Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: UiH9NZEjNSfWAz/5FQ0S2Qot3Nua8e6F+D9R6PjSYQM=
Subject key identifier: 7F:F1:BC:4C:70:BC:E6:07:E5:C9:09:35:60:08:75:4D:4A:81:BD:FA
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 019657943F6B94B516450B834CEACA9AC3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 09C6
Signing time: Mon 21 Apr 2025 09:00:55 +0000
Manifest this update: Mon 21 Apr 2025 09:00:55 +0000
Manifest next update: Tue 22 Apr 2025 09:00:55 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: D/5mgEOculpwY4zCfaUA3AyKneyNaWGbz73g9l0IOhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:3f:6b:94:b5:16:45:0b:83:4c:ea:ca:9a:c3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Apr 21 09:00:55 2025 GMT
Not After : Apr 22 09:00:55 2025 GMT
Subject: CN=7ff1bc4c70bce607e5c909356008754d4a81bdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7f:df:61:b9:1a:3b:15:44:f3:28:09:01:8d:
49:04:f1:60:ed:c9:a3:20:2c:bf:dc:83:f4:39:6c:
0d:9c:ea:b7:3c:f2:54:95:db:68:8c:cc:25:6f:d8:
2f:d7:e8:0a:a8:01:6f:4d:3b:9f:02:2e:9b:e3:a8:
7d:3d:f6:10:65:cf:cd:24:aa:7b:4f:c0:c0:97:19:
63:fe:0a:be:a8:35:f1:37:e7:77:c2:09:fd:a0:9d:
c7:cd:d5:e4:3f:84:92:92:75:2f:7a:12:0c:dc:a0:
a8:1c:d6:4c:3f:63:e7:1b:75:a8:90:91:9c:80:bc:
b7:a3:9f:51:56:9e:ac:33:fd:21:56:2e:3e:97:de:
c5:47:55:06:64:79:a3:2e:e1:d6:68:0e:c1:9e:da:
a7:63:e7:a4:4f:7b:a8:f5:03:da:91:0d:f6:6f:00:
62:57:46:a1:e4:96:c9:61:bf:b3:32:00:20:db:03:
7b:39:63:52:1b:72:db:96:60:9e:07:f5:63:38:3f:
cb:dc:7a:da:01:dc:77:7f:5b:5e:df:d9:36:54:46:
99:76:22:eb:a1:f8:aa:ab:d5:52:f4:ad:9c:8e:cc:
3e:51:f3:66:ee:dc:74:3f:6c:9a:1b:e7:89:41:1c:
d8:32:21:1c:5b:0e:60:44:b0:d9:43:65:89:4e:21:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F1:BC:4C:70:BC:E6:07:E5:C9:09:35:60:08:75:4D:4A:81:BD:FA
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:1b:ce:52:cb:c0:92:b6:23:2b:ff:ce:16:e8:b5:f7:01:72:
48:ea:6c:ce:ea:4b:83:88:2f:e0:40:8f:a5:b4:e0:9b:65:5c:
3c:50:54:1d:da:7f:63:d2:bb:5c:8b:77:7c:d1:f7:92:df:c6:
3c:af:08:1e:c1:6d:92:16:5f:6f:ff:77:82:45:e2:4c:39:d9:
33:a3:fc:52:37:e1:95:5e:f1:18:81:0e:28:74:cf:f4:90:f8:
19:26:7c:7b:b2:0f:e4:c2:b3:dd:a1:5f:c3:66:43:84:64:a4:
36:9a:22:1a:8e:73:14:d3:ec:89:09:3e:0a:0d:aa:57:97:6f:
28:48:2e:4e:fc:d5:c8:6e:23:ff:7f:3f:55:c1:00:21:47:9a:
1b:ab:b5:db:7a:f6:41:3e:39:a0:c5:57:3d:75:1c:e3:d8:ef:
1b:0b:40:0b:a4:02:60:68:ca:45:87:ab:61:22:eb:93:2d:f4:
4d:0f:3a:ad:a4:64:a3:33:86:a7:01:0f:19:c3:88:13:30:ee:
c2:44:ed:8a:e9:10:e9:f3:87:16:37:ee:55:54:67:a0:ae:12:
a3:75:da:94:01:3b:fe:6e:f0:74:aa:0f:bb:b7:11:2a:28:2e:
61:eb:e9:26:9f:03:b9:4b:f1:8b:35:76:32:de:7d:c0:30:d6:
2e:48:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:04 2025 by rpki-client