Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: 1rVkC6yq4Ve6irVnWKvMrd7ql2/xRyffSOeJK6uZwQc=
Subject key identifier: C5:FE:4F:24:B3:DA:7A:3F:A5:47:85:20:2D:4C:B7:E3:E5:1E:26:4F
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 01965C830A7E05A7E7D08EA11B9605D2CB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 1508
Signing time: Tue 22 Apr 2025 08:00:13 +0000
Manifest this update: Tue 22 Apr 2025 08:00:13 +0000
Manifest next update: Wed 23 Apr 2025 08:00:13 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: Bm0mbDMO+apnaTcMheIZXVmR6VaiXupAwRtv9kQaD/c=)
2: Tci-duFHvWMEGttKQ92T_aViR_A.roa (hash: TNMB/iEiiWHvlZINV0FtcnUi3rWiLmL/5woKI9WyM90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:0a:7e:05:a7:e7:d0:8e:a1:1b:96:05:d2:cb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Apr 22 08:00:13 2025 GMT
Not After : Apr 23 08:00:13 2025 GMT
Subject: CN=c5fe4f24b3da7a3fa54785202d4cb7e3e51e264f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c1:ad:86:4c:0f:32:95:c3:0a:10:18:8e:26:
52:29:d5:3c:10:5e:57:7c:1b:2f:94:db:ec:2a:51:
eb:57:8a:f5:99:cd:98:ed:fc:b7:a2:9e:d0:43:d4:
82:44:2d:f1:ec:92:d3:f6:ba:19:6f:28:93:5a:7b:
85:52:0a:49:30:a5:5e:45:12:fd:74:f0:e4:dd:de:
bb:a0:14:4d:04:2e:46:80:2c:c3:36:b2:57:31:34:
d6:e6:5d:e6:23:20:aa:79:0b:9a:d6:1f:b7:89:ff:
85:85:ae:0b:e6:10:25:70:da:2c:69:55:6a:b1:29:
85:5b:86:a4:f8:63:e2:00:c8:81:6c:7d:a8:37:ba:
28:d9:50:7b:03:3f:c6:11:f2:ad:e7:c3:c4:e1:56:
71:b5:ac:b8:db:07:65:f8:ca:f1:e5:46:8b:2d:43:
05:07:0f:7f:c4:92:0d:fe:34:d3:b2:e9:a7:69:c3:
09:ad:82:9c:cc:4d:94:55:f9:cb:c1:20:d6:fb:a1:
f9:5d:19:4d:dc:26:47:04:93:13:ec:d0:ce:70:c9:
a3:53:5c:43:72:3c:28:94:e3:9b:78:4f:51:d1:6f:
b2:8b:c9:a6:84:75:b7:c9:f3:7b:bd:7f:44:86:f3:
5f:ee:7a:d5:48:b5:51:4d:92:20:75:5f:4a:46:5a:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FE:4F:24:B3:DA:7A:3F:A5:47:85:20:2D:4C:B7:E3:E5:1E:26:4F
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:36:36:a3:f4:aa:d8:47:bd:3f:5e:6c:ef:32:a2:25:13:8c:
41:f0:05:1e:18:3f:79:2e:45:74:c7:4a:b3:a8:b6:fa:10:4f:
5a:21:58:b4:d8:30:5d:ee:f0:99:b6:c7:20:80:e0:23:8a:c6:
91:e2:f8:9e:74:46:09:20:bd:05:36:87:6b:3b:63:da:7f:53:
bd:55:21:db:9b:ac:b5:1b:67:58:cd:46:76:55:3d:f9:e7:b2:
8a:2b:90:4e:0b:e5:13:e0:62:04:98:41:ba:0b:26:dd:b3:b3:
33:a2:00:db:21:ce:a0:db:95:7a:39:3f:e2:d6:68:81:b5:db:
44:d2:a7:56:91:1f:8a:f9:54:68:8a:72:09:e0:c4:54:62:fc:
e3:f7:b3:d2:46:b9:ba:4d:86:93:55:e1:97:e3:89:46:40:d1:
e8:69:23:90:ea:28:8b:e8:6d:90:42:2c:e2:a9:39:1e:37:4f:
f8:df:84:f4:fd:6d:ea:41:2b:04:82:ec:d4:0b:9c:ba:32:9b:
34:a0:99:6e:cb:83:79:f2:91:d6:3f:63:9a:54:65:8a:40:93:
72:be:1e:1a:e6:a7:e8:fe:16:f1:6b:08:33:95:c5:74:50:25:
ef:96:b7:11:80:c1:66:15:db:e8:84:29:1b:cb:71:48:a3:31:
35:da:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:24:50 2025 by rpki-client