Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: 9KWoEFBEDkcKOBlm+Ic+B7XYTiupp7OB1OpsXQVae8I=
Subject key identifier: 6E:CD:3F:FE:AC:A4:9E:6E:05:2B:A1:81:74:12:BD:00:25:D3:64:6C
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 0196451FC69456E28255D066AC17C15B5D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0857
Signing time: Thu 17 Apr 2025 19:00:32 +0000
Manifest this update: Thu 17 Apr 2025 19:00:32 +0000
Manifest next update: Fri 18 Apr 2025 19:00:32 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: odOJbckFogUWvphSktzLUXbVWw65OWj/YJ+YyzMlrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:c6:94:56:e2:82:55:d0:66:ac:17:c1:5b:5d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Apr 17 19:00:32 2025 GMT
Not After : Apr 18 19:00:32 2025 GMT
Subject: CN=6ecd3ffeaca49e6e052ba1817412bd0025d3646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:15:d6:65:c0:00:ab:02:71:6c:87:d4:01:
0c:0a:18:2d:4a:29:f8:77:e9:e2:a3:3c:8a:ef:ff:
80:98:68:ea:73:97:8b:ed:c0:40:60:f9:b1:fe:88:
2d:f0:a6:d9:df:a7:98:f3:cf:7f:9c:f6:86:b1:04:
11:72:10:97:bd:b4:87:17:c2:71:b5:f9:aa:94:15:
93:bc:ee:8a:64:57:20:b2:83:ae:5c:3e:88:b7:03:
9e:f9:cc:a0:9d:da:6f:1e:3b:26:77:bf:1b:8a:91:
b7:c0:f7:98:a8:62:92:f0:0e:e6:a6:ce:1a:25:25:
50:97:5c:84:ee:70:4b:13:fb:e9:c7:91:0a:e8:cf:
6e:40:7a:2e:7d:a7:a8:91:8c:51:97:47:b1:2b:32:
b0:9e:d9:aa:aa:c5:26:d3:1b:7a:4a:9b:0e:69:3e:
b9:fd:91:5f:69:dd:a0:59:91:e9:fb:2e:93:30:b9:
3f:11:27:82:34:f9:35:c4:28:ff:96:d4:30:bb:e8:
95:40:79:39:c6:54:1b:bc:a2:85:47:c5:25:39:1e:
6e:87:e0:76:2c:9c:d1:1b:f7:12:6e:cf:d4:19:47:
14:cb:b1:02:b9:c8:cd:60:4d:d7:53:11:af:8a:aa:
99:e2:d8:8c:36:54:e2:54:e0:84:37:e5:ea:54:97:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CD:3F:FE:AC:A4:9E:6E:05:2B:A1:81:74:12:BD:00:25:D3:64:6C
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:67:e0:6e:fd:2a:62:97:96:6a:81:4c:0c:e9:4b:65:79:ed:
17:46:e9:c8:dc:e4:52:83:c9:85:57:02:5c:49:8f:c6:69:7c:
59:25:6a:00:55:2c:17:c9:0a:a5:ba:61:16:ee:ff:9c:c9:b8:
ff:5a:ce:ff:51:52:81:d5:43:14:90:39:1f:d6:2c:e6:64:33:
4c:50:a6:d5:8a:d1:fc:d0:9d:5c:2b:6a:03:68:d9:8e:9b:d3:
cb:bd:9d:ef:ef:dd:86:00:c0:8d:ba:86:d9:66:3e:76:fb:fd:
e2:6f:5b:d3:26:49:68:b3:98:38:43:bd:c0:a4:b3:ec:61:3a:
39:54:82:bd:b3:a1:61:48:31:d0:90:30:2c:e8:f3:8f:bc:b2:
a8:46:21:84:61:e0:c2:b1:69:c2:bb:4f:bd:48:30:30:cf:7d:
b8:f1:64:0b:13:ee:a0:c0:9f:f4:a7:65:d4:53:f5:d6:8a:54:
a1:02:79:86:0c:bc:c9:12:ce:e4:86:04:20:af:0e:88:42:69:
29:18:61:33:a4:c4:2a:08:64:e4:47:62:b6:56:07:b0:0d:c6:
01:38:dd:ae:a4:c2:d7:4b:bb:7e:1f:e2:dd:2f:6e:69:12:11:
df:13:70:6d:d3:00:e2:93:9f:ea:db:bc:6a:1c:4d:6e:04:fe:
5d:93:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:38 2025 by rpki-client