Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: +wYsYG0BAKLoTJJE/DwRUOFM8GbwIsNMexVVO/d3vmw=
Subject key identifier: 3F:4A:2D:37:B5:E3:C7:09:78:5A:0F:52:7D:72:C8:DD:79:FF:DB:FB
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 01965D5F081E07024438A3DA60CC14FBF7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 03F0
Signing time: Tue 22 Apr 2025 12:00:31 +0000
Manifest this update: Tue 22 Apr 2025 12:00:31 +0000
Manifest next update: Wed 23 Apr 2025 12:00:31 +0000
Files and hashes: 1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: e6YqnRrF5bi5JmTZFXznJ7W7bp9Y05wYYtaLobMsH6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:08:1e:07:02:44:38:a3:da:60:cc:14:fb:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Apr 22 12:00:31 2025 GMT
Not After : Apr 23 12:00:31 2025 GMT
Subject: CN=3f4a2d37b5e3c709785a0f527d72c8dd79ffdbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:a5:11:40:1f:c5:1e:86:82:f5:20:6c:7c:
79:2d:70:ea:ac:83:ff:f1:1e:8f:e7:a7:3b:43:09:
3a:b4:ea:8e:98:92:15:19:3c:19:ea:7e:8e:72:73:
d8:c5:3f:0f:0f:06:c1:2a:cb:38:e1:32:c4:cd:50:
a1:2e:de:99:a4:49:59:b3:8c:da:42:a3:84:9e:aa:
7f:3e:dd:83:6a:9a:12:1d:c3:bb:8b:4a:74:ca:af:
0a:09:e2:89:b2:00:c8:83:ec:ef:c5:6a:0b:7e:f2:
73:d7:15:6f:8f:51:c3:d6:bf:33:c2:af:31:29:11:
00:c8:6f:dd:db:2b:bd:eb:2c:3d:b1:1b:ed:2c:53:
d5:5c:1a:96:29:1b:db:ec:49:d3:16:82:d9:71:ce:
0d:e1:a5:f4:8a:cb:80:43:b9:b2:9d:94:f9:f5:26:
55:51:59:dd:00:19:e3:44:87:06:49:10:b6:27:58:
1b:83:11:c1:80:f4:d6:4a:01:4d:5a:07:33:d2:84:
7b:36:ba:7d:7f:81:49:b5:26:84:95:63:bd:15:8d:
da:cf:64:5b:30:d1:cd:f2:12:ed:94:f4:49:aa:8b:
61:c5:06:d2:25:c6:f5:28:1b:3e:04:50:3c:61:c9:
58:f3:84:7e:da:f0:ee:70:a0:68:df:c1:b8:70:45:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:2D:37:B5:E3:C7:09:78:5A:0F:52:7D:72:C8:DD:79:FF:DB:FB
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8c:e0:ae:72:47:7d:a3:df:46:b8:b2:34:45:e0:08:9b:82:
9b:d4:3a:e9:69:a1:22:ae:53:aa:3a:16:3a:87:9c:6a:f7:04:
bb:37:10:87:e0:36:6e:70:59:2a:36:8d:a3:dd:3d:15:4f:ce:
2b:d3:1c:2f:1e:52:04:4d:ad:89:df:41:7f:d1:31:fc:79:c4:
cb:92:01:74:c3:75:2c:a2:b6:e9:5b:2e:3a:9e:26:84:86:a5:
02:f2:65:0c:1a:4a:d2:8f:c3:ad:de:05:d5:8f:49:71:f6:f9:
51:1f:ab:66:d6:11:c3:87:e2:f2:02:98:62:40:40:8f:bc:ce:
69:e4:f8:ee:f7:01:15:bc:21:c7:3e:e3:b9:84:ff:4a:97:ed:
51:a1:a9:bf:1b:d3:9e:0e:1b:39:2c:55:a7:a8:21:16:81:f8:
60:c1:b3:f5:6d:60:44:b5:b9:e6:4d:2e:68:27:96:ca:33:27:
27:1d:19:0e:44:86:bd:e4:57:97:55:ee:2c:14:fc:7e:16:70:
14:d1:1f:e0:ff:e6:11:1e:dd:0f:ea:4e:31:8b:bb:b2:1b:cd:
f6:62:20:f5:6b:83:a7:ff:d4:83:df:95:04:ab:8f:52:92:02:
2e:64:13:4c:32:9c:29:79:e9:29:16:29:fe:11:ad:dc:76:cb:
13:24:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:36:45 2025 by rpki-client