0:cc:9b:a7:fb:
b5:12:b6:c8:91:92:15:d0:85:d0:98:2c:e8:57:88:1d:79:1e:
8d:41:55:5b:73:ae:48:ef:bc:3d:ea:46:da:1d:1f:7a:46:29:
ad:b9:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:50:51 2025 by rpki-client