Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: Q0ie9Lq8lxP+DfIcl+4LM3YeFX4nEVUq24M8XCguO3M=
Subject key identifier: 40:43:64:10:E3:30:64:FB:39:34:48:7F:0F:EC:4B:94:C1:D1:7C:3B
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019658A6B2ECA68AA647A857649DA820868C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 05
Signing time: Mon 21 Apr 2025 14:00:41 +0000
Manifest this update: Mon 21 Apr 2025 14:00:41 +0000
Manifest next update: Tue 22 Apr 2025 14:00:41 +0000
Files and hashes: 1: F3DOLE5K3SRI-yftGoL776n2Pc8.roa (hash: Co0i7Guux1tIvlPJLEcDQZQenNX80PwFKntZNjYzEKI=)
2: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: +S0mHKszsDOKhIM+xaymiN35Rc5pkaDHMQF6W8NMBaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:b2:ec:a6:8a:a6:47:a8:57:64:9d:a8:20:86:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Apr 21 14:00:41 2025 GMT
Not After : Apr 22 14:00:41 2025 GMT
Subject: CN=40436410e33064fb3934487f0fec4b94c1d17c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:10:64:e8:ae:d2:b5:fd:b6:df:86:39:7b:
8c:34:b5:fb:32:6b:12:d8:51:2b:01:3f:3d:f9:61:
af:bc:b0:f4:e4:49:93:ce:6b:6a:ad:35:5d:cb:8f:
0d:3f:9f:54:a1:b5:3e:be:fe:f9:b3:06:34:2b:5a:
5b:0c:14:e2:7b:71:d3:dc:01:ae:d4:5a:1d:3d:00:
aa:76:c6:82:66:47:3d:d9:df:bd:76:fa:5f:1a:83:
08:72:cc:7d:54:4f:7f:9d:4d:6b:8e:c9:64:3b:5e:
4a:b6:00:49:83:f5:7f:b5:c0:cc:e2:c2:a1:66:bd:
7c:88:e2:2a:57:9c:2d:aa:65:7b:dc:bf:6f:44:82:
99:ce:73:64:00:2f:0f:e9:e0:91:d3:17:05:28:7b:
0e:93:7b:7e:d1:7b:f7:b0:2a:e1:c2:0b:3d:fd:08:
0b:1c:45:ff:3c:d2:91:33:e3:b7:6c:76:2e:94:51:
39:11:94:f5:d0:7c:e6:4c:ae:b3:4d:80:e9:f6:f6:
ee:6b:12:07:97:21:e7:fa:98:53:27:1f:2f:79:94:
0f:98:c7:40:d1:87:80:81:a3:c9:f6:e7:c1:36:7e:
49:d0:37:7a:90:ec:42:b9:cc:29:19:0e:27:d9:14:
df:d8:d1:e0:47:72:72:75:1b:bc:08:ba:c6:f5:64:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:64:10:E3:30:64:FB:39:34:48:7F:0F:EC:4B:94:C1:D1:7C:3B
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cc:09:52:3c:37:24:51:46:e5:9b:41:c8:b0:3b:34:22:75:
34:72:9f:b3:1e:93:e2:02:14:e1:c8:55:77:c6:83:fd:c1:a3:
3f:ad:2a:f3:9d:b1:95:10:54:63:83:8d:bc:93:5f:c9:86:ba:
2d:2d:97:50:de:77:6c:b7:35:f8:06:ed:d3:01:6a:72:94:93:
b2:c3:0b:b4:8b:6a:b9:6d:fe:3c:ea:28:9c:c2:0d:ee:53:3c:
c1:78:53:b3:48:b7:98:c6:5e:8f:7c:10:ea:11:5b:e4:b4:4f:
cf:2e:98:2d:71:21:37:02:72:c0:1a:1d:72:e6:4c:3e:bd:37:
c7:5a:e0:f4:8a:4a:9b:c3:ad:57:8a:31:b9:56:96:50:97:55:
89:a5:1a:32:6e:de:75:a3:cb:32:9b:8b:d8:d7:53:4f:ef:3a:
6a:ad:ea:81:f9:3e:49:da:22:2b:20:bc:5d:51:6a:f4:e9:f1:
c1:89:91:4c:62:78:6c:b8:0d:00:21:8f:bc:bb:fe:53:bb:12:
4c:ae:31:a1:bf:1c:3c:4b:71:0a:24:24:9c:66:29:7f:38:3f:
9c:53:a6:ff:e9:77:41:c4:de:ea:c8:53:3e:33:82:16:f4:cb:
62:84:fa:b5:21:03:54:b6:91:a9:a6:82:24:b3:84:15:c0:bf:
39:19:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:17:01 2025 by rpki-client