Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: Xz/83MpFBl5Qtl9PvCfXBEF7ixKaCPW+jE7e5G69i38=
Subject key identifier: 77:EF:94:C1:06:F9:26:14:B1:CE:67:12:5E:B7:EE:0D:6C:40:D9:12
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 0196BAED383C586C7F048FCAFB791BF819BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 0FF9
Signing time: Sat 10 May 2025 16:00:30 +0000
Manifest this update: Sat 10 May 2025 16:00:30 +0000
Manifest next update: Sun 11 May 2025 16:00:30 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: bd3lGFW57kc7vyVF6snZvIlecTAy1eBQwvJpWIAiLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:38:3c:58:6c:7f:04:8f:ca:fb:79:1b:f8:19:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: May 10 16:00:30 2025 GMT
Not After : May 11 16:00:30 2025 GMT
Subject: CN=77ef94c106f92614b1ce67125eb7ee0d6c40d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:fa:0f:3b:f8:15:aa:c5:79:aa:91:53:3f:
e4:10:28:27:77:52:7a:e7:80:03:bb:49:1f:d6:28:
a4:11:6d:94:5e:ed:50:d9:8f:76:6a:bc:d6:55:be:
d7:38:93:71:85:6f:8b:24:94:4a:86:3d:1f:a6:af:
cf:dd:48:17:30:63:45:b0:7f:1d:71:20:db:1f:65:
52:f0:6c:82:81:0d:84:e5:ac:ab:be:dd:ce:89:ea:
08:20:a2:28:ad:48:29:2c:b9:e5:b6:1d:25:a0:3a:
c6:47:d6:17:c4:e3:4f:6e:9c:c4:e6:b8:83:ed:3c:
3d:48:c2:cd:2c:ef:d4:46:53:81:eb:78:20:b9:f7:
79:25:97:fd:85:0b:f9:06:36:c8:77:5d:78:0b:81:
87:12:bc:97:45:11:90:97:14:a1:4d:5c:c9:2b:64:
e5:2b:f9:07:87:1e:81:1a:08:6f:cc:a0:4d:c4:d6:
75:57:9d:a5:3e:b2:a2:d1:f3:77:ac:1e:8e:bd:a4:
99:87:de:f5:17:23:e7:fb:7e:e2:49:c9:c0:e8:7a:
ed:94:27:75:60:f5:cf:9d:ae:e2:0c:ea:df:e8:3f:
02:80:24:cb:5f:a9:3f:17:5e:50:7b:07:a6:c5:62:
a8:8e:77:17:94:af:74:6d:1d:67:29:59:34:30:9a:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EF:94:C1:06:F9:26:14:B1:CE:67:12:5E:B7:EE:0D:6C:40:D9:12
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cf:0f:81:06:82:1a:89:40:50:75:3a:36:4e:4d:5a:8e:56:
7f:d9:99:9c:19:10:29:5b:ad:d2:95:b9:1d:db:3a:65:23:7c:
d1:ef:7f:17:d7:c0:73:2b:a5:4e:e0:eb:46:c5:97:bf:ff:1b:
15:13:3c:35:c6:0d:da:63:65:9d:e9:e4:a9:78:15:a9:d3:1a:
1e:4c:d6:70:0a:c4:c8:5a:5c:63:2b:91:41:ce:39:cb:b9:17:
1f:05:db:1b:a3:a2:34:26:67:33:eb:86:93:c8:f5:14:88:84:
ba:8f:dd:92:49:85:db:28:8f:11:06:0a:13:2c:04:d0:5a:db:
28:86:db:10:6f:02:f3:45:00:ad:d5:94:6c:2d:dd:99:6e:90:
0a:7b:e2:a6:38:ef:90:98:04:7c:19:3f:b8:be:1c:70:1f:cd:
93:22:f0:db:8e:10:e2:ff:48:fe:4e:90:b4:59:88:93:10:94:
8d:b0:5f:82:b3:dc:c8:1e:57:97:4f:f6:de:9b:46:2d:2f:b0:
29:f1:51:8e:2f:64:20:fd:f8:e3:42:70:3e:92:aa:fa:7f:97:
93:63:8d:e7:dc:7a:33:75:1e:9f:6a:e8:86:7a:91:aa:03:ed:
80:91:9e:ce:53:8c:d8:bf:bd:5c:df:14:3a:29:c2:c7:87:15:
a9:2d:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:56:32 2025 by rpki-client