Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: sYcarAQbXJ7nU7Tw3XJuRTAF1FVpwpf6fuukGvZbqHk=
Subject key identifier: 1F:2D:F3:85:00:EE:C7:62:EE:50:3A:03:05:FC:55:9D:41:FC:C2:2E
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 019642FAB85BD22297E2F3DB05EB73499408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 0274
Signing time: Thu 17 Apr 2025 09:00:49 +0000
Manifest this update: Thu 17 Apr 2025 09:00:49 +0000
Manifest next update: Fri 18 Apr 2025 09:00:49 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: +V0IcJdSHbmLiIPCvUh1gv8ADlM6uDNaJzr3uqyfHXE=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:b8:5b:d2:22:97:e2:f3:db:05:eb:73:49:94:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Apr 17 09:00:49 2025 GMT
Not After : Apr 18 09:00:49 2025 GMT
Subject: CN=1f2df38500eec762ee503a0305fc559d41fcc22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:07:51:9e:e1:45:ea:c9:19:75:23:29:33:
e1:85:0a:1c:95:9b:18:02:1c:71:8e:86:1d:58:15:
f5:8a:ac:f8:ab:ca:c5:68:85:9c:31:7b:b6:e6:c9:
5f:a2:95:b6:f0:9f:3a:e6:81:3c:92:d8:90:d6:99:
73:ef:6e:48:39:30:c6:f7:cc:2f:e2:08:36:fa:5d:
f8:75:f6:e8:80:b2:0c:92:11:a9:18:79:2c:5d:a0:
9c:73:19:1d:05:aa:96:cb:ad:e2:bd:f7:8a:75:9c:
b6:86:45:f0:a4:0b:b5:20:b1:15:d3:5d:3d:73:70:
a6:d6:7b:53:d4:e9:b6:8d:8e:20:00:ee:48:e8:56:
c2:65:24:13:5d:9a:31:a0:60:35:3f:5b:97:44:4b:
09:3b:b2:2b:8c:f7:4c:7c:e3:9f:98:9a:61:b8:96:
3a:3d:42:ad:c4:69:97:b8:fb:82:85:ca:0c:50:18:
87:48:a1:fa:4d:8e:b5:6a:00:cf:8b:06:69:35:f3:
75:6d:6c:d2:ce:43:47:01:59:9b:ec:4b:bd:7b:04:
a2:d7:e8:67:55:6d:bc:0d:35:d6:36:19:08:69:12:
09:48:1c:b4:cc:64:12:5c:69:62:1d:c2:66:b2:fb:
a0:e1:73:36:50:f3:cb:a3:f3:d9:b8:bf:79:5e:42:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:F3:85:00:EE:C7:62:EE:50:3A:03:05:FC:55:9D:41:FC:C2:2E
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:88:57:9c:f2:7c:e9:84:f1:eb:b6:fc:d8:4a:da:6e:78:fe:
a7:99:99:ae:97:88:7c:8d:de:b4:ac:20:d8:0e:61:cd:3f:c4:
65:a5:74:53:7a:08:09:82:23:79:a7:82:b0:3a:4b:5f:e5:68:
2e:f1:b9:31:19:38:b8:b2:9e:d1:0d:cb:73:fa:ba:c2:96:a1:
b9:55:d9:c0:e5:79:a4:a5:ad:d8:4c:fe:0a:62:40:66:ba:60:
29:16:9a:97:6c:71:09:5d:f6:7f:5b:a9:3f:65:be:85:3c:8e:
38:7a:37:9a:37:6e:28:f0:e2:59:61:7c:7f:4a:15:cc:10:fc:
82:79:2d:8d:38:7c:8d:a6:8f:78:90:be:10:19:e9:bf:64:b2:
32:38:b6:60:94:dd:d1:e8:d4:46:70:1d:a5:4b:3e:65:d5:4e:
02:bd:d8:e4:04:74:89:61:cb:1f:f2:ab:ca:c0:59:61:de:ae:
51:54:f0:b4:41:f5:c7:30:89:6b:4f:94:1d:e7:52:a8:02:71:
59:b6:2a:e6:e5:d0:32:bf:7f:fb:41:2b:a7:b9:ce:df:1c:03:
95:00:fd:9d:31:43:3c:71:55:ae:d3:f8:90:e3:6d:cd:8f:d2:
a6:5d:5b:1a:9f:8d:dd:af:82:fa:f8:f0:44:95:15:d0:4d:ba:
62:df:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:13:15 2025 by rpki-client