Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier: onFppLKjtorGuwVf/vxBw0Gg+Vj4+LS+pXmdLs1lf8w=
Subject key identifier: 2A:F2:05:D0:FB:0C:16:F0:8B:AD:25:04:FD:9F:A7:42:59:67:A0:76
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 01963C8A2C77A52FE9416698A99768666876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number: 14F0
Signing time: Wed 16 Apr 2025 03:00:10 +0000
Manifest this update: Wed 16 Apr 2025 03:00:10 +0000
Manifest next update: Thu 17 Apr 2025 03:00:10 +0000
Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: 7+5fp60ZEKzzibTA5V5UFJORMIbDWe8Q59zXUrBNg+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8a:2c:77:a5:2f:e9:41:66:98:a9:97:68:66:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Apr 16 03:00:10 2025 GMT
Not After : Apr 17 03:00:10 2025 GMT
Subject: CN=2af205d0fb0c16f08bad2504fd9fa7425967a076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:cc:64:a0:1c:ae:5f:f7:20:bb:48:04:33:
80:0a:de:d6:bb:ed:77:95:37:e8:00:d8:ec:d5:79:
ee:0f:a8:e3:e9:d6:bb:05:ac:b1:78:04:f4:e8:bc:
8e:29:e1:f9:b7:66:60:6c:78:ac:24:e9:b7:34:4f:
27:35:6d:11:56:a2:ba:8e:98:01:9a:05:6c:63:5c:
c7:62:ba:d1:f0:c2:84:f6:2b:04:a6:9a:40:7d:51:
19:69:0c:13:7c:f9:c1:8f:ca:5c:48:73:3c:5a:d8:
0b:09:2a:06:a1:0c:ac:cf:b0:03:80:e3:1d:7c:f9:
6a:57:87:cc:ec:5f:58:35:b5:f3:a8:8e:0e:a0:ba:
15:b1:1e:64:3d:90:ad:f6:a0:ac:89:37:3c:47:60:
fa:b6:b6:5f:10:a6:d4:3b:2c:62:44:65:73:63:df:
2b:c0:a3:67:c0:3b:63:47:70:14:6a:db:03:f6:63:
4b:2e:5f:09:f2:70:c9:c0:d9:bf:3f:2f:3c:2c:6f:
53:05:a7:8e:a8:5d:26:7e:2f:fb:ae:59:04:d2:16:
cb:f7:7f:b7:92:75:2e:bb:a9:1a:28:12:8f:76:ce:
fb:5d:be:ec:19:eb:3f:cd:8f:c5:3a:aa:06:31:8f:
36:6f:27:c6:4f:09:d0:00:31:2b:2d:b9:b9:2a:3a:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F2:05:D0:FB:0C:16:F0:8B:AD:25:04:FD:9F:A7:42:59:67:A0:76
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:0a:08:13:22:08:5f:3a:27:82:a8:51:26:e2:d2:cb:6b:30:
58:29:07:04:92:af:10:9d:f9:5f:80:1b:f9:e4:81:3a:d2:40:
01:13:fd:50:be:18:ce:af:17:2b:8a:52:8e:f0:6e:66:aa:61:
89:12:a0:c6:2c:f8:9e:f3:f2:63:47:e0:17:bb:1c:25:bf:e8:
82:db:c0:b2:86:03:3b:20:f9:25:d3:38:76:a2:bf:0f:48:62:
31:6c:3b:8b:94:50:9d:9a:76:40:ec:52:f5:f9:16:f9:45:91:
7a:cf:5b:98:d9:84:ae:80:4f:33:09:f0:d1:25:88:a2:d3:f7:
6c:d4:83:8a:54:f1:7a:cd:36:61:75:f3:f3:ff:07:b0:f4:16:
ef:c0:a5:4f:10:49:13:2b:0f:f2:c7:20:31:e3:21:b2:a9:71:
19:3a:dd:5d:8e:ad:40:c0:c4:cc:73:01:57:df:a0:6c:32:fe:
7d:48:8e:fe:ab:2e:ff:a3:f7:c7:87:7f:e4:2a:f8:c5:df:d2:
5b:9c:e8:2f:9c:98:55:10:5e:52:f0:58:cc:86:78:82:76:ff:
8e:6a:d4:dd:a5:a6:70:40:58:d0:88:38:ad:cf:59:c6:3b:7b:
aa:4f:81:61:3b:37:e1:17:ac:bc:4b:f7:6a:12:b0:e3:e9:0c:
99:bd:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:35:33 2025 by rpki-client