Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: 2fOJopVICp4xl36uYhdqMGHPcM6E6Y4wxrGWdpH+sd0=
Subject key identifier: A1:0B:38:0E:C2:4A:9E:E8:E8:A1:FB:78:E5:DE:EB:52:83:43:AA:6D
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 01963F8BC860CFE310C546945725DBE88292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 04A8
Signing time: Wed 16 Apr 2025 17:00:47 +0000
Manifest this update: Wed 16 Apr 2025 17:00:47 +0000
Manifest next update: Thu 17 Apr 2025 17:00:47 +0000
Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: KeibNZFh2a9SLuivqFkNwbhn9gQ7Wz8tK232OW5fPRw=)
2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:c8:60:cf:e3:10:c5:46:94:57:25:db:e8:82:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Apr 16 17:00:47 2025 GMT
Not After : Apr 17 17:00:47 2025 GMT
Subject: CN=a10b380ec24a9ee8e8a1fb78e5deeb528343aa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:72:f7:3f:f6:8a:90:6a:eb:06:85:be:b2:
c5:29:a9:ed:0a:3c:00:41:42:ea:c2:3b:e9:27:d5:
dc:26:a1:fa:39:0d:54:04:61:b2:f8:48:e1:28:41:
dd:c0:1c:a6:96:cc:69:5d:6a:ee:2a:20:a2:e2:03:
cf:5a:0e:db:96:8d:7e:20:1d:3f:9a:c1:50:8a:44:
af:93:1b:f4:83:d0:87:bf:3c:b8:aa:5e:33:9b:c3:
b9:f6:51:53:98:5a:21:de:70:46:57:e8:0a:9f:ea:
6c:5f:4d:a7:4c:df:b5:5c:77:a9:b8:28:d7:ce:17:
35:02:11:8f:c6:30:86:fd:f4:a9:be:e5:d7:77:5c:
d3:14:5a:23:e1:e3:7d:32:8a:c8:e6:5c:1f:a2:59:
75:67:eb:fc:89:33:1f:1e:65:b2:55:be:50:2c:2f:
23:cc:3d:ee:92:f5:14:86:0d:ba:2f:5a:ff:59:ab:
10:42:f4:17:ab:08:37:3d:37:e1:29:4f:b4:76:2f:
5c:a5:04:13:3c:27:7e:1b:75:5f:07:47:f1:3d:a8:
bf:7d:f1:f3:5a:1d:be:e4:82:c6:c3:c4:41:e1:03:
42:51:18:f4:00:f5:90:bc:a9:25:e9:77:43:11:a0:
a4:3c:2b:c9:6c:af:7a:1e:45:72:c0:e1:5a:32:81:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:38:0E:C2:4A:9E:E8:E8:A1:FB:78:E5:DE:EB:52:83:43:AA:6D
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:0f:fe:41:96:01:81:df:bb:19:71:94:49:67:d8:14:93:
bd:20:b0:35:cd:ee:5a:02:10:26:f2:d9:78:69:b9:56:dd:c5:
c7:81:5d:93:79:ca:8b:c8:c6:3f:b5:28:51:dc:d2:1c:52:26:
fc:af:74:eb:d3:41:b8:43:2b:9a:7e:77:52:36:35:cc:80:1c:
bd:d0:3f:e8:46:fe:ac:4f:b0:50:7b:8e:f8:1b:94:5f:63:19:
f8:dc:d0:02:43:ad:8a:c8:34:69:ac:6f:fc:3c:6c:06:91:e2:
7c:a2:aa:66:9f:a4:ce:b9:82:0c:89:4b:b9:b5:81:b4:2c:38:
e7:8f:1b:7d:b7:36:76:ed:7d:59:4c:75:ea:ea:f8:c4:f4:a6:
24:c4:0a:bb:a6:2c:63:b4:68:9a:34:8d:87:2b:22:27:85:19:
19:c2:51:6f:e3:5b:a0:8e:52:6a:42:24:de:76:9d:93:d9:70:
36:d5:ef:02:ce:e1:e6:a6:4b:ec:9e:96:86:f1:44:11:ca:0d:
ae:6e:03:eb:ba:2b:be:9e:cd:b7:5f:f3:6d:bf:09:ba:1c:a1:
78:91:8a:10:72:06:46:91:58:ee:b2:51:20:ed:57:35:09:f7:
a2:63:92:37:25:34:9e:b8:14:cb:9d:f9:44:78:e5:53:b9:f0:
b6:56:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:54:19 2025 by rpki-client