Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: KniGwfg5FoVTrB33yH7DWOB5xKwZrphep++PhvcpYxg=
Subject key identifier: C0:03:FB:E2:D8:DA:8C:01:39:FD:5C:98:E3:47:7E:EB:5B:D3:F6:5F
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 0196575CDE5104219EE7BC612F6FC25DFA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 08:00:25 +0000
Manifest this update: Mon 21 Apr 2025 08:00:25 +0000
Manifest next update: Tue 22 Apr 2025 08:00:25 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: oiQ8w/N6paI5Jejc/m9LuAV1cMWbFvHuazdu5K7v+bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:de:51:04:21:9e:e7:bc:61:2f:6f:c2:5d:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Apr 21 08:00:25 2025 GMT
Not After : Apr 22 08:00:25 2025 GMT
Subject: CN=c003fbe2d8da8c0139fd5c98e3477eeb5bd3f65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:fa:74:19:59:00:12:a5:70:94:ea:a5:b3:
27:e5:e3:58:0a:70:89:23:f7:a1:ad:e5:97:11:8a:
5f:69:60:fd:fb:0a:20:a8:3d:22:68:d0:34:6e:d3:
fa:98:cb:df:21:12:85:55:62:5d:de:0f:ca:6a:14:
8a:1e:52:42:ca:58:2d:11:bf:4f:9b:f9:5a:d6:d5:
5a:29:9d:d5:c1:f5:40:1c:86:41:8d:30:f3:ce:ee:
31:57:c8:8e:1b:78:99:13:03:54:db:fc:fd:84:54:
df:ca:c0:88:55:5f:71:dc:53:c4:27:4f:10:d3:b9:
a7:09:24:39:d1:72:99:2f:22:a4:22:19:6e:88:fd:
c7:0e:1f:1a:61:b8:0c:ae:46:53:84:88:2b:98:f4:
e1:83:81:d5:2e:c2:8b:cd:2b:50:cc:7f:92:98:91:
aa:81:3f:05:f0:f7:70:1c:63:dd:ec:d3:f3:3b:4c:
99:38:9f:e2:4a:51:aa:c5:a4:dc:57:3e:31:bb:fb:
95:96:ec:92:a0:c5:44:42:73:64:06:d4:c2:59:8c:
b9:ef:d2:be:fc:99:13:d3:64:54:3a:7e:93:13:84:
e5:09:b4:85:51:0f:bd:43:b5:18:56:ed:8f:75:c1:
0c:65:d6:d9:de:aa:56:ea:4f:d0:23:e5:a7:cb:01:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:03:FB:E2:D8:DA:8C:01:39:FD:5C:98:E3:47:7E:EB:5B:D3:F6:5F
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8d:68:fa:41:69:c6:65:f6:92:e3:8e:e6:88:97:ee:86:51:
34:2c:b8:9a:52:6b:a3:47:c7:08:70:0c:d3:02:5b:4d:45:79:
27:54:02:d6:27:11:d6:45:2e:53:50:8d:4a:4b:2c:b3:f6:96:
30:96:e1:32:ab:f4:a0:f3:20:3b:5a:f4:36:c5:08:03:5c:c6:
72:2c:04:56:6c:f7:c8:5c:5f:0d:db:ea:1c:52:8e:b7:80:07:
3b:0e:7e:87:1b:61:dd:d6:8f:43:23:fd:f9:e7:7f:31:c2:e3:
7c:88:ad:3e:0c:79:31:b0:78:b1:11:60:ff:63:55:89:c1:b6:
5f:61:f7:95:6a:1a:d7:a3:09:cd:90:e6:94:01:a3:22:87:98:
78:d6:5c:36:f3:4a:8c:71:83:1b:6a:d9:69:16:02:cd:fe:8b:
b7:33:ab:bf:b8:96:aa:a8:2c:29:39:30:a8:08:66:58:47:af:
44:2a:2c:d6:f1:96:ce:e6:ac:19:da:2d:3e:4f:44:12:80:01:
62:86:f6:97:05:59:93:3c:4a:84:11:8a:59:31:13:6c:f0:91:
13:6f:21:53:dd:fe:80:7c:ed:8e:df:9f:dc:ed:e8:63:e2:c7:
93:e5:b0:a1:ab:7b:6c:be:8c:d2:e8:f1:e8:3e:0f:e6:ef:f7:
fa:31:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:16 2025 by rpki-client