Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier: eOtnNSFpGn6xd7XEi+SmdwR3dNVvcEZ+dfchxKexHgw=
Subject key identifier: 64:07:1E:8B:70:E8:7E:99:6F:62:34:D1:6D:9A:B1:FB:21:2E:CF:B5
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 01960CE8671890DEFD714044BEA34A9C0651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number: 1225
Signing time: Sun 06 Apr 2025 21:01:19 +0000
Manifest this update: Sun 06 Apr 2025 21:01:19 +0000
Manifest next update: Mon 07 Apr 2025 21:01:19 +0000
Files and hashes: 1: 9LYwP72SZhTP9lZsq-7j8HuZdgM.roa (hash: G+yR0ErMQLPYRLmJwGI9EkRMjsbBolXBG62m79mi45g=)
2: FR9MfFqpLiVuFujJBtFbhJmONI4.roa (hash: E+6VeTvBdtosqoAM0l7HopHp27qrMu4a19ly9IU6g9U=)
3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: nc3YjKbxpHwSJ/yTNbQiH5nndSBNEepe7fbrlyVFlYc=)
4: a5dgM43xwH6TzzG3OU4-DU-VReU.roa (hash: lvQLcSmhppO+nBAUrEWVk8HCNuzIbjnnhIRTEmwBZUw=)
5: dK_YVUmItcs6Jo6KBWMzLehOltU.roa (hash: cxdMWN6vf7XXfhS5ABEMBqXeAf173QdfF9qlyNjA1g8=)
6: fNVPBx-nJkzMb3EbI9eFden66xI.roa (hash: 4Ma//fNnrLCw4CmoykWoEiiC3wb4lPTvORAHCvUM+U4=)
7: rrKDVy-QxSmZ2HqqmDRKJ_O3zjE.roa (hash: qQt4LgJZUrwxxbQW9H3UI+h4NYxT7FciUlDfdQlIp3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:e8:67:18:90:de:fd:71:40:44:be:a3:4a:9c:06:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Apr 6 21:01:19 2025 GMT
Not After : Apr 7 21:01:19 2025 GMT
Subject: CN=64071e8b70e87e996f6234d16d9ab1fb212ecfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:98:2a:90:66:08:fd:a9:b1:57:d7:c9:7f:
fe:d9:ed:0d:46:cf:31:07:6c:48:fa:9f:fa:0a:c0:
c7:0f:44:64:64:0f:85:69:11:fd:ee:f6:9b:8b:2f:
cf:25:e7:a6:12:4c:dc:97:90:c1:14:91:d3:46:66:
bf:60:68:b7:33:38:b7:35:71:ae:64:c7:a8:9d:ee:
9d:56:1a:b4:da:98:87:dd:83:89:8f:a8:6c:90:90:
26:b3:16:77:6f:cf:8b:88:15:d2:ea:da:44:bb:15:
be:b3:00:28:1a:66:72:ec:93:09:b6:2e:03:e6:03:
9b:65:6c:d0:dd:a3:ea:4e:0f:f2:eb:22:63:4b:7c:
4b:0d:89:1a:cb:c0:11:f9:c0:13:4f:d0:5c:65:57:
cf:e0:f3:f8:4b:c9:cb:c7:13:27:c3:4b:77:c6:20:
34:49:5c:cb:ad:17:cf:a0:45:ff:51:69:9b:d4:bb:
33:78:55:66:e3:63:01:ff:b5:78:2c:75:60:7e:50:
78:31:a1:d8:34:47:d7:b1:84:6a:be:4c:a5:80:8d:
eb:d2:8b:a8:e0:4d:cf:42:9f:bb:a3:e6:8c:41:00:
c2:d7:ff:bc:66:50:a1:55:5e:fe:07:b4:32:96:99:
1b:f2:10:80:57:a4:31:84:59:4b:10:61:ae:23:16:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:07:1E:8B:70:E8:7E:99:6F:62:34:D1:6D:9A:B1:FB:21:2E:CF:B5
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:35:c4:6e:4f:fb:e5:ca:85:78:dd:b6:28:88:e6:e9:07:86:
9e:08:40:7f:c4:3a:5b:05:15:ab:79:15:5b:21:03:e4:e0:0c:
4e:c9:c5:29:85:8d:56:59:d9:50:28:04:45:8b:4a:75:d3:47:
31:ab:c4:43:b9:d7:1b:6b:45:ef:7c:7d:1c:05:c8:d6:d9:40:
09:09:53:9a:06:e7:75:c6:7d:99:f4:69:c0:a3:2c:54:9e:86:
3f:b6:0f:61:ee:ea:56:d8:35:cb:33:ab:fd:ab:df:77:c8:28:
38:21:5f:33:cf:e7:db:2b:05:62:e2:d6:d1:50:a6:29:51:49:
39:f6:a0:28:d4:35:bf:ac:30:1c:e8:5d:2e:71:a6:a8:47:0c:
d4:35:06:03:7d:fe:65:7f:96:7a:15:40:40:4c:21:9f:be:eb:
7d:d9:fc:ed:4b:59:28:9a:70:9d:38:34:d1:35:75:b1:85:8e:
4d:53:2c:c0:74:49:69:69:98:27:08:58:ba:7d:c6:e7:1c:fc:
36:78:ca:3a:d0:1b:32:de:65:b4:cd:cb:65:57:f7:ff:0a:30:
ad:80:0e:ad:da:45:f6:51:a7:09:d7:6f:f8:fb:6c:68:76:f3:
63:ca:d8:2e:6e:80:09:7e:dc:d6:50:1d:f1:e5:41:ce:25:21:
95:97:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:38:13 2025 by rpki-client