Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File: frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier: JowkuvAFQVgRr7++nxxHPNhOzXx0GXsk5ZSGHumf984=
Subject key identifier: 35:09:EF:A4:8D:C5:6A:0D:54:91:FD:4C:83:E4:86:40:E7:C0:6C:E7
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer: /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial: 019655387F51B9AE1504B105AD1FBF7CDB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number: 0162
Signing time: Sun 20 Apr 2025 22:01:28 +0000
Manifest this update: Sun 20 Apr 2025 22:01:28 +0000
Manifest next update: Mon 21 Apr 2025 22:01:28 +0000
Files and hashes: 1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: T/vCDONSQWfYvG2paJmW0axTxRMIWpPyxiNVGZBLblw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:7f:51:b9:ae:15:04:b1:05:ad:1f:bf:7c:db:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Validity
Not Before: Apr 20 22:01:28 2025 GMT
Not After : Apr 21 22:01:28 2025 GMT
Subject: CN=3509efa48dc56a0d5491fd4c83e48640e7c06ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:4f:18:20:8b:28:96:49:c3:e6:ac:6e:8a:
59:84:13:8e:ba:06:87:16:ab:be:15:75:f5:26:7b:
6a:cc:72:61:d5:da:dd:fd:54:19:ba:60:e1:3c:05:
ca:49:0c:c3:17:cd:3a:47:43:e1:3d:1d:b0:2f:c2:
0b:37:dd:25:9c:82:8a:09:be:62:e7:26:b9:ad:22:
6c:b5:31:ba:86:ae:fd:6b:04:6c:bd:c5:c5:e5:4a:
bb:c8:cc:e1:73:b8:b3:ee:ba:d9:14:60:95:ab:cc:
91:5b:57:30:d9:fc:12:53:8e:67:f7:a7:b3:99:cc:
b2:84:5c:70:49:e7:a2:3b:2d:05:79:ab:3b:41:25:
e5:5f:af:87:b5:64:61:d2:04:de:79:34:0f:9a:2b:
30:22:84:66:63:ff:13:8c:b2:09:ad:3a:52:65:0b:
09:b1:f8:b6:9a:e5:10:8a:ef:a2:83:2b:8f:c5:37:
82:1d:45:b9:5c:1a:95:e7:61:95:30:8c:76:82:2a:
96:33:02:bf:ea:06:ef:3e:b3:d9:d6:f8:25:06:12:
94:ba:fe:b4:14:1b:6a:3d:30:05:7d:8b:11:6c:89:
a2:96:27:62:f4:b9:3b:a8:d3:de:bd:9d:85:8d:1f:
5c:8d:92:46:1c:df:2b:bd:f6:6e:1e:b5:bf:31:0e:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:09:EF:A4:8D:C5:6A:0D:54:91:FD:4C:83:E4:86:40:E7:C0:6C:E7
X509v3 Authority Key Identifier:
keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f4:8a:60:cc:5e:95:43:ce:a9:01:1d:76:86:52:1e:27:b3:
09:cc:6d:d9:5c:ac:11:7e:5c:e3:11:07:f1:45:ce:d3:3a:aa:
7c:ff:fd:e2:0f:b6:35:75:05:43:ef:21:d1:69:2f:2f:14:43:
de:bc:62:70:bd:7c:09:b7:88:31:ec:fd:d2:19:21:bc:4e:0b:
71:af:a4:65:fd:7e:c0:69:91:f0:00:57:51:f2:3d:08:cc:94:
e2:e5:72:52:d5:7a:20:06:df:21:ad:ee:e2:8c:1c:4b:90:36:
b0:ce:46:bd:0c:c7:33:ec:ac:4b:6e:e4:b7:25:be:57:61:b3:
ec:c4:59:a3:dc:c9:9c:8f:b9:f8:f1:f7:f3:9c:75:f6:42:63:
cb:9a:c9:fe:52:e9:70:60:13:fc:66:34:7d:a6:eb:ee:c4:87:
6c:bb:ec:43:f9:56:3c:20:04:bb:52:96:4c:da:5b:23:13:d3:
56:5f:28:93:16:bc:9e:71:51:79:7c:e9:ac:a4:13:c7:d1:37:
a1:b9:0d:b3:1a:50:64:9e:9f:f4:5e:16:a2:72:23:f9:07:a0:
0f:2c:5a:98:e0:0f:61:58:d1:50:2b:93:ca:1b:66:b9:30:ba:
10:9d:2b:d9:78:f0:ff:46:8a:96:c3:47:87:6a:f1:59:bf:49:
05:12:b1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:24 2025 by rpki-client