Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: itp01WKvGW2FyJn1QUFnkFO1eWux7TnXOt6pP4xUXO8=
Subject key identifier: 5B:FA:F8:6D:82:8A:70:7F:E1:56:0A:2D:0C:04:2D:42:0B:6C:8B:84
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 0196409E9200258CF64A428FA6CD8854B466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 0419
Signing time: Wed 16 Apr 2025 22:00:55 +0000
Manifest this update: Wed 16 Apr 2025 22:00:55 +0000
Manifest next update: Thu 17 Apr 2025 22:00:55 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: G047D20BM6+k4bHBv49Pcrz/JfbEZNFKnf9bo35JJqY=)
2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:92:00:25:8c:f6:4a:42:8f:a6:cd:88:54:b4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Apr 16 22:00:55 2025 GMT
Not After : Apr 17 22:00:55 2025 GMT
Subject: CN=5bfaf86d828a707fe1560a2d0c042d420b6c8b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:63:f4:21:df:43:9e:e7:c6:37:df:5d:5d:
c5:36:cf:19:31:35:fa:03:8b:75:f4:cb:0c:39:a2:
d0:20:73:90:8c:06:0b:fd:85:2f:54:4d:d5:79:dc:
96:bd:5e:50:d5:e6:34:b1:68:4b:e1:95:ef:6a:7b:
a0:5e:33:93:49:eb:83:4f:10:72:cf:42:b9:ba:a6:
73:03:50:a1:b8:00:cc:ff:d5:84:61:ac:23:d4:c5:
f7:2b:8f:b7:d5:95:72:60:21:23:0c:9f:18:b1:b3:
eb:1d:1f:5e:6d:66:68:6b:b8:4b:7b:7b:2b:1c:b5:
8e:13:b8:88:a4:67:9e:44:a7:bf:73:ce:f6:c4:f9:
d4:95:0a:a7:7e:0d:40:4c:71:c2:6d:a1:be:d2:ab:
68:39:fe:61:8d:1d:01:46:72:55:fd:e7:f5:ae:b5:
b9:47:29:2c:49:74:1f:e6:64:1d:88:aa:a4:5c:4c:
2a:f4:b7:d9:73:c8:d9:46:7a:25:55:c1:bc:c0:c9:
27:65:56:8e:d7:6d:2f:f3:9d:4b:03:3f:98:31:8e:
54:cc:27:da:db:a1:fc:d2:91:f6:eb:1e:ad:b8:c0:
35:d2:d7:0d:24:f1:c2:92:aa:93:17:32:a2:06:09:
14:38:20:91:d7:29:a4:19:ba:97:81:b1:9b:9f:bf:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FA:F8:6D:82:8A:70:7F:E1:56:0A:2D:0C:04:2D:42:0B:6C:8B:84
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e7:5c:e7:05:06:88:7f:3b:ad:17:6e:f3:68:d8:41:e0:95:
ea:2b:16:cd:17:cf:ba:64:60:53:71:53:b2:2d:cd:69:d0:0c:
7f:5b:5a:f0:30:30:db:d2:f3:46:a4:b6:e6:11:dd:82:70:c4:
5d:18:e8:f3:a4:7e:8a:08:a1:45:6c:7f:db:15:53:8e:c8:b2:
27:5d:b1:7b:78:42:5a:af:a2:81:79:c0:67:77:25:0c:ef:a1:
78:64:39:b2:bf:76:84:a1:ba:43:44:3e:e8:71:94:dd:b5:36:
59:16:02:90:40:92:e4:17:8f:8a:cc:5f:2d:c1:53:0d:3b:9d:
ca:d5:f8:7c:da:a3:71:58:7e:43:ee:ff:fe:9c:8b:c6:ac:ee:
6f:dd:22:a3:7e:73:09:04:86:d0:87:97:1c:fb:2b:3d:8c:f9:
eb:85:8c:8d:b6:b5:a6:c7:f1:8f:e3:53:31:d6:27:e0:5b:42:
50:78:9e:c6:19:4b:72:5d:85:ca:27:36:c1:ba:be:cd:9d:a7:
40:73:21:e9:54:38:5e:4e:9a:7e:16:4c:39:2d:27:3a:ec:0d:
ce:5a:71:a1:05:84:42:ef:7f:00:11:89:1f:69:85:d3:c9:95:
29:5a:7b:8d:c1:b9:e3:5a:71:ab:e5:d5:92:00:95:19:d9:a9:
fa:92:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:10:23 2025 by rpki-client