Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: mAaG7eaxm8cEh42e95qmmypYlxL+qpn/vFG74lGG4Es=
Subject key identifier: FF:5B:03:B0:C5:02:DC:5A:97:2B:30:4C:7F:50:A8:68:AA:10:05:D7
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 01964D105904018A0793EBC0E49B8551DC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 08:00:39 +0000
Manifest this update: Sat 19 Apr 2025 08:00:39 +0000
Manifest next update: Sun 20 Apr 2025 08:00:39 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: iRrHc5ko6Zwa6bN27FcheVsBoMqfqZs4I0egXqpsOxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:59:04:01:8a:07:93:eb:c0:e4:9b:85:51:dc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Apr 19 08:00:39 2025 GMT
Not After : Apr 20 08:00:39 2025 GMT
Subject: CN=ff5b03b0c502dc5a972b304c7f50a868aa1005d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:b8:db:45:7a:89:1d:5b:2a:65:72:8d:b1:
9a:21:31:30:43:9a:ae:5e:7f:58:fa:e4:86:81:98:
71:c9:63:cf:59:c5:71:50:cb:fb:b6:ae:d0:60:c0:
9c:be:ca:2b:4e:8c:92:fa:7f:38:4d:9a:e9:12:0c:
c8:d6:eb:7c:b8:cd:fe:ab:6e:5b:e5:1b:ba:52:44:
6d:77:f7:91:4c:eb:e4:70:36:d0:d2:43:86:97:89:
d4:94:ac:ac:46:a0:d6:52:d4:42:ed:42:f3:9f:aa:
67:30:47:0d:6e:34:52:a1:3f:6e:af:f2:f8:2b:ef:
7f:f9:3b:3a:64:2c:09:b0:34:eb:d2:b0:ef:da:7b:
c7:2e:0e:65:e6:a5:04:f1:bb:22:7a:6a:79:75:95:
cb:07:c7:22:48:75:f0:ee:a1:10:b9:32:dd:74:3f:
d6:63:7c:4f:bf:f1:06:f3:70:ed:9e:80:52:9f:9a:
58:4b:ea:89:8f:4d:8a:cb:ad:64:0c:12:2a:08:3c:
dd:d9:93:3c:87:ac:f4:7f:2f:d5:00:31:cf:26:bf:
f9:0e:c1:76:ba:d2:17:4c:83:29:96:ab:0c:fb:6b:
7c:ca:cf:51:4b:61:5a:cc:0a:66:f6:b5:16:2a:78:
be:a8:3b:f8:1a:44:83:34:19:d2:a5:0c:6a:5c:10:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:03:B0:C5:02:DC:5A:97:2B:30:4C:7F:50:A8:68:AA:10:05:D7
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:18:44:5e:86:b5:2b:e1:3b:07:65:9a:3c:72:61:62:c3:f5:
51:78:f5:b6:af:7e:a6:60:f4:67:e0:88:ff:af:d4:4d:d4:c1:
a0:b5:3c:35:ba:e7:ed:59:d4:59:96:75:8c:8d:15:9d:7a:99:
ac:76:c9:04:aa:df:20:94:8a:3e:27:af:f1:8b:9a:3f:52:26:
43:0f:e9:b8:17:5f:87:96:07:98:f4:1f:b9:cf:0b:c6:f5:86:
bb:e2:fc:aa:9a:99:4e:6b:92:d0:34:77:ef:29:20:bf:b5:f0:
11:76:7c:98:54:cf:1f:0f:5b:1c:b4:a0:76:33:73:c0:de:3f:
68:c2:1a:b3:13:5e:27:d5:71:8c:49:ff:2c:cb:d2:16:8f:65:
51:22:4a:72:b2:c3:e8:5f:bb:01:1c:59:5c:52:e8:72:d8:69:
0c:37:48:47:65:ce:1e:06:9e:0e:7b:6d:c9:62:02:19:16:63:
e7:3e:38:41:65:3d:d8:fc:10:a0:52:23:7f:0b:8b:e7:de:58:
7a:48:12:47:b8:d8:d3:86:38:b6:82:98:39:89:f4:9e:08:9b:
d4:5f:a7:cb:d6:3a:d4:01:10:49:f6:1e:d9:f1:b1:0b:0d:a4:
99:04:28:d0:33:a7:9f:02:c2:48:3a:9b:40:1a:17:7a:45:02:
a7:a6:16:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:40:47 2025 by rpki-client