Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: 5KzjlHCcJr1Q1gG08XiFmjxOEd4xkZzNQEwmPmA0Mfg=
Subject key identifier: 45:D0:34:40:48:99:07:16:76:7E:F9:3F:93:43:A6:1E:03:CF:CE:F8
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 01965613B763A4827E0728CC336D758452E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 02:00:54 +0000
Manifest this update: Mon 21 Apr 2025 02:00:54 +0000
Manifest next update: Tue 22 Apr 2025 02:00:54 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: y4MqR2iU3KcgzP193c5OAt5EEZtGaJhYdVJ0fF2hM64=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:b7:63:a4:82:7e:07:28:cc:33:6d:75:84:52:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Apr 21 02:00:54 2025 GMT
Not After : Apr 22 02:00:54 2025 GMT
Subject: CN=45d0344048990716767ef93f9343a61e03cfcef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:95:6b:99:33:6a:cc:fa:22:37:8b:f6:ec:97:
25:91:7b:a8:10:66:3c:2d:2e:a3:9b:37:5f:62:49:
90:11:10:41:f6:2b:88:fd:15:fd:b7:96:1d:59:e4:
7e:23:74:94:15:9f:59:2e:3c:5a:2f:e1:5d:c7:c7:
01:30:30:28:18:c3:11:2a:92:dd:dd:d5:6a:f5:56:
66:3b:6c:02:0c:04:00:2e:0f:3d:61:e4:b6:68:66:
fe:f8:c4:8b:fe:d3:29:32:fd:05:e5:cf:e8:89:e7:
d8:64:7b:58:39:02:8c:4c:f3:38:d7:cd:02:3a:09:
2d:4d:8f:f3:7a:ed:16:b4:2d:68:36:a4:fe:56:af:
44:74:9d:58:cd:6c:c5:0a:77:e4:8a:4b:34:1f:a0:
80:d4:42:ad:34:5e:60:6e:30:1c:81:d4:9c:30:98:
65:67:b2:8e:5c:cf:3f:06:0a:1d:48:60:fe:df:f9:
1b:72:a1:45:b7:b4:44:4c:01:a1:b2:b5:72:53:b1:
f8:92:1e:d3:92:69:d9:8b:89:57:28:6b:e9:21:30:
c5:5f:68:95:af:40:7c:63:b2:14:50:ee:72:73:50:
0a:ce:2e:80:a9:1c:a1:d1:df:65:19:38:ab:d3:48:
4c:bf:65:68:9c:30:7c:3b:8c:0d:26:c5:f9:c9:6e:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:34:40:48:99:07:16:76:7E:F9:3F:93:43:A6:1E:03:CF:CE:F8
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:cf:67:99:f7:36:b2:d4:04:cc:b3:4c:5f:7e:c5:40:eb:79:
2b:e4:d7:cd:bd:1a:ad:c9:17:99:a1:9d:78:77:f3:b1:17:9e:
b9:8e:d4:e1:43:f0:51:7b:f3:0e:a8:b2:b2:71:c0:cb:65:9c:
3d:ea:16:42:41:46:d6:72:73:41:21:c6:d1:62:34:80:58:e3:
fa:6b:66:b4:cf:b7:a3:2b:10:d9:43:36:63:88:07:22:92:53:
cd:06:c4:07:0a:8a:df:a0:75:8a:42:ae:e0:b9:7d:9f:49:62:
55:52:66:dc:c2:47:dc:af:7b:db:0e:c5:f2:4d:9b:df:a2:8a:
f3:64:1f:b2:ea:50:2a:7e:c0:aa:c8:7f:5e:98:d4:50:61:b3:
1b:af:6d:ae:fd:8d:54:22:3f:63:33:d3:52:8f:65:e6:a7:85:
d1:86:67:3f:b7:e5:6e:4a:1c:74:ce:65:db:e3:bd:8c:f0:a0:
f5:d3:4a:d0:b8:57:05:75:66:c5:3d:cc:27:3f:15:04:07:cf:
49:04:ad:91:2d:82:ed:d0:6f:3d:ee:9e:e7:38:54:24:a8:cf:
82:1b:a1:06:f0:95:bc:d8:0b:44:30:1a:3b:72:e0:86:61:5f:
33:b2:ac:99:16:41:33:60:18:ed:20:50:77:15:5a:76:96:3c:
6b:26:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:16 2025 by rpki-client