Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier: j/by+0/NUbms8YnMiN+ggksh2XR2WratOioCcYedNIw=
Subject key identifier: 9C:57:22:7F:A7:F2:0B:99:CD:50:82:43:91:AC:B6:76:DE:94:56:EA
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer: /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial: 01962DF3C8AEBCA38BEF99FC8A959A497C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number: 06AF
Signing time: Sun 13 Apr 2025 07:01:13 +0000
Manifest this update: Sun 13 Apr 2025 07:01:13 +0000
Manifest next update: Mon 14 Apr 2025 07:01:13 +0000
Files and hashes: 1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=)
2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: h4BuZTIIg00/wBwSQEni8aYzwQQqyNTSuE646/C1ABc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:c8:ae:bc:a3:8b:ef:99:fc:8a:95:9a:49:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Validity
Not Before: Apr 13 07:01:13 2025 GMT
Not After : Apr 14 07:01:13 2025 GMT
Subject: CN=9c57227fa7f20b99cd50824391acb676de9456ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:45:03:f3:b9:13:dc:30:ab:19:70:a5:91:
80:15:44:c4:1f:b6:49:0d:28:2f:7d:64:b0:8f:08:
52:e9:2e:76:b8:c4:33:62:b4:2c:96:b5:d5:b6:81:
96:32:79:58:4f:5b:28:42:87:dc:81:89:67:14:c3:
a1:1a:1b:85:3c:f5:df:8e:b5:a2:b5:40:91:30:e6:
b4:7a:93:3e:64:67:3d:df:f5:c5:56:b4:bc:2d:56:
56:c2:15:83:86:70:6e:fe:9c:d2:f6:b9:eb:d2:d1:
4f:48:b4:ff:aa:ec:ab:b5:ad:21:03:cd:81:31:9d:
b2:d9:e2:8f:4c:75:47:bb:5e:24:4d:4a:ab:25:a6:
04:fc:2c:c4:6b:c1:68:20:27:50:a2:84:2c:5b:ae:
cb:04:20:46:d2:61:9e:f5:47:0b:cc:34:28:73:79:
59:88:55:2b:4b:42:67:39:34:92:91:3e:63:e9:0a:
4d:58:d8:98:a0:e1:c5:c0:62:95:cf:9e:70:a4:29:
e2:c5:ad:c7:db:ca:75:ab:1c:b8:fb:58:2d:e3:5f:
ef:22:ee:0d:7a:57:66:04:f6:c0:e9:37:2a:9d:19:
a3:3e:be:01:e7:36:e8:70:bf:4f:9d:4c:c8:a1:ce:
92:23:2d:55:23:27:e4:96:f9:2c:65:80:5a:6e:96:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:22:7F:A7:F2:0B:99:CD:50:82:43:91:AC:B6:76:DE:94:56:EA
X509v3 Authority Key Identifier:
keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:11:6e:60:4e:6b:44:45:16:d7:d0:dc:fe:00:f2:a8:1b:c1:
28:ef:3b:7c:63:1c:38:b9:b5:8c:e5:14:d8:01:9e:10:7e:a3:
51:b5:34:27:1c:5a:94:eb:5b:fc:ce:09:01:2c:b7:57:bd:dc:
98:f3:27:de:cf:88:d0:52:95:b7:f6:0a:81:76:a8:22:1a:50:
01:bc:db:5f:38:0d:24:ec:bb:be:5b:d6:78:8a:91:fa:bb:f5:
d4:26:ae:4a:4f:33:54:d3:fe:53:2d:b3:62:fb:eb:b4:c9:4f:
53:3f:0e:79:2e:f3:e8:28:01:e9:4f:15:33:ab:ed:ef:e5:b4:
aa:35:63:4f:ca:05:8a:a4:d4:cc:0d:a8:d1:d7:e7:86:35:21:
a8:4e:70:20:d3:b2:c4:55:94:74:cf:d3:4c:ca:8e:fa:3f:51:
dc:02:f2:23:2c:86:8a:ef:59:69:54:f2:08:c9:5b:f2:2d:6e:
a0:72:72:d8:5b:4d:19:b8:1c:d1:74:f6:d2:3c:09:37:6c:25:
0d:ff:85:01:69:ca:a3:b9:18:41:fc:d9:e7:1b:5a:2e:d2:9d:
25:f4:71:43:bd:c3:40:46:8a:30:f7:c8:17:21:91:06:33:1c:
1e:ce:9f:61:7e:d2:2c:b1:73:b0:38:6d:74:f1:51:33:40:04:
cb:2b:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:57:28 2025 by rpki-client