Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: ZSP69XHuDhy1NWYJkHfre4WPsZH8nWeMcrwmTCdCF/k=
Subject key identifier: 40:DF:8F:9E:E1:F4:56:E7:A2:4F:49:CC:27:D2:F1:B4:11:AF:BB:A1
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 01964D7E831EBD216CA44C279B16F218E038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 10:00:58 +0000
Manifest this update: Sat 19 Apr 2025 10:00:58 +0000
Manifest next update: Sun 20 Apr 2025 10:00:58 +0000
Files and hashes: 1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: sqd1HzQSNQZlKIb1CtUPyugDTRJnnjpXnKEWW/QU69U=)
2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:83:1e:bd:21:6c:a4:4c:27:9b:16:f2:18:e0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Apr 19 10:00:58 2025 GMT
Not After : Apr 20 10:00:58 2025 GMT
Subject: CN=40df8f9ee1f456e7a24f49cc27d2f1b411afbba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:5e:d3:fe:fd:b0:a4:0c:5a:92:16:9b:d6:
5e:04:ae:8f:13:c2:cb:14:a1:cd:64:49:30:59:76:
e4:c2:96:f0:b7:3d:e8:ef:50:dc:82:d1:42:ce:bf:
88:c9:02:a9:19:2f:50:f3:b5:2c:b0:2d:9d:10:ef:
3d:9c:12:34:ee:67:6d:5e:9a:7a:dd:f3:c7:38:ab:
48:53:a6:6e:29:cf:73:28:3a:20:fe:91:26:7e:21:
18:ca:68:2e:65:54:08:43:5c:27:b3:54:a4:b5:bb:
b4:7a:66:2e:0e:d4:cf:6b:9e:fa:69:83:41:c5:b2:
4f:0f:4c:15:13:97:e1:c6:83:3d:76:95:6b:5a:a6:
cb:25:1a:bf:c9:c3:1f:b3:c0:86:4d:a6:0f:6f:bf:
ab:0a:6c:cb:0d:2a:1a:51:7d:6d:59:56:6c:5d:ff:
e8:40:7e:0d:b0:99:d4:89:e3:75:2e:02:57:c1:90:
01:af:17:85:23:ee:cd:f5:26:78:04:86:05:13:3e:
e9:e7:dd:a8:ea:42:76:33:f8:74:72:6a:68:70:db:
60:bb:ad:ae:18:4c:e3:4e:a4:17:87:12:3f:c3:18:
69:a0:ed:63:ef:17:e5:23:56:61:c2:72:6c:72:48:
fc:9d:5b:57:3d:88:7d:29:29:23:44:b9:64:45:f8:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:8F:9E:E1:F4:56:E7:A2:4F:49:CC:27:D2:F1:B4:11:AF:BB:A1
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6f:ac:b4:83:b4:a4:1b:db:46:ba:b2:df:ee:a4:01:56:b3:
84:77:8b:15:c7:73:47:02:9b:3c:97:d4:d9:04:d2:e4:31:2c:
c8:6b:70:77:93:76:d6:b0:06:21:6d:8d:1d:5a:89:25:73:88:
71:f2:e3:3e:6b:7c:58:c0:b3:88:99:a0:df:0d:38:73:2b:40:
2c:ec:41:59:54:d7:58:b1:0c:92:5d:c1:fc:af:14:cd:d1:8b:
23:17:fe:68:8c:64:c6:e6:8b:6c:94:82:e7:92:5f:ee:74:48:
9e:55:c6:03:3d:07:6e:7c:c7:fa:d9:6f:24:2a:25:05:02:fc:
e0:2e:c7:c4:1b:6f:b9:51:67:83:7e:5b:90:96:f3:0a:4c:a6:
b8:7c:56:32:82:b6:dd:08:49:76:d2:16:10:f7:0b:c9:05:4f:
7d:63:99:81:29:80:f9:a7:d0:ec:14:f6:ca:5f:8b:7f:95:50:
4a:19:16:60:4f:1e:a5:5c:9e:cc:bb:f3:73:72:de:be:d5:39:
d9:87:73:cc:40:b5:05:3d:8a:4f:c4:cf:de:f6:b1:6f:a3:f7:
18:f1:75:f9:53:ed:a8:6c:24:97:d1:2f:ac:cf:d7:ea:5a:da:
df:20:28:50:05:0b:46:2f:6d:5f:d6:b5:51:19:a4:5d:b0:2a:
39:cc:b1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:07 2025 by rpki-client