Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: qkHchRC887dztx/zoZ/8aOeEHkaOUpSWozMYG4c9tco=
Subject key identifier: B9:33:95:63:F3:D0:EE:EA:D7:81:DE:23:1B:F7:AE:00:E0:B8:6A:52
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 0196CA60B5A5A4D03A58709FBE88E32D3877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 0FAA
Signing time: Tue 13 May 2025 16:00:57 +0000
Manifest this update: Tue 13 May 2025 16:00:57 +0000
Manifest next update: Wed 14 May 2025 16:00:57 +0000
Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: /amV+UhK6YIKOMSC7pKZPSTtAhkckGzVpigJICd5yUs=)
2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:b5:a5:a4:d0:3a:58:70:9f:be:88:e3:2d:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: May 13 16:00:57 2025 GMT
Not After : May 14 16:00:57 2025 GMT
Subject: CN=b9339563f3d0eeead781de231bf7ae00e0b86a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:ed:0b:7f:86:fe:c9:52:28:8b:66:4f:de:
4b:48:ba:ba:3b:b1:76:aa:c3:fc:61:4f:f3:13:9e:
28:e3:1c:41:b5:97:53:2c:d2:07:97:c7:52:a0:b4:
e0:90:68:fc:68:ce:9d:5e:5e:11:59:45:85:79:75:
c4:92:57:83:0a:d1:b4:e1:35:86:14:1d:98:c9:9a:
ad:d3:e0:fc:75:f9:a8:d5:54:b0:e4:13:6e:72:25:
fd:ad:e2:43:c6:ea:3f:c9:0c:ad:f0:bd:fe:55:b9:
3a:b9:1f:57:75:01:20:62:8e:d3:4f:23:79:c7:87:
3b:59:1b:5a:a7:76:54:14:57:a4:e3:76:77:30:02:
de:51:1a:6f:b4:30:dc:fd:b9:cb:4d:57:b9:c7:e7:
45:69:8f:c0:56:b5:31:b8:28:23:73:66:8e:b3:e4:
1c:04:b7:88:b4:48:54:62:eb:df:d9:1a:c4:02:88:
eb:e3:77:13:14:ae:c8:db:1b:9c:03:ba:22:9d:d5:
2d:0e:3f:f6:9e:32:85:e7:c1:10:3d:4a:3f:cc:ad:
4b:76:4f:5a:cc:69:1f:51:2f:3c:7b:a1:0c:11:40:
ea:68:dc:f8:18:e6:64:f7:01:e4:06:43:d4:59:0d:
7c:e1:a4:de:1f:30:46:06:43:2b:1c:86:b7:ca:4a:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:95:63:F3:D0:EE:EA:D7:81:DE:23:1B:F7:AE:00:E0:B8:6A:52
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:1f:f2:c9:00:14:fd:09:f9:d2:42:bd:c9:ca:e4:8d:23:
6d:41:ba:b3:5e:55:96:94:63:20:ed:92:c0:20:5e:d8:b3:93:
33:08:eb:6b:99:33:3a:ea:4f:ab:fd:f9:61:45:2f:20:d5:81:
2f:ad:e2:4f:1b:b1:db:e8:7c:c2:e6:3a:36:68:df:fe:36:85:
22:8a:cb:0c:b7:f9:ca:ed:83:ed:32:d1:e9:3d:6c:1f:aa:87:
ba:3e:af:79:9e:40:d2:18:ef:69:f7:81:63:fd:25:e5:05:59:
e4:5f:3e:28:c0:71:7b:78:c1:e3:08:89:61:e2:5b:67:3a:8f:
05:3b:c3:8f:c8:d1:64:3b:f1:5c:f1:67:fc:99:ae:e8:12:7e:
ad:61:46:3f:3b:3e:ca:91:d5:cb:73:72:ed:2d:a9:fb:4c:d1:
f5:25:13:b8:67:17:f5:8b:af:3b:1d:58:38:ff:2e:fa:76:b1:
c0:2c:68:f2:bc:7f:59:ba:cb:3e:46:44:eb:23:b0:a5:b2:34:
ba:f2:0e:d5:7a:8a:25:34:42:1b:5d:2d:54:5b:fb:ed:cf:cc:
f3:b6:ea:70:01:5c:3e:31:cc:cd:eb:fe:41:89:ce:f0:82:ad:
dd:d9:d8:21:d0:0c:2f:77:1e:e7:4e:05:8b:76:9d:07:39:c8:
f6:97:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:16:49 2025 by rpki-client