Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: aY8dt3zDLl9ixivwhK3a8z0voLY7rPROsRZxTEPPXL0=
Subject key identifier: EF:11:49:A0:90:08:F2:F3:EE:79:65:4A:37:A3:3A:4A:4F:9B:E3:44
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 019649D820A44BAE5C9C9FCFA53161356926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: B0
Signing time: Fri 18 Apr 2025 17:00:22 +0000
Manifest this update: Fri 18 Apr 2025 17:00:22 +0000
Manifest next update: Sat 19 Apr 2025 17:00:22 +0000
Files and hashes: 1: NwE-Q3U5NROLLw8YZo5SdVq6prU.roa (hash: 4nK8pCzkjFWGecL8LPoOkleHLxc20BBIlahc8LVNGkQ=)
2: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: yuaEHRMLGY4s4bmzDp5R2q8WoHU1OoiOegJRKQNnl2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:20:a4:4b:ae:5c:9c:9f:cf:a5:31:61:35:69:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Apr 18 17:00:22 2025 GMT
Not After : Apr 19 17:00:22 2025 GMT
Subject: CN=ef1149a09008f2f3ee79654a37a33a4a4f9be344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:91:1e:06:ae:b2:17:78:fd:02:73:08:3e:
b3:27:33:0b:bf:9f:08:89:e5:08:91:c6:75:96:f8:
04:75:a3:8e:71:84:61:7b:e5:3b:7d:3f:a1:3a:74:
58:87:1f:80:c9:0f:c3:02:60:f6:b7:92:73:e7:99:
af:31:97:99:f3:e5:44:76:84:4e:7f:50:e0:01:52:
89:ed:dd:54:bd:7e:4a:ce:b9:fe:66:9b:e4:8c:a2:
9a:08:2f:70:a5:99:ac:74:72:de:81:40:03:c9:c5:
5f:45:00:45:6f:f9:66:64:df:b4:0a:92:cc:9f:76:
7b:16:f7:42:f4:e1:c1:81:5e:a6:9f:0c:d6:73:86:
32:f0:db:1e:b7:88:62:28:6c:41:6c:65:6e:68:5a:
fa:94:c5:dd:c7:13:24:c9:d8:d5:f2:ac:6d:63:e9:
9c:bf:5c:2e:de:8b:7d:d6:4c:57:60:60:62:60:a9:
bd:3e:21:80:aa:08:59:34:a9:8e:e3:24:03:3d:70:
3e:7e:62:85:14:25:c9:27:16:3b:e3:49:91:98:b4:
a6:4c:72:bb:a4:1b:7a:a8:11:3d:49:db:fe:28:f1:
8a:17:f1:f5:a4:97:2d:7a:28:29:a8:1a:17:c5:bf:
a1:16:c6:9a:a1:a8:5e:82:e6:b3:6f:18:8c:fa:58:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:49:A0:90:08:F2:F3:EE:79:65:4A:37:A3:3A:4A:4F:9B:E3:44
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e1:f6:76:0b:8d:ca:41:5e:f4:1e:36:12:bc:6f:7c:79:30:
cb:a7:13:d5:76:5f:03:56:7c:e4:58:9f:c3:3a:af:0f:9b:7b:
73:05:11:4c:cd:d8:72:91:fb:93:1c:bf:68:64:26:8f:3e:70:
f1:fb:4a:c5:c0:c9:f0:d5:40:c7:e9:a7:63:ae:fd:1c:35:11:
63:5d:3c:2a:35:57:0b:2b:1d:d4:2a:1e:56:26:ff:d7:02:5e:
49:e7:5e:31:1e:13:2c:4f:f2:b9:72:63:15:d8:5d:10:6f:07:
b5:df:86:e1:77:82:e8:5a:8d:01:54:e6:c8:ef:52:16:5d:88:
de:8c:30:93:50:2c:bd:20:2d:2b:f9:e6:a8:98:d0:6c:09:4d:
0c:92:3c:cb:cc:d1:e4:2c:c1:bb:ff:18:ed:3b:76:fa:8f:d7:
75:42:46:85:4d:d1:42:32:ed:90:ab:e1:c2:59:9a:8a:af:85:
c5:1d:52:e5:12:c0:24:59:cf:7d:a9:e4:da:75:6d:23:ff:63:
8d:35:c4:83:1a:8c:b0:cd:0c:e6:74:37:1c:de:c4:1c:a6:99:
c1:5e:eb:31:90:87:08:ff:25:8a:3f:0b:c0:af:62:54:59:3b:
08:6e:e6:6d:01:3f:6e:bf:38:6b:ea:ee:a8:55:64:4b:4d:32:
1e:b9:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:29:59 2025 by rpki-client