Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: hzxuh0xPhwHwLrMWhtVEKr0X4dE3d3093pGOOsctJTc=
Subject key identifier: A4:BA:95:F1:4F:AC:34:3D:F9:74:23:80:CC:4A:98:AD:C4:E1:98:E1
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 019635E3598533326493F0F1C8D132B94733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 1343
Signing time: Mon 14 Apr 2025 20:00:14 +0000
Manifest this update: Mon 14 Apr 2025 20:00:14 +0000
Manifest next update: Tue 15 Apr 2025 20:00:14 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: 9KVjoS4TcMP66B78CcyZ+Q64KmKurvGljG+IYtOTqGg=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:e3:59:85:33:32:64:93:f0:f1:c8:d1:32:b9:47:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Apr 14 20:00:14 2025 GMT
Not After : Apr 15 20:00:14 2025 GMT
Subject: CN=a4ba95f14fac343df9742380cc4a98adc4e198e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:72:15:87:ac:56:06:d8:44:e1:56:90:5e:
9d:e9:b2:25:a7:be:90:bc:ae:3a:0f:ef:92:c3:83:
ce:26:b6:eb:0a:86:df:06:41:47:2a:08:d9:54:03:
4b:6e:24:22:c5:b7:6e:35:c8:08:e5:23:46:fd:4a:
a3:e0:a2:70:a1:fb:42:9c:89:45:ad:c9:bf:cd:86:
6f:0d:bd:f8:45:75:12:23:5d:e6:40:73:f0:b6:fd:
93:66:b5:c8:c2:07:7d:d1:a0:3d:41:1b:cc:e9:8c:
42:b9:f8:18:3e:a8:62:cf:05:d8:22:23:be:09:71:
1e:75:4d:c8:c9:c5:91:48:c1:fc:85:14:eb:fd:85:
01:85:87:43:aa:61:50:57:09:8c:62:5b:93:e6:02:
53:c6:6a:1a:0b:5e:0e:79:96:08:ff:9e:c3:ba:08:
b3:2b:0f:b5:32:ca:eb:de:04:98:b7:e7:0d:31:6d:
20:21:e9:bf:e7:07:1b:a7:29:d8:10:27:77:c0:05:
4c:bc:20:a1:9c:c8:2d:4f:d9:bc:47:ac:74:58:7d:
74:11:25:91:c6:ed:16:ee:be:2d:bc:a8:5b:3f:ae:
8a:94:c8:d6:b2:49:26:b3:83:c2:19:70:c1:25:8b:
e6:f5:e0:91:d1:12:64:78:aa:08:18:64:7b:a2:14:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:95:F1:4F:AC:34:3D:F9:74:23:80:CC:4A:98:AD:C4:E1:98:E1
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:48:30:44:f9:f8:4e:ab:6e:ea:18:79:ed:79:db:3c:a6:c0:
fd:73:70:42:e7:cc:de:b8:e0:ae:5b:50:9e:9e:4f:02:05:a2:
90:7d:67:e9:4e:30:d7:31:ed:a3:a4:2b:5f:7e:6d:9e:2e:9a:
c5:a9:6f:5e:9e:32:4d:5c:1c:af:31:3f:af:7f:0b:8c:a4:67:
16:c4:54:07:b9:e8:4c:47:7d:a7:5d:a3:7e:ea:1c:f2:2b:b7:
5d:2a:aa:ec:bd:6f:12:f9:6f:2e:40:ef:24:27:ba:75:30:21:
7b:16:f3:16:b4:66:8b:4c:92:43:3e:67:ce:38:cc:54:89:85:
d3:09:f6:3e:1a:0a:1e:0e:aa:be:a8:71:e3:36:ad:87:67:ea:
77:29:89:4b:ad:3d:9b:f0:d0:59:78:57:d7:c1:81:35:22:73:
22:64:5a:35:ed:ff:33:37:bd:bf:8f:1e:3c:bc:72:f8:9c:ac:
e2:46:06:a9:84:62:97:ad:99:b2:62:58:e6:3b:06:65:6b:60:
36:7d:6a:8f:6e:dc:74:84:2a:58:9c:4c:3c:72:93:d6:25:a6:
25:ae:32:b5:79:20:86:f2:c6:6c:38:d2:a6:39:55:62:34:ea:
18:fe:cf:5b:50:7a:c5:4f:18:8c:b3:01:f8:fe:9e:78:b5:87:
c4:22:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:07:16 2025 by rpki-client