Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: FAVQ6xZCRP4UBlCpUxgoOebr0vqCapklatTen/pIymc=
Subject key identifier: 4C:E8:36:FF:F1:3A:B4:11:BB:D4:43:72:1D:B6:85:BD:C4:18:BD:DC
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 01962C735243220EF5F6EC7B0E85FCB0121B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 106A
Signing time: Sun 13 Apr 2025 00:01:17 +0000
Manifest this update: Sun 13 Apr 2025 00:01:17 +0000
Manifest next update: Mon 14 Apr 2025 00:01:17 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: qd6WFxho2ubE+Dmkd3MwBv3xyDsbZu+CbsCy6S/OxPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:52:43:22:0e:f5:f6:ec:7b:0e:85:fc:b0:12:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Apr 13 00:01:17 2025 GMT
Not After : Apr 14 00:01:17 2025 GMT
Subject: CN=4ce836fff13ab411bbd443721db685bdc418bddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:c0:44:ec:40:91:6f:94:f5:c7:45:8f:4c:
bb:64:e9:95:34:84:fc:bb:ce:61:61:32:b0:38:00:
b0:a6:79:56:60:68:d4:8e:bc:c8:4a:17:9e:10:4b:
96:c1:38:4a:27:97:dc:6e:ab:db:18:50:48:b5:0e:
48:16:c2:f7:25:30:1e:f6:0c:2b:8a:f0:e5:62:ca:
a1:79:63:b4:21:0d:b4:e4:45:fb:08:b5:1d:d6:8b:
8d:55:ff:0c:d0:12:25:db:83:ba:f9:57:99:cb:e4:
6b:cd:b2:4b:92:dd:d8:1b:73:ae:83:7a:5f:c2:4e:
11:2e:84:eb:08:b2:5a:aa:05:47:7e:56:aa:f8:31:
cd:15:9b:50:27:fb:dc:4b:0f:7d:d4:12:87:18:4f:
1d:bb:91:8b:09:46:19:1a:0f:cd:a8:8c:57:b0:bc:
b7:c0:60:c9:89:97:64:62:17:53:29:49:4f:81:35:
95:b5:2c:41:32:f2:9d:4d:36:d4:ae:49:bf:af:da:
11:b5:81:27:ef:39:58:b2:dd:b3:b1:8c:5a:cc:a8:
32:cf:c7:8e:33:47:36:42:6e:21:9f:48:2c:59:98:
12:b2:4c:81:0c:e7:21:54:77:6c:84:75:45:91:6b:
d6:1d:a7:3f:d0:b3:64:60:46:fc:e7:4f:e8:77:1a:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:36:FF:F1:3A:B4:11:BB:D4:43:72:1D:B6:85:BD:C4:18:BD:DC
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:74:c5:f5:7b:b0:57:15:84:72:d7:81:e7:be:9a:1f:0e:c9:
4a:99:44:3c:13:b4:96:ef:2a:24:22:00:cf:7f:be:8f:47:fe:
23:10:ac:2a:4f:e8:40:0e:52:01:c7:32:f1:87:69:ad:d7:b7:
c3:78:e7:fa:27:5d:9c:72:c7:f0:4b:c5:87:ed:1f:36:c2:29:
b9:5e:4e:5e:8d:19:12:a4:c7:39:65:14:8b:d4:8f:76:14:54:
f1:e1:6c:65:cc:e4:1f:d3:1e:2d:45:a6:2c:43:3d:57:ce:57:
ec:ce:74:c9:6c:56:25:7c:57:dd:61:c3:c9:9f:63:a9:f5:75:
18:6b:cf:91:72:70:17:ea:14:50:02:c3:61:e3:b5:1b:b8:c7:
c4:19:eb:02:d0:3f:fc:d2:7a:b8:a3:d5:48:88:c8:5b:8b:96:
37:e8:d8:49:cf:7e:25:c7:89:a0:ce:5a:77:8c:45:37:19:a9:
28:70:fd:41:93:f1:9e:86:76:8c:32:53:28:04:50:b3:32:ba:
ee:fd:aa:9c:aa:c6:8d:3a:8b:2f:44:6b:d3:b0:a3:4e:02:3d:
c7:54:f7:1d:cc:48:bb:20:78:e4:75:98:44:92:07:e3:0e:e7:
05:5f:de:8c:14:79:96:e8:98:50:46:83:76:23:33:f3:c6:b5:
49:50:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:54:45 2025 by rpki-client