Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: 9vcygCLOipbHVkKUkQeB5I+aXWwlQL+H+7twxaU2VkU=
Subject key identifier: D6:F6:7B:EE:70:F1:5F:39:F2:03:BF:97:9E:55:61:9A:32:D9:97:A5
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 0196C2391FA6056DCBF5CF9B901BE9316981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0C1E
Signing time: Mon 12 May 2025 02:00:45 +0000
Manifest this update: Mon 12 May 2025 02:00:45 +0000
Manifest next update: Tue 13 May 2025 02:00:45 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: AUZAOf8CuO280u9itGYeCLOswRAXo4nutGpzWU8l9fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:1f:a6:05:6d:cb:f5:cf:9b:90:1b:e9:31:69:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: May 12 02:00:45 2025 GMT
Not After : May 13 02:00:45 2025 GMT
Subject: CN=d6f67bee70f15f39f203bf979e55619a32d997a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:78:1d:cb:ee:a8:0f:6a:f2:25:5e:f9:de:
4d:cf:0a:84:86:cc:1b:76:81:34:12:50:30:67:37:
0f:0e:85:3f:ea:1b:3a:fd:54:18:de:32:09:0e:41:
34:e9:f2:57:ec:4d:ce:68:8d:16:41:38:e6:cd:e4:
6a:7f:fe:60:db:30:60:e3:9f:94:bf:7f:7a:65:71:
84:38:d5:a6:e1:c5:ee:ec:6f:93:14:96:af:ad:00:
cf:ec:3a:17:e0:52:74:f8:a3:e6:bb:49:21:7b:fd:
14:a0:88:d6:a7:d3:d8:77:1c:df:7c:69:5b:0a:f2:
42:36:29:8a:fd:e8:80:67:d2:3e:70:61:06:d2:9d:
10:77:c2:2a:3e:9f:d8:93:cf:28:ce:8c:e8:a6:46:
c8:a4:4d:5b:b0:0b:e2:e3:6f:4d:a8:55:2b:52:54:
1f:24:1c:77:e9:10:41:35:57:5d:6c:3b:e9:05:00:
9e:10:e8:3e:a1:a1:15:93:10:e4:89:8d:08:45:c7:
73:1c:ec:a5:d1:ad:9b:b6:ad:22:80:2e:38:ae:5d:
ac:02:d5:59:82:be:28:49:35:07:e8:0b:a8:05:d2:
c0:6a:b9:24:b0:7a:cd:85:f3:f7:64:5e:b3:57:06:
10:89:ca:5d:aa:cc:d4:fe:95:df:bc:75:d0:e2:3c:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:7B:EE:70:F1:5F:39:F2:03:BF:97:9E:55:61:9A:32:D9:97:A5
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d7:5d:fb:81:88:99:28:7f:81:5d:b9:49:e4:89:4f:e6:1a:
42:d6:e6:ca:82:af:a2:c4:22:ed:35:eb:ba:60:d7:29:d3:45:
59:6f:c9:d7:e2:e5:b8:20:f8:f5:62:a5:f1:b0:6f:85:46:cc:
6f:50:d3:b6:06:84:32:ba:84:17:97:e1:5e:21:71:ee:73:8e:
d9:54:55:c8:c2:01:db:67:4f:f1:73:58:7e:7a:3b:94:df:91:
0a:09:ee:cb:92:48:de:f9:98:f5:54:9c:13:6c:0e:ff:33:34:
05:ea:7c:31:74:90:13:8d:6e:32:35:f2:75:6f:f4:74:76:f5:
c6:c7:c7:78:0d:7e:d0:de:81:e4:80:62:7b:50:fc:40:c9:08:
c2:78:33:64:aa:25:81:69:cf:b7:a0:e9:bd:85:6a:0e:c1:8c:
7a:5d:fe:75:89:ee:55:08:e2:0f:2d:9a:92:8c:29:85:a9:8e:
15:a5:a7:9f:54:14:34:25:f4:86:f2:96:af:20:9e:fd:f6:9c:
1c:14:13:41:b9:de:d5:f6:3a:f8:15:81:c9:28:07:8e:c3:38:
5e:2d:ad:9e:d1:ca:3d:8a:37:bd:d8:21:73:bb:eb:0f:2c:9d:
c2:07:44:72:c8:6c:b1:ab:0d:20:5c:96:ca:9d:ae:e6:33:a2:
ab:e0:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:49 2025 by rpki-client