Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
File: fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json)
Hash identifier: 4XHVzSmrXiy4vr5sVn4je48stCmCgJLGLP+EUiAh/Fg=
Subject key identifier: 72:F5:71:4E:73:A0:31:63:FC:E8:FE:2B:7D:B7:9D:8D:96:4B:E6:3A
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Certificate issuer: /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial: 01963E7981ADF340154A21B00A34E1A6DA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 12:01:12 +0000
Manifest this update: Wed 16 Apr 2025 12:01:12 +0000
Manifest next update: Thu 17 Apr 2025 12:01:12 +0000
Files and hashes: 1: 6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa (hash: ynSoGLNXCvZga5FxofhRDHQzU/lO6RFc2BKWCKFwLDc=)
2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: dsube5AcVydvomgK5IOekGpv+eozna+ScAxnk9hkVLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:79:81:ad:f3:40:15:4a:21:b0:0a:34:e1:a6:da:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Validity
Not Before: Apr 16 12:01:12 2025 GMT
Not After : Apr 17 12:01:12 2025 GMT
Subject: CN=72f5714e73a03163fce8fe2b7db79d8d964be63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:0d:4d:84:96:74:3d:10:57:73:f1:da:85:
df:78:2f:a1:18:31:c3:7d:45:c4:27:d0:40:53:2f:
96:a7:11:c5:23:37:57:ce:24:39:a7:5f:e6:c9:52:
d7:f9:84:7b:98:2f:36:60:cf:c9:5b:01:e6:b3:a9:
f7:62:b6:3c:61:8b:bd:6d:7a:8d:74:f8:06:ff:ac:
e0:84:77:93:4a:77:8e:67:ed:e3:6d:b7:4a:93:95:
47:e0:ae:94:1a:5a:86:51:87:44:7d:19:1e:b3:2f:
3d:68:f4:bc:aa:6e:7d:c4:af:65:40:f1:99:e2:5d:
86:f8:21:8d:15:11:6b:2b:12:33:e3:2a:2c:bd:ac:
8d:5a:83:b3:6b:b7:81:53:50:e0:0e:65:71:22:67:
c2:ac:73:78:5a:36:44:dd:06:85:fc:b5:e0:60:4d:
82:34:5d:18:71:a4:15:a7:22:d6:b9:81:15:c7:bf:
6a:4f:3d:6d:bf:69:75:76:74:e8:68:56:7a:24:5c:
7a:e8:3b:25:5c:7e:31:5a:41:ef:21:67:30:fb:73:
e0:d8:0e:a3:96:6b:29:67:01:39:43:a6:2c:70:4d:
9c:d1:bc:82:73:db:b6:6c:53:32:4a:6e:3c:3e:8e:
5d:ed:65:57:6a:cc:f2:27:9c:a6:af:3a:17:e8:6c:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F5:71:4E:73:A0:31:63:FC:E8:FE:2B:7D:B7:9D:8D:96:4B:E6:3A
X509v3 Authority Key Identifier:
keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:e9:0b:03:54:38:5c:2b:c9:a4:fe:ed:7c:3d:b7:17:f7:c0:
3f:95:86:b5:37:f4:ef:ed:b8:38:25:64:e0:ca:61:3f:02:38:
53:ee:e3:fd:21:5b:a1:f4:c7:6f:43:f8:3d:a4:ac:56:c7:b6:
cb:ba:44:db:fd:e7:40:1a:8e:8d:20:29:8a:ca:95:df:3d:80:
4d:6d:94:4c:8e:81:6c:6b:13:cc:45:b1:09:55:a7:ec:a2:75:
40:0c:37:c2:81:a9:10:0b:31:e7:5b:03:01:21:76:29:cf:ce:
50:09:62:7c:53:2c:87:f0:97:f5:5f:3a:8f:c1:eb:87:49:25:
0e:3b:10:0e:ea:cc:6c:54:d6:01:a0:6a:88:65:8c:91:70:8a:
e0:f6:71:89:f5:cc:34:b5:88:68:34:24:ae:48:9d:2c:47:88:
c7:00:51:28:3a:3f:8f:47:3e:a4:bb:4b:e6:70:08:a0:a4:aa:
7e:21:57:66:6c:23:1a:a1:24:31:15:e1:b5:af:70:f0:5d:ee:
08:bb:4d:ef:61:0e:e1:93:63:45:de:5d:92:4a:a3:a9:7f:a0:
30:eb:eb:55:d1:c6:51:be:2c:b7:e7:78:55:e4:c6:6b:1b:ca:
1e:9d:7b:58:b5:07:16:95:a9:13:ee:90:00:e6:5e:e5:a3:27:
9b:b0:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:16 2025 by rpki-client