Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: bE8ShZt8UOOBwWs1JBndlakeHR2lndDsgj8mNrY6W24=
Subject key identifier: 35:36:6D:09:F9:7F:D8:62:AF:BF:C9:57:0E:F1:E0:DA:93:DE:BC:18
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 01963B40F7BBAE2AC6F72982DF451FF85F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 054C
Signing time: Tue 15 Apr 2025 21:00:35 +0000
Manifest this update: Tue 15 Apr 2025 21:00:35 +0000
Manifest next update: Wed 16 Apr 2025 21:00:35 +0000
Files and hashes: 1: 23TVA-2OL8ERCOX_dzgjoyDr7ic.roa (hash: HMZHd+55+IMt+Dclhou8M1RYJTwGL8XVXHQpPA4hFCU=)
2: 4-TbcXFa8SESUNpbTLtHqKnqP4k.roa (hash: rfh4ZMQFADgVlOUe/tULyDtfhvBafCEIjiEbbsuqihs=)
3: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
4: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: eKgaamaH+sJPxPG7ap1/0SNxdnk8QQG963XQIZCPhos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:40:f7:bb:ae:2a:c6:f7:29:82:df:45:1f:f8:5f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Apr 15 21:00:35 2025 GMT
Not After : Apr 16 21:00:35 2025 GMT
Subject: CN=35366d09f97fd862afbfc9570ef1e0da93debc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:6b:31:6a:0f:42:67:b7:c5:61:6f:eb:dd:
0e:5a:4f:6b:bc:f3:b1:5f:8a:97:a8:fb:5c:79:ce:
8e:45:d4:9c:b6:f0:34:95:29:80:ae:7f:66:05:cb:
f0:d7:02:13:bd:3f:55:09:7f:88:96:68:e7:ea:b0:
2c:4d:58:81:90:d4:7a:50:8e:6a:3e:71:2d:e6:e0:
99:71:b0:c1:30:47:50:98:0d:31:22:81:69:7d:ec:
7f:1d:56:d3:94:16:f2:f6:7b:1f:07:2b:8b:58:bb:
47:3e:58:d1:f6:76:df:d1:20:c2:68:13:81:ee:ca:
37:36:59:96:27:c7:f7:9f:41:6b:8e:85:18:67:60:
56:d8:23:3f:b7:4f:74:5c:90:7e:2f:a6:f2:1b:81:
d8:5b:95:75:17:5e:f0:2e:28:74:13:c2:21:cb:31:
01:84:9c:82:27:93:9f:e0:b7:1c:79:98:8b:0f:e4:
f2:e6:c7:d6:3e:94:d9:9c:88:ce:fc:28:67:4c:cc:
91:6f:5b:8c:a6:41:48:6d:ab:4e:3a:91:4e:fb:1c:
0e:ab:2a:49:01:3f:0a:51:aa:59:b6:13:31:f7:4e:
c9:6a:f1:93:35:6c:d4:2f:26:8f:b2:bf:a0:38:88:
31:83:62:fe:18:54:c8:99:45:f4:0b:7a:b0:de:14:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:36:6D:09:F9:7F:D8:62:AF:BF:C9:57:0E:F1:E0:DA:93:DE:BC:18
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:16:50:05:22:92:5f:cd:95:ba:71:3d:ab:f4:59:d8:47:f6:
e3:cf:8c:f4:f6:3c:82:18:f5:4a:3c:fe:c8:a5:bb:1f:de:ba:
2d:d5:4c:5a:0f:55:cf:87:ba:6f:2a:66:e4:7d:a3:ba:77:53:
d9:23:8b:03:db:ce:a6:c7:9f:aa:d3:6c:db:5f:82:b4:7a:41:
e1:6b:cc:46:09:e1:ff:e3:d5:6a:9c:12:7e:de:71:1e:17:22:
b9:ac:47:3b:30:9d:08:a2:59:bd:ce:23:2a:62:b2:26:34:e7:
d8:e9:b2:36:14:b0:c3:13:d0:05:92:27:ce:9c:d8:40:06:98:
aa:2b:6d:1c:1d:10:9f:c1:5c:8f:81:25:83:70:9a:0f:7b:d2:
28:a6:f4:94:76:36:fc:5d:2f:88:28:5e:49:29:0e:77:55:e8:
ea:2d:40:f8:e6:79:fd:d7:5b:d2:62:42:e6:e5:40:81:0c:37:
b8:0f:45:24:be:87:ce:be:7b:be:02:58:48:89:0a:6a:d8:8d:
05:2f:d9:a6:48:69:83:7c:b8:64:fd:db:f7:f7:7b:42:83:fe:
8a:ec:29:fb:c2:ba:04:d4:fc:9d:e3:7a:2f:7e:8e:43:24:75:
06:d8:1f:3a:ac:dc:da:e8:bf:57:d3:91:2c:6a:36:ed:8d:74:
3d:16:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:41:26 2025 by rpki-client