Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: VIa9d8JfnMXT/zCe+go/7mGoXN2FvkEE9nuVg35UU1c=
Subject key identifier: 81:7D:AB:DA:0B:D4:B1:A8:6E:D1:A2:52:72:F0:FA:1F:67:42:67:F0
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 019648C5B4811C1D3B9F722A34FA80A00619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 88
Signing time: Fri 18 Apr 2025 12:00:38 +0000
Manifest this update: Fri 18 Apr 2025 12:00:38 +0000
Manifest next update: Sat 19 Apr 2025 12:00:38 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: fDIBMq2pUiMIvZ8FMd0Q2C5+lOx4uhoOQ8eol8Z5lc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:b4:81:1c:1d:3b:9f:72:2a:34:fa:80:a0:06:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Apr 18 12:00:38 2025 GMT
Not After : Apr 19 12:00:38 2025 GMT
Subject: CN=817dabda0bd4b1a86ed1a25272f0fa1f674267f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:f9:aa:21:94:bc:12:b9:63:dc:46:f7:02:
28:58:ff:4b:83:8e:dd:b7:82:3e:da:44:47:95:1e:
1f:2b:5f:30:db:b1:d6:32:96:e2:08:a2:d0:b2:f1:
20:b0:26:20:84:d6:5c:60:ad:14:51:ec:b7:eb:3c:
53:12:61:e9:bd:02:43:54:58:63:fd:49:44:fb:e8:
b4:cb:6e:5a:a1:7f:13:62:0b:90:c6:01:95:2c:fd:
fe:53:ef:16:c9:58:a1:d1:79:d9:80:2c:19:2f:bb:
70:47:31:b4:72:3f:bd:df:0d:3f:41:48:41:86:7d:
54:05:85:33:2d:9e:6f:0f:23:54:45:51:f2:36:53:
e6:89:3c:54:82:99:8c:5d:00:2e:ca:fe:65:44:31:
d5:6b:d7:1b:eb:29:96:99:bb:77:cd:f4:76:7f:b8:
fb:4c:73:e8:9d:28:2f:8c:95:36:60:4e:34:60:18:
63:ac:a7:fb:fd:e2:4a:e1:83:4c:38:07:c8:bb:37:
59:ad:30:08:e3:96:48:65:56:94:29:14:c6:2f:80:
23:6e:a1:b4:fe:12:02:c6:3d:02:7f:2e:d8:b6:f0:
55:7c:8e:a6:9a:61:89:a3:22:7b:75:e9:1c:c5:0f:
22:1d:85:89:7c:52:93:99:c4:2e:ce:e7:d9:be:4f:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7D:AB:DA:0B:D4:B1:A8:6E:D1:A2:52:72:F0:FA:1F:67:42:67:F0
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4b:ce:e5:d1:7c:7b:4f:4d:e8:5c:09:1f:31:29:bf:73:ff:
43:5f:e8:73:9c:fa:44:7d:58:21:e2:d7:68:6b:94:b5:a2:6a:
57:32:6d:09:89:fe:77:ba:80:00:30:3a:92:1b:05:0d:12:3c:
c8:d2:7a:46:c7:3c:c8:44:c4:b6:90:09:5b:99:10:7a:ce:32:
db:aa:f9:93:1f:76:4b:aa:f6:72:d9:3f:3e:ed:8e:73:e5:6c:
7c:5b:97:a2:40:7b:ef:4f:e1:f1:80:a5:13:88:83:d1:bf:f8:
68:47:22:12:b9:bb:d4:01:d1:69:57:dc:3f:91:18:11:90:44:
23:fc:94:8c:69:d9:37:0a:5c:3a:60:28:98:15:35:6f:85:1f:
7c:c5:9c:96:93:e5:56:2a:a9:3d:a3:b6:81:7f:27:87:42:54:
52:cf:ef:b4:35:1a:e0:e1:4a:6f:19:01:29:9b:bb:4f:2e:5f:
cc:59:19:4b:9a:e3:1e:9d:dc:61:a6:5a:7d:8e:7e:dd:ca:55:
72:84:05:76:f0:84:f2:af:dc:7d:87:2e:33:2f:b2:f5:6e:89:
a8:77:62:2b:fb:fa:4b:b0:34:41:25:20:cd:97:9a:a3:b3:32:
46:31:88:f6:9a:58:62:8f:0d:8d:01:56:8d:3e:4c:25:3e:53:
8d:d2:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:09 2025 by rpki-client