Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: okWVSrEatUwJi7uBW75OD6jSRUWP5YPKWFFt+EAvmHs=
Subject key identifier: 72:57:33:79:D1:9F:55:89:90:24:6B:2C:45:42:CC:B3:67:01:2F:D0
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 0196594B6E580C5009BB80C808231771147C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 17:00:37 +0000
Manifest this update: Mon 21 Apr 2025 17:00:37 +0000
Manifest next update: Tue 22 Apr 2025 17:00:37 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: aEsZHnw0B7tH6hFt+hZfGoBrTqWGTBkw5ZHeFf+V9rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:6e:58:0c:50:09:bb:80:c8:08:23:17:71:14:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Apr 21 17:00:37 2025 GMT
Not After : Apr 22 17:00:37 2025 GMT
Subject: CN=72573379d19f558990246b2c4542ccb367012fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:76:81:8b:5f:b9:43:31:c8:0b:a5:45:f3:
0d:12:1a:d5:b3:0b:1d:cd:d2:bd:a2:bd:e7:19:ec:
7c:a7:ac:9a:ad:5e:aa:e6:6a:af:da:5a:24:62:a8:
39:eb:b6:ae:65:43:1b:8e:d1:5c:67:c9:a5:0f:95:
d8:a5:82:1b:18:bb:94:17:f6:71:7a:47:2b:04:84:
3d:74:bc:49:86:90:af:d0:c9:d7:c0:c0:84:d4:65:
dd:0e:3b:14:ce:21:85:90:3c:2e:c7:9b:8c:d8:ce:
56:26:77:09:4d:63:9c:59:3d:b4:42:cc:0c:98:b3:
db:46:c8:f8:39:5f:0b:5b:9d:d0:b2:83:ea:bf:d3:
bb:55:ec:9f:48:5b:1f:df:89:06:a6:e2:56:8a:d6:
3e:1b:f3:db:a6:50:bf:40:ab:2f:08:54:74:a3:f0:
6d:59:1b:88:5e:01:72:91:4a:bd:00:68:d8:d6:c1:
b1:c9:06:73:af:4c:49:39:05:d1:a5:f5:0d:80:83:
fc:05:08:7b:75:bc:03:d3:6c:34:ae:d2:6d:ac:cc:
7a:a3:50:66:01:bf:f4:9f:98:cc:50:51:e4:42:d1:
60:35:be:29:70:72:a5:07:d1:f5:a0:1f:ad:56:75:
58:9e:32:45:75:8d:ac:34:d6:83:31:f9:40:1d:83:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:33:79:D1:9F:55:89:90:24:6B:2C:45:42:CC:B3:67:01:2F:D0
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a6:18:50:e6:b9:cc:e9:69:aa:5d:0f:c8:2b:18:3b:64:b0:
4d:8b:c7:1e:06:59:85:be:a6:09:0d:57:66:c1:c9:4a:ee:67:
fe:93:c3:7c:d5:ba:18:46:c4:0c:22:a5:63:af:b1:5e:4a:4b:
36:df:eb:0f:45:b3:b9:a8:aa:8a:ff:83:68:d9:f1:04:05:dc:
2b:12:f0:5f:73:14:88:3d:1d:e2:ef:d3:15:d5:f7:48:01:55:
48:3f:8f:e9:38:ab:50:1a:a6:4b:3b:c8:18:57:ee:3a:cb:c8:
02:a4:25:93:ee:3b:a0:ec:4a:71:db:1e:37:57:67:db:1a:4c:
72:01:fb:ba:27:c8:cc:cb:34:e3:dd:89:f6:bf:df:12:af:db:
f4:97:a1:3e:3f:1c:8f:9f:3c:15:62:cb:f1:6b:fa:f8:e9:19:
97:bb:b8:65:76:77:8a:b7:63:38:70:e8:5f:07:eb:dc:29:ab:
4c:88:2d:94:9c:57:df:ab:7f:3d:c3:98:9a:88:2a:a5:3c:90:
c4:da:5a:58:c8:18:3b:27:ee:88:f2:23:5d:37:57:b8:16:9a:
9b:43:7f:91:e2:6d:df:70:a7:71:d6:a7:ea:70:03:94:3e:b7:
e4:93:96:f1:b4:48:b5:30:d0:dc:dc:cc:f7:da:af:b4:a8:46:
2a:86:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:09 2025 by rpki-client