Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: 3q1PVIUyz7M0hDKvOHjDwKehFVl+vk1a3sVC4ZluGg8=
Subject key identifier: B9:5A:41:9B:7B:E5:21:DE:6E:A1:18:62:29:28:D1:1D:D2:89:FC:94
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 0196C3BA177FD076FB8938EAAB1184B01CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 107C
Signing time: Mon 12 May 2025 09:01:14 +0000
Manifest this update: Mon 12 May 2025 09:01:14 +0000
Manifest next update: Tue 13 May 2025 09:01:14 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: EoQS7eWZWyVXKNoGfRiLN9Rqm8FCztE5xpw3X5J7Svo=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:17:7f:d0:76:fb:89:38:ea:ab:11:84:b0:1c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: May 12 09:01:14 2025 GMT
Not After : May 13 09:01:14 2025 GMT
Subject: CN=b95a419b7be521de6ea118622928d11dd289fc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:c4:93:0b:21:25:a2:02:04:33:8f:b8:ba:
fe:22:be:9a:c0:04:73:9c:44:39:f2:34:bb:ab:8a:
b9:28:00:a1:47:7b:89:5d:9c:da:12:86:e4:65:b3:
ef:cf:3d:89:67:0c:6d:d2:8e:cf:f1:a1:66:9c:29:
5e:75:26:62:8f:ad:6d:a7:aa:f9:16:b0:79:af:24:
16:9e:58:58:f8:30:81:03:9e:f6:03:95:74:28:e4:
f1:cb:4b:5e:0c:28:db:94:e2:dd:e7:1e:05:a5:7c:
8e:d1:c4:71:2a:2f:a6:42:f5:60:d2:17:99:18:3a:
7f:58:68:dc:e1:ac:48:23:53:9c:92:b9:3a:e8:6b:
e6:46:69:89:24:8d:70:99:fd:3a:cc:6c:09:94:e4:
f8:30:71:b0:2e:f9:ff:a6:fb:cd:ce:9e:e0:ed:97:
f7:f5:68:10:c0:7d:e6:2d:c6:cf:59:bc:6c:ae:fe:
03:2b:ee:68:2b:c5:41:72:3e:a1:a4:79:3c:0f:84:
db:84:1b:5f:d4:46:13:5e:e7:3e:d3:45:2e:bc:69:
02:b9:f8:1b:92:78:82:d6:e6:f1:60:c7:bb:ad:a1:
09:44:90:52:75:ae:9f:58:d4:7a:cc:da:7a:d9:9f:
a0:9b:e4:23:2b:55:5a:c0:94:b4:fc:e5:0c:8b:ce:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5A:41:9B:7B:E5:21:DE:6E:A1:18:62:29:28:D1:1D:D2:89:FC:94
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:08:a1:42:84:4a:ac:c3:85:49:17:81:86:aa:d4:e3:e8:13:
1a:8c:58:86:b8:82:6f:93:35:d3:9d:39:39:cf:5c:04:17:87:
3d:ee:64:c6:2e:26:98:5e:01:bd:68:6b:39:59:dd:06:a3:e6:
9b:77:c7:64:57:71:b6:5a:22:5a:a7:49:04:9b:15:33:6e:e5:
e3:c6:b2:60:b0:fe:87:ae:26:2b:cf:57:75:a3:a9:13:43:39:
d2:58:fc:7e:4a:b5:62:5b:6a:68:24:07:07:cd:28:12:16:46:
8d:10:db:71:29:b0:86:90:03:a8:7f:c1:24:19:6e:60:4b:e8:
6b:84:eb:e0:7c:0a:e1:55:b9:96:d1:ca:81:f5:de:29:2b:51:
b8:2c:e1:e0:af:4e:34:7f:46:6d:71:0d:bd:8c:33:78:84:19:
8c:1f:de:8c:cd:54:d5:49:49:d5:23:ba:43:51:97:f2:bd:96:
92:be:ee:5a:f8:90:4a:82:9c:ea:ce:05:8a:4a:32:41:80:76:
66:3e:35:41:5c:9c:79:a6:cd:da:b3:4c:0b:b1:84:8d:e2:a0:
6c:93:c8:07:1a:7b:61:fb:19:e1:b8:f4:86:94:55:43:0f:0b:
69:59:35:e3:e8:63:80:77:28:90:88:5d:22:38:30:89:65:30:
42:9b:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:21:48 2025 by rpki-client