Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier: wTE0JNNiW8NA78bUgTGab90o5MRGs74p8uE8V4MeZUU=
Subject key identifier: 20:00:77:7B:FE:B9:C0:E2:95:C0:1B:3D:9A:8D:F9:19:18:C3:5D:6D
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 0196C728771A4E1F599F1BC988C734A48FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number: 12C4
Signing time: Tue 13 May 2025 01:00:40 +0000
Manifest this update: Tue 13 May 2025 01:00:40 +0000
Manifest next update: Wed 14 May 2025 01:00:40 +0000
Files and hashes: 1: Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa (hash: BIdys9GlZzlGys/T7bq6Tcptb5M/oc7ReQGRtjoEJCs=)
2: TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa (hash: G+x6DV9h2vgaW8F6rPRXljn5SD+izN1YCHl7dux4srI=)
3: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: tMmsFvY9BqZC0ChL9OZLLXFfvRiBLYtl7xwE7+nsHsM=)
4: saUKT6D6bfZZPO38YMOF0mTQhqs.roa (hash: yp3Hci3AL4Pw4TRERBpmO5GUDFOXjceWniFUMKPDbyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:77:1a:4e:1f:59:9f:1b:c9:88:c7:34:a4:8f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: May 13 01:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=2000777bfeb9c0e295c01b3d9a8df91918c35d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:ce:3d:cc:ff:82:e5:b1:0a:e2:66:12:cf:
56:11:9a:08:e8:60:4f:7f:6b:06:d1:09:aa:ca:c4:
cd:71:45:e0:1e:af:b5:f9:4e:75:11:06:aa:8f:3d:
20:47:11:e6:b0:0a:f8:30:0b:6f:db:db:88:83:52:
f6:11:85:89:ad:fc:81:7a:58:6b:c2:2c:48:64:7c:
5e:78:1c:3e:4a:1f:d7:94:fd:52:f6:5b:40:d1:f9:
e1:09:ba:d3:6f:db:0c:06:93:96:4b:9d:68:1f:26:
8c:76:dd:5d:7f:07:2a:75:4d:e7:d6:58:40:60:46:
1c:29:40:62:23:26:33:aa:83:89:eb:51:f2:d7:4b:
30:1d:80:fd:c4:56:ac:db:ba:8c:04:49:9c:2f:31:
7d:61:46:40:6c:4b:b0:11:fe:e5:66:83:46:9a:c8:
7b:01:3e:73:10:5c:25:92:a4:58:de:dd:59:6c:b1:
73:a7:a9:5d:75:39:db:c6:19:c6:2a:59:47:06:ba:
9e:71:a0:31:9b:e4:7c:04:9d:9e:bf:b8:32:88:80:
94:00:99:51:bc:ed:65:06:bf:c4:13:ad:ec:fd:b4:
6c:81:83:fd:db:d5:8d:c5:fc:2b:db:be:ef:ab:dc:
de:d9:dd:c5:b0:c2:ad:82:1b:fc:70:48:a0:67:7f:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:77:7B:FE:B9:C0:E2:95:C0:1B:3D:9A:8D:F9:19:18:C3:5D:6D
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5f:e6:d8:0a:5e:09:1d:21:1b:eb:c1:54:f0:30:de:a6:11:
73:e1:0f:11:14:6c:a1:a1:61:dc:75:81:af:70:dc:7a:89:9a:
0f:e9:f7:5e:0c:ae:7f:d9:78:88:07:b3:14:aa:82:de:65:e2:
8f:1e:29:7b:da:33:7a:25:74:1d:24:5b:dc:f4:68:1c:8a:32:
4a:2a:73:51:0e:72:60:95:88:aa:c7:ed:d0:1a:d2:58:a3:7b:
19:ea:08:e9:16:86:cf:8b:31:0b:6e:32:53:14:dd:b6:0a:0a:
d6:62:f0:d0:ad:48:5c:0c:76:0b:d1:15:2b:29:7c:86:ad:f4:
06:67:1b:70:cf:9a:bd:d7:19:1c:4b:ea:dd:17:ec:6d:35:b0:
d5:97:08:50:28:67:5a:8a:22:fe:bd:81:eb:65:73:1a:78:55:
3b:0c:d4:30:61:7a:76:12:84:6a:16:72:ee:6a:fb:00:a3:1e:
7a:75:b6:31:c1:8b:09:8f:e0:42:36:6c:a8:87:e0:fc:97:a7:
82:55:75:82:78:5f:e4:58:4a:4c:91:de:9d:c4:9e:88:b4:c0:
de:9f:3b:59:78:5f:e3:f8:bd:b2:5d:57:ab:16:01:70:d0:fb:
8d:4a:dd:cf:8b:ad:a0:df:b2:93:73:e3:49:58:67:df:dc:d7:
33:7f:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:18:36 2025 by rpki-client