Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: tMlEQa8AMI4mIoydau7DVPbnZk/inJ5hpymLjrLN3YQ=
Subject key identifier: B5:F2:DE:F9:07:50:92:E4:77:F4:81:0B:35:00:76:9F:A8:CC:B1:0C
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 019615B3FD84D400993A1B2350F7314628B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 0DA2
Signing time: Tue 08 Apr 2025 14:00:39 +0000
Manifest this update: Tue 08 Apr 2025 14:00:39 +0000
Manifest next update: Wed 09 Apr 2025 14:00:39 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: pV0v4GhKYAipk4lF0P5xjlwdLj1VcDw/9mYnAeFA2PM=)
2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:b3:fd:84:d4:00:99:3a:1b:23:50:f7:31:46:28:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Apr 8 14:00:39 2025 GMT
Not After : Apr 9 14:00:39 2025 GMT
Subject: CN=b5f2def9075092e477f4810b3500769fa8ccb10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:10:a6:4d:8c:55:7f:7d:d8:fc:c4:3f:b6:
47:db:af:8a:88:96:b8:dc:5a:92:df:11:e7:d1:a7:
e9:25:38:4b:f5:3a:60:3e:0f:03:ff:ee:5e:6b:8a:
3d:4c:d3:7c:cc:57:99:9a:cc:95:66:46:97:08:01:
77:27:ea:1e:34:02:f8:d5:66:2c:56:29:4a:47:37:
42:97:6a:f8:b8:81:a6:3e:b0:42:a1:16:b9:14:7f:
ff:40:66:77:da:37:26:f5:35:26:c5:3d:02:85:08:
85:25:97:28:11:d4:38:64:25:cf:66:ea:62:ac:fa:
0c:b7:19:0a:dc:91:d8:73:06:92:5a:f3:fb:7a:26:
a8:4d:d8:01:a5:3f:fe:32:d1:d8:ac:a3:d3:24:19:
b7:36:0f:f0:c8:9b:ae:bc:e8:17:d0:e0:55:6b:e8:
e5:33:96:d0:e4:e6:10:57:3c:ee:02:0f:41:60:0b:
be:21:83:3b:04:13:07:44:ff:b5:b5:99:bb:1d:58:
4a:90:58:07:1b:24:a6:ad:08:53:d3:35:f3:92:ae:
8f:96:7d:fb:8e:88:35:c6:9f:70:ca:8d:bd:7d:fe:
a8:e3:d8:a1:9f:83:07:84:b7:83:98:eb:bd:b9:05:
ff:24:31:04:57:42:0b:37:2e:d2:98:08:1d:6d:60:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F2:DE:F9:07:50:92:E4:77:F4:81:0B:35:00:76:9F:A8:CC:B1:0C
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4a:f0:20:84:0f:e0:b0:86:e6:b1:ad:75:73:67:66:8f:27:
58:94:d8:05:f6:d7:22:b4:ab:ef:8a:82:90:5d:a3:8f:29:89:
0b:2f:46:82:4b:3c:00:73:ee:ad:f8:d1:41:c8:6f:9c:c0:df:
ae:64:cd:e4:de:95:a4:1e:c9:00:03:c9:97:96:1c:fd:8f:79:
4e:60:91:60:03:68:73:15:ba:6d:c9:09:fe:39:f8:f3:2b:10:
bb:fa:11:79:bf:18:76:cb:ca:44:34:1f:5e:b1:de:5a:91:9f:
36:92:43:ca:ab:63:2c:c8:95:13:d6:e7:92:2e:2e:a2:6e:16:
aa:dc:29:73:3c:da:05:b1:25:f1:ff:e1:27:ec:dd:66:bf:0c:
2f:5b:8b:90:2e:38:1c:61:4b:ed:e7:e6:24:cb:7d:53:88:d4:
70:ef:1b:cf:5f:fe:d6:07:0d:48:2b:e4:6a:6f:53:86:88:8f:
c1:58:78:58:94:10:33:c6:36:b2:5c:17:28:92:c8:ff:9f:d4:
84:67:92:92:d4:61:9f:ef:06:f6:44:2b:b8:c5:0f:2e:95:70:
86:b8:88:d0:8a:d6:d5:df:99:84:e7:f2:6f:23:d9:94:aa:95:
f4:db:61:80:cd:af:44:70:f0:4c:58:e3:68:2a:2f:00:b6:f3:
1f:f0:d1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:34:11 2025 by rpki-client