Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: ZzBAtx545Yrl1SMQtCdM/UX1LPiX7dNH6kXecxW1qs8=
Subject key identifier: F7:2C:AD:5E:37:E0:2C:96:B7:74:D7:19:3B:E7:AA:52:D4:DD:53:33
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019644B239196A35E056E941F33F1591FB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 1189
Signing time: Thu 17 Apr 2025 17:00:52 +0000
Manifest this update: Thu 17 Apr 2025 17:00:52 +0000
Manifest next update: Fri 18 Apr 2025 17:00:52 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: XsWuFR4/34nFHxGAuFw305hLMaKX4O7e+g5a5zXulEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:39:19:6a:35:e0:56:e9:41:f3:3f:15:91:fb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Apr 17 17:00:52 2025 GMT
Not After : Apr 18 17:00:52 2025 GMT
Subject: CN=f72cad5e37e02c96b774d7193be7aa52d4dd5333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:88:2d:85:f2:14:c4:09:a2:2b:ba:62:c0:
64:3b:52:ab:bc:1c:a1:60:c4:32:5d:9f:45:72:2d:
e3:ad:9e:2e:32:b9:40:81:78:c8:d5:ca:33:55:f9:
5e:be:02:bb:64:fc:a5:2a:f1:ef:b0:59:55:e0:31:
0e:60:45:90:b5:ef:8a:18:8b:95:12:30:ba:30:7e:
73:78:e4:a5:14:12:09:cc:fb:50:95:f9:71:fe:0d:
c5:ad:91:78:33:02:c5:50:9f:98:40:52:4f:9d:68:
7a:83:18:30:d3:db:98:e8:57:a1:8c:79:8a:dc:c5:
74:59:f4:d7:0b:2c:0c:d8:89:03:3e:c3:6b:d9:aa:
5b:49:c8:ff:36:89:c0:43:4c:3d:08:fc:8b:f8:78:
bf:e8:31:5c:21:c6:94:f4:46:f8:81:8d:93:af:c7:
02:92:2d:73:56:a8:79:bc:33:88:ae:54:04:f1:cd:
6b:bb:a5:7d:8c:6e:b3:b2:94:ba:4a:d7:37:b8:49:
ff:dd:9d:1b:31:3b:fe:a3:39:52:1a:77:cc:25:f6:
95:ff:e3:80:5a:38:d6:9b:67:7f:ec:84:6c:52:06:
09:1c:30:56:9f:b6:73:2e:4d:34:4e:f0:29:c5:5d:
4c:81:81:9c:50:7b:58:58:1c:bc:06:51:39:8a:e1:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:AD:5E:37:E0:2C:96:B7:74:D7:19:3B:E7:AA:52:D4:DD:53:33
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c1:54:f7:38:af:8f:8d:b7:5a:e8:3a:57:f4:30:42:54:b3:
46:e8:18:22:58:2e:53:5e:be:8b:e1:99:79:7e:5e:26:c1:da:
df:96:65:7a:76:7c:e2:c8:a2:7f:c6:2b:55:b3:b7:83:08:35:
ec:4a:f6:81:17:d9:6f:16:b3:7d:f1:c7:8e:ae:c3:7e:d5:bc:
1d:bc:3a:b2:a9:2b:90:bb:a2:2e:fd:81:6f:1e:64:04:d1:93:
bf:4e:08:af:3d:80:42:ca:6b:47:ec:29:ef:f4:7b:80:44:f3:
b5:ea:79:74:39:f6:e5:a7:60:ef:b7:a0:fc:aa:e3:a0:bd:a2:
23:1d:1f:ac:6a:ac:9e:44:9b:db:1e:b6:b5:b3:52:38:95:f1:
0e:84:29:89:49:e8:12:4e:59:6e:9c:56:15:e1:e9:48:b0:ed:
b7:68:dd:23:1f:29:e8:a6:3e:d5:f5:e4:32:1f:88:7d:7d:4a:
62:9d:ef:7f:5c:a9:5c:4c:19:ca:29:7e:63:fd:c9:f1:3b:91:
5f:9c:b7:a4:dc:03:a6:c1:08:a7:a4:49:90:ea:6d:20:11:16:
33:94:0c:da:2a:da:2c:66:81:9b:44:31:c5:b8:9d:cb:9f:92:
3e:d8:cc:b5:43:ce:39:87:ab:68:37:b7:33:36:c7:07:c1:19:
42:01:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:48 2025 by rpki-client