Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
File: iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json)
Hash identifier: WPsaGs34MJ3zB8w0HlY7MKE4LNTC6mIxYpwVyTiehbA=
Subject key identifier: FB:BF:78:6F:F8:41:A4:3F:59:93:2F:46:E7:7D:CC:DD:72:1B:2B:55
Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
Certificate issuer: /CN=885e6e65e8d74182039634566cd1fa2b2b325702
Certificate serial: 019652A4E06B512173F3550DDEC90BFBF58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
Manifest number: FD
Signing time: Sun 20 Apr 2025 10:00:59 +0000
Manifest this update: Sun 20 Apr 2025 10:00:59 +0000
Manifest next update: Mon 21 Apr 2025 10:00:59 +0000
Files and hashes: 1: 7R9_GJs-RL0ErJSF-LSh2qvUnoE.roa (hash: vAKa7err3VX58GgPpqscTS8KcHYZ802QYuzRZdVwrE8=)
2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: zawfgAfP9OuGKBYz1pNm8WMldhlbrR9TqkT6r17pwFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:e0:6b:51:21:73:f3:55:0d:de:c9:0b:fb:f5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702
Validity
Not Before: Apr 20 10:00:59 2025 GMT
Not After : Apr 21 10:00:59 2025 GMT
Subject: CN=fbbf786ff841a43f59932f46e77dccdd721b2b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:29:d6:d1:f7:24:14:c6:af:12:00:62:58:b3:
a1:3d:f2:de:f0:ac:dc:bc:70:32:fa:dd:b4:5e:f6:
ee:28:fb:a8:f1:9e:bf:d8:02:02:53:53:c7:35:b7:
3f:49:8b:8f:c2:a4:08:94:d5:7f:36:f8:df:7b:c8:
d6:69:76:97:32:01:57:7c:9e:04:29:68:f4:83:d9:
1b:3d:2c:1e:7d:51:dc:91:b4:69:ee:db:dc:d8:3b:
8d:fc:a2:fa:7a:15:82:35:f0:9d:06:ef:5b:29:1c:
97:66:d5:b7:ac:e5:fa:cf:50:15:9a:79:25:f2:ea:
6b:15:90:2d:1b:0e:03:51:24:ba:83:5d:1a:af:e9:
36:35:8d:ee:5f:75:22:9b:04:11:a7:97:5d:95:fd:
a7:a3:66:9f:06:58:7b:62:78:12:6d:4c:c9:76:b6:
28:43:9d:cd:1c:59:74:f1:1a:8b:da:92:2f:4c:44:
40:8a:c6:d1:70:6e:9d:b3:ce:cc:79:fe:c6:4f:bc:
b6:3b:72:a9:f0:d0:30:f5:d1:99:33:01:22:be:3b:
7b:4b:cc:b1:05:fa:b0:f4:3b:47:8f:1a:9f:df:d6:
e6:7b:ef:fd:7f:f5:fb:3b:36:4b:27:a3:58:99:77:
f4:49:90:fd:6d:d9:07:da:a8:ee:23:d1:12:b1:21:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BF:78:6F:F8:41:A4:3F:59:93:2F:46:E7:7D:CC:DD:72:1B:2B:55
X509v3 Authority Key Identifier:
keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0f:58:c2:bb:86:71:50:22:36:97:23:7f:8c:45:4b:91:8f:
65:d6:80:55:66:b3:19:43:9c:04:cf:f2:1b:f0:87:d8:86:d4:
ac:6f:23:ab:23:25:a8:f3:32:99:b0:f8:51:50:ed:bd:7c:11:
11:33:a6:86:fa:ff:ce:e3:09:74:91:69:c8:6d:6a:9a:5a:56:
0a:e8:f6:63:c1:90:21:03:87:78:56:25:fc:5b:4b:6d:81:75:
35:47:de:54:00:ff:59:5a:5b:37:d9:97:5e:d9:ad:94:91:70:
76:2a:e2:e4:d3:fe:54:78:49:f6:cb:44:7c:b8:fd:4d:e7:39:
87:97:f7:36:22:af:97:c9:28:d3:30:72:34:99:b1:65:c4:46:
f6:39:2d:bc:bc:76:2d:9b:ac:47:f3:1e:73:be:23:6c:d5:1a:
9f:f6:8b:02:ed:ce:8d:cb:8f:22:9c:1c:55:4c:67:fc:84:5e:
7b:b3:06:ac:2e:3e:2f:d5:58:84:f5:2f:bd:eb:df:b5:01:3f:
3d:75:be:aa:54:bd:b9:84:64:7c:2f:5c:b8:85:8a:99:95:6b:
7f:24:bf:bd:3a:78:16:9a:8c:ce:bf:d8:9b:32:2d:50:77:b9:
73:ab:db:fa:68:8f:0a:1c:93:31:0f:d6:b0:0b:17:64:b4:8d:
92:6c:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:57 2025 by rpki-client