Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier: ERE2zemmNQIVnpJGXh+GInsJ1ycGxBIPybay8TDRHI8=
Subject key identifier: 9B:8D:D5:CE:03:2B:95:32:44:E6:31:1E:10:A5:37:07:59:18:92:7D
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 019659152C9EED109AF7D2E1F038DA34820B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number: 10FE
Signing time: Mon 21 Apr 2025 16:01:21 +0000
Manifest this update: Mon 21 Apr 2025 16:01:21 +0000
Manifest next update: Tue 22 Apr 2025 16:01:21 +0000
Files and hashes: 1: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (hash: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=)
2: Vt65vwu21Gw3Ig_WCeQCArrV49M.roa (hash: JhPPfXj32nubKkCUS1s8L7cjVu7ayJ+kkjBpXd9CNao=)
3: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: 0vbPYSwcfrSfsXE3SZIx53TO52xxWdp/xkfzkXEXsX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:2c:9e:ed:10:9a:f7:d2:e1:f0:38:da:34:82:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Apr 21 16:01:21 2025 GMT
Not After : Apr 22 16:01:21 2025 GMT
Subject: CN=9b8dd5ce032b953244e6311e10a537075918927d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:02:1f:37:82:1d:8b:35:dd:6f:56:5b:30:
e6:c7:d5:81:0b:ff:84:f4:6b:49:3e:85:d7:ed:4e:
39:b8:a3:f2:75:6a:4e:ac:ff:da:72:a6:40:30:10:
6f:37:96:7c:2d:17:fa:71:ce:6b:e8:6c:c3:f9:07:
34:0c:ae:d7:e7:9a:19:56:13:76:17:fd:f1:12:b1:
6e:de:3b:ab:b1:aa:f5:73:87:96:a9:e4:87:07:f5:
03:28:f2:89:a7:d1:db:33:d7:6a:60:d9:6e:45:dd:
c0:83:c4:e5:83:be:d1:43:08:23:90:48:7e:cc:74:
ea:b4:72:3d:71:4b:7d:13:68:aa:de:03:10:71:6b:
05:79:09:34:d2:60:e7:0a:fe:9b:09:1e:d8:f1:db:
77:ac:19:86:71:4c:8e:b4:c8:48:8d:c3:41:20:4f:
87:43:ca:d9:74:fb:a6:eb:88:8a:eb:75:bd:61:fb:
37:97:32:3d:48:92:9d:82:ce:ec:ec:ef:af:cb:9f:
72:aa:d9:52:1f:13:ba:05:53:9f:74:a5:b2:55:17:
be:8b:f3:d4:23:85:46:a7:d9:33:82:3c:53:02:25:
7e:f2:ab:16:83:3c:06:de:b6:f2:e4:c6:3e:48:bd:
59:02:db:6d:ea:fc:fb:96:b0:d4:ca:de:ed:fe:50:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8D:D5:CE:03:2B:95:32:44:E6:31:1E:10:A5:37:07:59:18:92:7D
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:70:56:c2:d3:27:f6:f5:44:1c:c8:01:e5:01:80:8c:69:
9c:aa:b1:e8:7d:dc:53:e4:c0:c2:b4:c7:0d:87:4c:79:39:0e:
32:e1:20:80:47:a8:1d:e7:a6:3c:3f:9d:7a:4e:4c:ed:a4:99:
9f:a8:52:10:bc:31:23:23:42:00:2b:24:12:ca:9e:00:39:89:
75:26:96:98:42:99:b4:aa:61:9e:2a:6e:74:a7:36:7d:78:e8:
5e:33:62:dc:32:ba:e1:bb:e5:c6:d6:7b:3e:2a:23:de:4c:b3:
21:e9:0e:6f:b1:65:84:53:43:80:9d:fc:66:6d:8e:a2:f2:19:
43:c5:0a:38:e9:f7:ae:e1:02:31:46:d7:41:24:28:20:e9:66:
40:9c:ef:95:42:23:4c:4b:af:bc:7c:0c:b8:12:db:3a:a8:cc:
85:8c:a4:d4:bf:23:dc:fd:7d:12:62:74:05:9b:a7:ea:69:8e:
8c:ca:fd:2e:66:61:f2:48:db:15:cf:4b:24:43:ec:5a:b8:f7:
06:c0:40:2c:91:2e:f0:05:86:89:4c:10:b9:a4:4f:af:b5:bf:
6f:97:e4:bd:ff:45:2f:2e:45:e8:3d:76:08:ff:69:b1:ca:fe:
56:dd:6f:5f:f0:c4:ec:94:8f:67:95:5d:db:f4:2b:1e:58:56:
1c:07:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:20 2025 by rpki-client