Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: UxDXHur0fQguuYHD72B/CQXI2p9qLqAARAicIhczHzY=
Subject key identifier: 78:18:16:58:DE:54:1D:CE:2C:FF:DD:B2:1D:DD:71:10:E8:77:0C:1F
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019646331AE82A6868857DEDF866DE6E4743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 14F3
Signing time: Fri 18 Apr 2025 00:01:16 +0000
Manifest this update: Fri 18 Apr 2025 00:01:16 +0000
Manifest next update: Sat 19 Apr 2025 00:01:16 +0000
Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: fwpgD+0JEEgQ/Nx29ksznLfs+4mdLCI7LKv8AVdJDaM=)
2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:33:1a:e8:2a:68:68:85:7d:ed:f8:66:de:6e:47:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Apr 18 00:01:16 2025 GMT
Not After : Apr 19 00:01:16 2025 GMT
Subject: CN=78181658de541dce2cffddb21ddd7110e8770c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:ee:30:26:6f:80:89:8c:ba:b9:65:d6:4f:
7d:7f:aa:af:20:c8:4b:40:e3:c4:55:da:74:17:14:
6f:88:a2:fd:4f:e6:6e:f8:1c:4a:67:f4:a8:e6:0b:
62:a3:f5:41:37:24:08:88:73:48:de:8c:04:a5:33:
b2:34:69:2f:71:90:d0:61:d0:ab:89:d6:dc:f1:62:
d0:39:aa:f5:a6:4b:d3:ca:73:be:83:18:91:b0:9b:
fb:72:ee:66:0e:5a:2e:cf:a8:fb:a0:d3:63:e7:88:
f6:73:6e:f8:c1:da:c4:e0:6d:38:9c:c1:69:e3:a6:
e7:d1:7c:f5:6d:58:6f:36:f6:56:aa:05:62:13:91:
0d:70:84:99:a6:a9:1d:ff:d7:e5:81:ff:1f:90:19:
fa:c0:6d:79:08:30:b2:93:d5:81:c1:3c:b4:fa:41:
6b:15:a7:e1:67:61:98:b9:3d:ba:96:8f:69:ba:e4:
e3:3b:30:04:5c:c1:c9:e9:4b:84:15:85:73:8e:f9:
30:20:cc:a9:53:f2:57:08:58:3a:c6:aa:0a:0a:b8:
3a:79:4e:78:b9:7a:a0:4c:a2:2f:63:7e:69:54:9f:
d9:d9:84:d7:e0:4d:4a:07:ff:0f:55:c5:ca:6e:6b:
4e:a4:58:bb:92:47:c0:53:fe:78:84:8e:cf:11:41:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:18:16:58:DE:54:1D:CE:2C:FF:DD:B2:1D:DD:71:10:E8:77:0C:1F
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:59:f7:05:f6:b1:b1:86:16:ce:b2:6c:0a:d3:89:6b:8e:
7e:96:fd:e4:2c:96:de:cc:55:30:8d:22:df:f3:e2:b9:35:26:
78:47:c9:40:c1:11:aa:16:6f:3c:8a:83:da:68:77:e4:63:4d:
58:b0:71:e1:58:3e:25:fb:44:58:dd:5b:38:7f:e5:8f:7b:fd:
0c:fe:e2:17:8f:c7:99:29:5d:4a:0f:fd:76:37:0a:dc:73:af:
f6:66:81:f7:02:b3:07:30:08:ad:d3:08:49:8e:0e:80:de:bb:
6b:a4:02:1d:c6:f1:2c:38:5a:76:a9:5e:27:11:de:60:a0:6e:
16:84:ae:c8:bc:dd:e6:6d:8f:41:c6:16:09:19:ad:c9:9e:a2:
fe:a8:b5:b3:9c:d9:e0:92:3a:58:1a:dd:39:5d:68:71:5f:96:
ab:1e:c5:d2:78:5e:70:c0:a5:55:28:a7:0a:b9:33:fd:9e:5d:
c6:2e:bf:9a:07:d6:ed:56:7b:56:4d:9c:53:c6:0e:96:6a:7b:
e4:a5:75:a5:87:45:ff:c4:38:2d:f8:aa:b2:b0:b6:0c:41:2d:
d0:d5:54:6f:7d:fb:7f:bb:44:30:52:86:ed:b8:be:bb:06:f3:
56:bf:5c:1b:da:69:ef:5e:2f:9d:c7:e1:35:91:18:72:e2:ce:
d7:c6:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:21 2025 by rpki-client