Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: 7aIQ2BOsEtzCoh2/vg6yuV+RkT9iTyNscX37wNCtv+0=
Subject key identifier: F7:40:F3:F9:6E:12:0E:29:FB:C5:8E:1E:E1:7A:4D:8D:72:21:4F:87
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 0196BA48EF32A8B909A5DC6FB4C02D64E71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 1556
Signing time: Sat 10 May 2025 13:01:04 +0000
Manifest this update: Sat 10 May 2025 13:01:04 +0000
Manifest next update: Sun 11 May 2025 13:01:04 +0000
Files and hashes: 1: 1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa (hash: 4fwNFjC/KzIgxsaWUD66CE+7p9ui38GyV7XXtJ3qf8o=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: cW1lJL6u0cg3LVZFX9Vdw2bg0ibbShol9n0VDTboB4s=)
3: azDvVJUoNvYqaEaZIhu9OqWr21Q.roa (hash: JWxoJDpKURHEm1uFBb309inT9x2eVZK63cqhRvZkCeo=)
4: hVN1Qld91f5dBJ9SSDlF23fJ2wE.roa (hash: fB256LdP6wo0MmK8V0JJWIWF+X7CQ/bXWoxB33HPuzk=)
5: jXuJH5XlRjh9NbnahdD8Y6zEokQ.roa (hash: uTge3zTxck7gBX+9co6u8laUzjU+YV+PjrgGrj8fBnM=)
6: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (hash: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=)
7: xWzjOiU4GIbFmqwyeVmah8vO8F0.roa (hash: S4iCzl3PC4M/IRKSKX7IIQOXaSNab8mVow5IXg2rGLA=)
8: xwhEAx2VE0gucAj4mFhYH2uYVFI.roa (hash: nFpFXOMp97LHbzG3/tbWsearfU/sSkX/vvtwwnlnskI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:ef:32:a8:b9:09:a5:dc:6f:b4:c0:2d:64:e7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: May 10 13:01:04 2025 GMT
Not After : May 11 13:01:04 2025 GMT
Subject: CN=f740f3f96e120e29fbc58e1ee17a4d8d72214f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:d4:51:de:96:93:de:54:d4:15:fe:29:1f:
59:b6:93:c7:fc:60:cb:ef:f2:70:a6:30:1f:c3:e7:
8b:2e:55:d1:bb:36:33:0b:20:90:27:4a:37:1b:42:
50:85:2a:68:53:c4:bd:f7:ca:09:bd:50:b3:07:10:
14:40:08:08:80:5f:b9:74:7f:03:b2:53:1c:35:72:
2c:3b:ef:36:97:1e:88:4f:66:60:0b:77:49:95:1a:
93:d6:1e:86:de:12:84:44:c3:36:b2:c1:21:ea:57:
d4:80:7d:9d:c3:64:d3:96:5d:98:71:c6:a5:83:b4:
8a:1c:b8:c9:3b:10:cf:88:9a:77:22:c7:c6:37:1a:
c6:50:b2:ae:a2:64:47:fe:3d:a7:00:dc:ff:6e:7a:
48:3d:90:87:90:d4:60:fc:f4:36:60:64:b1:aa:b4:
fe:ee:08:c1:8e:47:b3:65:61:4e:74:40:2b:fc:e1:
89:3d:69:0e:b5:49:a5:c9:24:62:e1:0e:41:45:9d:
4f:4e:b7:0b:bc:9c:1a:1b:76:f4:23:71:af:b5:0c:
ff:c7:4d:b0:62:ef:bf:32:da:3a:bb:7c:a3:03:49:
54:da:5a:77:d4:09:a6:7f:cd:74:f0:ad:da:5e:9f:
6e:97:82:67:fe:c1:76:2c:aa:2e:64:4b:18:5f:47:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:40:F3:F9:6E:12:0E:29:FB:C5:8E:1E:E1:7A:4D:8D:72:21:4F:87
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:94:4e:3f:11:5f:1d:89:fb:ed:d9:87:df:4f:e7:2b:3f:c3:
8a:f8:ff:19:0c:48:a5:7f:16:f6:48:1d:b9:9e:f2:7a:79:11:
10:9b:cc:d6:93:2f:ee:92:a3:a5:ae:28:19:2f:e8:36:a8:e0:
bf:22:08:0b:11:c4:e7:ff:9e:73:a1:27:c0:02:84:53:df:4f:
b0:54:82:3c:95:ff:33:81:4d:7f:ca:7a:fa:c0:86:8d:3a:f0:
c3:64:22:9c:ad:90:31:e6:a0:76:8e:ae:d4:0b:38:93:04:39:
97:54:0b:31:12:c9:c9:e9:e6:42:05:1d:44:1c:35:4e:fc:ef:
26:58:6a:9e:61:46:4a:52:72:17:b0:e2:dd:6c:d0:75:94:42:
07:f6:ed:7b:f1:01:43:e8:b0:37:64:b5:64:19:dd:07:9e:c8:
57:4f:74:ff:b8:dd:b1:ec:15:5b:ec:9e:27:18:7c:e8:f0:bc:
56:05:8d:2a:b1:9c:e8:9b:5e:3a:2c:c0:e3:98:8c:54:55:8c:
36:85:c1:c7:12:5f:86:fd:25:7d:ca:7c:72:d2:fc:34:1c:8e:
44:cb:1c:dc:40:67:00:df:03:31:f2:9d:e2:ad:11:36:3a:44:
2d:4b:63:4e:30:40:8d:b2:db:42:5d:15:75:bb:5e:47:df:b2:
f4:f9:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:46:43 2025 by rpki-client