Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: JgOhgy99wic9gByCqiP6M/QMwuTW/R7SJlFdJOsXxWQ=
Subject key identifier: FC:35:84:A4:68:89:5C:3B:98:07:94:97:46:FE:D7:E7:DF:93:06:5E
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019652A4AC259A96B87F32785C0F87076041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0C4F
Signing time: Sun 20 Apr 2025 10:00:45 +0000
Manifest this update: Sun 20 Apr 2025 10:00:45 +0000
Manifest next update: Mon 21 Apr 2025 10:00:45 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: aw00j7g04QXi6Bg43GKc85Q9eRj+gwASNyODPoZkTz8=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:ac:25:9a:96:b8:7f:32:78:5c:0f:87:07:60:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Apr 20 10:00:45 2025 GMT
Not After : Apr 21 10:00:45 2025 GMT
Subject: CN=fc3584a468895c3b9807949746fed7e7df93065e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:c3:12:ec:0f:a5:0e:39:8f:48:43:25:2c:
e1:14:06:23:97:8d:79:d4:03:38:dc:cd:fc:15:ef:
44:60:98:b5:b7:79:43:87:97:b7:3d:44:4e:b3:50:
93:9a:fe:53:57:df:53:bc:2c:15:4a:a8:18:bb:3a:
b8:08:1e:1b:8a:6e:d2:4e:7f:61:0f:5a:92:ed:51:
84:1d:00:ed:e7:ac:d7:ff:4d:af:94:6f:84:38:8c:
2b:08:de:d0:3c:9a:0d:dc:a5:89:e4:ca:62:2c:53:
26:2a:fd:cc:89:7e:f1:5e:e7:61:c8:fa:62:54:f5:
90:bf:1b:bb:e8:ca:f8:45:df:4b:42:40:2a:fd:85:
35:bc:0f:bc:0a:c5:60:28:ec:58:0e:14:f2:13:53:
58:a2:c2:65:85:f6:04:9d:16:9e:4e:8d:ca:dc:85:
f7:21:ec:22:81:5e:46:2e:0e:73:6a:ea:57:5d:db:
30:e1:4c:d7:66:ad:b0:85:53:52:c8:4f:9e:44:f2:
86:36:1a:50:a5:54:6a:1c:0f:c0:87:be:2d:cc:f3:
a2:11:29:be:8a:e0:34:ae:82:84:b8:cd:7a:f7:e4:
3c:5a:48:7e:02:7f:e5:e9:82:a4:02:50:0f:e5:b6:
8a:61:61:32:5d:e3:c3:a8:16:49:45:90:14:09:e3:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:84:A4:68:89:5C:3B:98:07:94:97:46:FE:D7:E7:DF:93:06:5E
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f2:60:82:77:56:68:56:0d:9a:ab:4c:07:43:50:4d:20:4b:
93:60:9a:86:f2:1a:3a:9c:5a:e3:7b:02:2b:3f:b3:b0:1d:de:
50:a3:e3:97:2f:20:4e:74:5b:0a:01:9a:6a:74:84:61:35:af:
49:37:4e:28:b6:7d:d4:7b:53:3d:87:3d:50:51:30:44:f7:26:
0a:71:0c:40:c6:69:39:d1:80:ff:ac:d0:5c:d4:2e:d2:75:1a:
3b:c6:36:4b:a4:87:91:76:55:9e:a8:69:95:45:54:68:18:0a:
f5:d3:cb:eb:53:70:8e:07:bc:a6:74:b9:c9:d4:5d:5e:b5:5e:
bd:d6:69:d9:12:40:4b:be:e7:b6:c1:30:e7:d7:a8:2c:31:01:
87:54:dd:5d:7c:91:59:0f:be:d8:f3:27:13:c0:90:b8:63:2c:
92:96:45:c1:35:37:90:13:5d:22:b0:3a:3a:2a:ce:99:5e:91:
63:9f:95:89:95:6e:0d:a6:f6:9d:ab:6f:bb:73:bb:e5:89:10:
f4:2a:4a:bd:77:0a:62:f2:fd:ea:4a:9a:a2:10:0d:04:d2:06:
51:e2:9a:46:a4:d3:2c:b3:7c:44:68:eb:24:20:87:38:9b:64:
a9:5a:f7:7b:6a:6e:2f:bd:50:15:d8:ee:ff:c3:0b:f7:8c:ab:
56:26:c5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:58 2025 by rpki-client