Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: sTb5dcJ5EftuUkudzkuVUUPLmNdo3EJZlZ8PZ6Kityk=
Subject key identifier: B7:72:9F:3E:6F:68:59:14:E5:10:17:98:B4:7F:67:2E:B7:7C:E3:BA
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 0196C3B922727050A7BE19E08F54380092E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 09FE
Signing time: Mon 12 May 2025 09:00:12 +0000
Manifest this update: Mon 12 May 2025 09:00:12 +0000
Manifest next update: Tue 13 May 2025 09:00:12 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: MsgG5Nxq6vw/JR7GQyT8YUhmrJ+G2CsbOF3soGrUpnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:22:72:70:50:a7:be:19:e0:8f:54:38:00:92:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: May 12 09:00:12 2025 GMT
Not After : May 13 09:00:12 2025 GMT
Subject: CN=b7729f3e6f685914e5101798b47f672eb77ce3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:6e:ec:d1:d3:ab:f4:a3:7d:88:99:f9:af:
e0:6e:71:6c:04:76:41:d5:c1:68:27:04:e9:77:f9:
e9:79:d6:2e:68:38:a2:96:a3:94:f0:cf:97:9a:52:
bb:ae:95:cf:e0:c9:30:b7:22:54:df:74:5d:19:a0:
d9:5c:1f:60:d5:5a:d4:2d:e4:92:a3:bb:8d:2e:36:
b4:6e:53:7a:6c:03:23:fd:9f:10:fb:e4:6f:b4:cf:
ed:5b:d8:7c:6a:10:11:45:c6:62:86:4f:cc:79:68:
f7:64:ab:04:95:31:20:99:ac:13:16:27:e2:a0:6e:
c1:b5:85:3a:1c:74:69:c1:0f:2b:8b:ad:7f:a2:d1:
05:2a:24:66:b3:44:d0:8d:5d:1a:ac:7b:d5:fc:ba:
8a:24:78:e7:b9:35:02:80:c1:cc:d4:f5:82:a9:a0:
cb:47:b3:12:af:b7:99:ad:5b:11:cc:b3:36:c8:be:
ab:78:66:ca:64:9a:97:38:d1:d3:9f:2c:49:6d:4e:
9a:15:75:49:91:27:aa:9a:06:0a:01:fa:86:86:ca:
d8:8e:ec:7c:ad:30:c2:96:b6:8a:86:a5:08:a9:6c:
e1:e2:8d:a7:86:11:1e:a8:ed:76:71:c5:73:26:da:
e2:03:c9:95:7b:77:5c:c3:9d:40:9a:06:d9:8b:67:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:72:9F:3E:6F:68:59:14:E5:10:17:98:B4:7F:67:2E:B7:7C:E3:BA
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:48:73:dc:2d:aa:cd:21:d5:d9:58:9d:2c:6c:68:fa:9a:b0:
d9:f1:c0:05:d3:22:7d:e8:7e:b6:d0:1c:8e:d5:9c:80:bc:ff:
1c:6e:d0:c7:35:c9:2f:ad:c7:2c:cf:eb:46:cb:81:37:3d:a2:
f7:e9:54:e5:4c:d0:e6:8c:e9:c4:47:39:d4:9c:8e:b2:93:bf:
a8:45:4b:b9:28:b7:25:07:a9:36:16:4b:11:05:ba:f8:e1:c5:
c2:46:8d:16:47:c5:6b:a5:24:e6:d0:65:47:67:66:b6:90:e2:
a3:28:a3:3b:bc:26:e6:b5:e6:99:c9:9a:49:dc:72:7c:5e:b7:
7e:80:8d:9e:5c:75:e5:37:9d:ca:10:25:b6:b0:58:0e:9f:6f:
b6:7f:29:86:22:8e:77:1d:e0:1e:75:75:dc:c5:bd:59:89:fc:
97:a6:1f:f5:c7:1b:ce:76:40:81:ff:17:c2:3e:a7:b5:23:49:
13:c5:11:03:86:3e:93:bb:69:06:bf:e6:87:07:33:0f:78:5c:
a1:dc:9c:1c:5c:b8:d9:a9:3c:c5:78:1e:53:7b:75:8f:da:ac:
e9:ee:36:f8:a2:61:21:0e:3c:0a:40:2a:cd:8d:69:66:8c:a4:
2b:57:19:58:20:a6:e1:1c:d9:1e:66:4e:bc:35:ab:71:46:fb:
90:bc:f2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:54:39 2025 by rpki-client