Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: Zxl5FRHQyxfO57etDpFua+tKnmuzzQY44rQz8sL6hQw=
Subject key identifier: D4:78:8D:A2:4B:21:29:5E:6C:1A:53:07:7E:5D:30:12:68:50:40:2E
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 01958BF233C5719C9F2978A0A5BD71092341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 05B5
Signing time: Wed 12 Mar 2025 20:01:00 +0000
Manifest this update: Wed 12 Mar 2025 20:01:00 +0000
Manifest next update: Thu 13 Mar 2025 20:01:00 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: uw32bcrSDILohPcf5lgZ6XgBcWtzi9hIFWxNDvG19Ms=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:33:c5:71:9c:9f:29:78:a0:a5:bd:71:09:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Mar 12 20:01:00 2025 GMT
Not After : Mar 13 20:01:00 2025 GMT
Subject: CN=d4788da24b21295e6c1a53077e5d30126850402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:bf:f2:3e:cf:89:fc:de:db:db:dc:32:1d:
ef:5d:45:0f:7a:6d:aa:fb:86:41:65:8b:2b:0b:12:
8a:f9:01:aa:14:f8:d7:4a:ee:2e:56:e5:5b:7f:40:
99:ad:7b:0f:03:83:bf:29:3a:e5:28:19:69:84:2c:
46:05:20:3d:25:9c:ce:ba:b2:45:e5:e4:7a:e8:08:
4a:95:52:8c:cb:3b:72:d3:b4:c9:4d:e7:7e:71:f3:
fb:a7:0c:68:57:d7:8d:e7:d2:5d:e1:20:5e:22:a2:
47:77:d6:2d:42:f9:51:23:63:37:12:b7:0c:59:7e:
74:e5:44:85:d0:b1:3c:56:56:80:11:98:f1:34:72:
66:1a:ca:81:28:f0:96:3d:e8:00:fc:92:e9:ae:1d:
bf:97:a1:d7:e7:6f:3e:4b:ec:eb:0a:2c:3c:e6:4c:
a5:ea:2a:13:7b:75:1e:3a:34:d4:de:ee:c8:ea:71:
63:f7:db:9b:19:a7:3d:5e:02:8d:5f:e1:47:a8:55:
f9:41:46:7a:6b:97:e9:89:9b:6d:77:00:ef:c9:d2:
fd:cf:0d:93:29:ab:a9:c9:33:5d:1c:71:1b:eb:72:
5e:4a:14:1c:a4:53:b5:88:f5:21:31:68:74:4d:f4:
23:26:ea:9a:7f:a8:ed:6d:90:12:47:d8:26:e2:d2:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:8D:A2:4B:21:29:5E:6C:1A:53:07:7E:5D:30:12:68:50:40:2E
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:de:f1:47:c4:ac:bf:d6:c0:87:fb:4a:4f:40:a5:5b:1e:31:
ec:42:50:1e:8a:bc:2a:8d:c1:44:5d:6a:75:25:4b:5b:41:db:
5e:c0:cc:9d:6c:91:57:29:5c:53:d8:b3:71:9b:44:55:f6:1f:
62:1b:f2:21:b4:57:f8:3b:5d:49:3d:ef:a3:98:88:3d:65:62:
a3:3a:3c:15:22:e3:da:a5:2b:83:98:00:e4:9f:a1:80:dd:be:
be:ba:22:54:19:b7:74:fd:a1:b9:95:1c:73:68:59:fd:a7:2e:
9e:9a:64:ae:3a:08:87:55:2f:91:fc:92:43:95:ff:10:a2:c4:
6e:6b:92:34:4e:6b:5a:00:43:00:7d:d6:8f:b7:3f:68:60:46:
63:1f:56:68:14:f8:a1:49:43:a6:ce:39:c3:2a:33:af:2b:7e:
20:f7:df:c4:5b:7c:8e:0b:33:65:3b:34:51:9a:61:aa:c5:ae:
51:26:db:3e:ac:c3:23:80:89:5f:57:68:fc:fb:d5:67:96:ec:
9d:d2:02:84:a7:a0:c5:d8:3c:30:0b:94:31:f0:9e:42:f6:a0:
c5:79:fe:c8:37:2c:e4:fa:a5:af:0d:20:30:ae:b6:b0:12:0b:
40:14:5b:7f:0f:0f:aa:64:80:41:d6:95:73:e0:81:8c:ec:99:
b6:ab:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:22:09 2025 by rpki-client