Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: expvrTjDuFHuPdyU4Alul6n8QnHJDlKKE9EPn2IAVUU=
Subject key identifier: D2:CE:66:B3:A5:13:A4:F5:84:E4:27:C4:36:19:E6:77:DB:C9:D6:5E
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 01964255E75D4A4A0661F24BE5E60A5978C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 0235
Signing time: Thu 17 Apr 2025 06:00:48 +0000
Manifest this update: Thu 17 Apr 2025 06:00:48 +0000
Manifest next update: Fri 18 Apr 2025 06:00:48 +0000
Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: 6OZ/y//RylBrzwZZmMp0lqH3Ez46JjOkuSkzlg5iyE0=)
2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:e7:5d:4a:4a:06:61:f2:4b:e5:e6:0a:59:78:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Apr 17 06:00:48 2025 GMT
Not After : Apr 18 06:00:48 2025 GMT
Subject: CN=d2ce66b3a513a4f584e427c43619e677dbc9d65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:29:e9:74:cf:1c:e3:e4:1a:1d:75:b3:95:
6d:42:b8:d2:cb:cf:53:89:8e:1c:c7:2c:ca:0a:de:
28:34:7a:ab:4d:cc:ba:80:11:af:50:2e:a3:49:f3:
68:ca:3c:8d:40:81:a7:fb:97:c1:e0:a7:6b:c3:1d:
8f:55:b9:f9:cd:3d:92:6a:b8:a4:f3:34:4c:10:1f:
4b:ba:62:e5:a6:ef:75:e5:d1:e9:05:1b:2f:5f:dd:
f2:88:e3:7d:b5:36:5c:6f:8f:e1:14:5b:0a:52:56:
40:cc:a3:ef:c3:fe:18:9d:f3:eb:da:19:e8:63:d6:
51:bb:c9:6c:28:53:74:35:64:c0:76:26:4d:05:dc:
fb:29:92:5c:77:2e:af:e5:b3:ac:d8:25:5a:0f:41:
db:90:e3:d2:88:d4:13:7d:8a:06:c0:2f:21:b7:77:
79:79:ec:b7:6e:89:47:32:e6:8e:ee:5d:72:0c:00:
fc:28:75:ef:c8:ee:fd:34:db:59:c7:ea:e7:7b:79:
7b:a8:3c:3e:c4:83:de:6c:ce:7a:b2:53:47:ad:c9:
db:0b:e9:89:f2:3d:66:44:27:4e:61:de:9e:ce:ac:
02:4d:36:0b:72:89:3a:99:c5:0c:e5:d4:1b:17:ca:
e2:59:9a:c5:6f:60:34:15:f8:b6:33:c5:72:e8:17:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CE:66:B3:A5:13:A4:F5:84:E4:27:C4:36:19:E6:77:DB:C9:D6:5E
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e5:7a:63:ee:f8:e7:26:cc:ed:34:79:0c:98:b3:20:72:03:
9a:f9:13:b5:dc:66:06:64:f1:c5:1c:1b:77:07:ec:85:cd:39:
3e:cb:1c:86:e6:13:fb:df:97:9a:59:29:3a:f1:1d:8d:7f:d8:
73:b1:7d:9d:a5:61:45:44:a3:c2:5b:a3:88:03:c5:b4:f7:99:
96:b9:95:57:e3:dd:7c:f5:fd:14:52:cc:1a:23:0b:e0:2a:12:
d6:9a:78:99:e1:09:c1:7f:07:89:72:fe:ee:7b:60:df:a8:37:
2c:62:38:0f:f9:73:fc:a3:90:93:dc:c9:7d:5e:d9:4c:01:de:
71:70:1b:dd:af:21:b5:65:33:0b:cd:d9:d4:30:08:b4:ed:5c:
15:d7:47:d7:c6:4c:40:89:55:72:41:30:f6:06:14:2a:60:07:
92:8a:8b:11:fd:66:2c:d4:ee:1b:c5:5b:8d:d4:b7:9a:1a:84:
3b:c8:40:38:93:ce:50:af:b4:df:6a:19:ce:5a:0c:35:36:a0:
60:63:cb:09:35:8c:46:3d:2f:7b:7a:96:4b:92:8c:62:a6:c7:
9e:ef:f6:bb:5f:9e:2b:bf:fe:24:a8:0f:29:0f:45:c4:e9:7e:
d4:53:b7:ef:46:72:f3:9f:b5:ca:18:6e:a2:28:82:e8:43:46:
9d:d8:0e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:50:11 2025 by rpki-client