Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: 6BnFortH012fGBTEINxQ7jDBE4JTzZn8PcJ0QAnJiP0=
Subject key identifier: D8:14:0D:48:1E:84:08:92:3E:37:35:64:8E:19:B9:15:4E:CF:BC:08
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019686FFB8FB6D512D4AF88325FBD55F4ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 12FD
Signing time: Wed 30 Apr 2025 14:00:27 +0000
Manifest this update: Wed 30 Apr 2025 14:00:27 +0000
Manifest next update: Thu 01 May 2025 14:00:27 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: 0XQpzuMEimgZuLrwHPN+vi4Es3erLbqrIDwBXH57kD8=)
2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:b8:fb:6d:51:2d:4a:f8:83:25:fb:d5:5f:4e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Apr 30 14:00:27 2025 GMT
Not After : May 1 14:00:27 2025 GMT
Subject: CN=d8140d481e8408923e3735648e19b9154ecfbc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:0c:28:95:d6:c8:ff:f5:d4:bc:34:9a:db:
d9:05:ab:b8:79:6b:d2:c6:36:ed:c6:bf:ec:02:47:
27:34:7d:5b:f3:36:78:81:4d:0c:79:53:9b:6c:f4:
d6:cf:22:6d:c8:76:88:5a:87:6f:03:20:a9:28:58:
81:50:cb:db:c0:0b:76:41:e9:5a:6b:1c:83:80:65:
79:47:e4:ac:88:60:b5:a2:cf:61:16:28:84:98:5a:
2b:1c:81:61:db:c7:88:b6:3b:0d:19:23:56:d4:65:
15:65:b5:bd:a8:45:da:e7:2d:d1:64:ae:40:a8:9c:
0b:1e:0d:da:28:20:88:21:7d:4d:b1:99:ba:2e:bf:
9b:ee:82:fa:d7:b7:a1:bc:d0:ba:b6:c1:1b:fd:9b:
94:f4:6b:22:e7:6a:84:fe:ea:55:88:e9:8c:38:58:
a8:cd:a8:b4:88:15:a5:46:9c:93:90:66:e3:7a:db:
6c:42:b5:68:63:56:b5:55:9b:29:2f:01:be:a6:9e:
70:60:dd:0e:b5:95:32:95:95:28:b4:6d:f4:37:7e:
54:b5:4b:67:e8:85:94:2a:01:f6:cf:31:e8:24:cc:
24:87:5b:7d:4e:ab:60:f9:6e:e3:ef:97:4e:59:e5:
16:d2:fb:6f:82:44:d6:a3:74:d3:6f:ae:75:98:4b:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:14:0D:48:1E:84:08:92:3E:37:35:64:8E:19:B9:15:4E:CF:BC:08
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7e:29:99:71:f9:7d:11:78:94:95:0d:bd:d6:c0:43:d4:e6:
96:0f:6f:80:04:6a:00:7f:cc:a1:03:56:03:c6:14:1a:f6:8a:
db:f7:4d:31:4c:25:5b:dc:a9:d5:f2:f4:28:21:34:8e:1f:72:
ca:55:d6:8f:8d:03:c5:d1:67:b2:2c:59:70:d9:60:95:ee:2c:
97:8f:81:e4:47:a7:c9:68:87:c3:13:f4:2d:43:68:b2:1b:54:
c0:04:fc:b1:04:8c:76:d2:09:ca:de:bf:a6:55:d0:d5:47:90:
9c:6a:d8:fc:b7:e8:d2:01:00:86:59:83:c8:5d:6b:6f:f2:7e:
f4:71:32:59:37:e7:75:a0:bc:b7:34:46:a0:81:72:9f:87:ab:
e4:02:85:53:4e:8a:c2:11:06:9e:f1:03:9c:23:3f:02:2e:8b:
f1:09:fe:9d:4c:ca:74:75:c9:e1:ac:7b:ae:66:48:e9:99:1d:
37:d9:fa:0e:5b:da:09:63:44:3e:9d:f1:93:dc:b5:fc:89:ba:
77:b3:c6:2a:0f:33:af:32:73:4d:0e:77:a7:d7:fe:17:65:23:
c6:aa:b3:c0:0f:7a:cd:aa:63:87:a5:3c:46:c0:b4:a3:61:76:
a2:50:84:bd:46:9b:30:22:ec:5c:46:8a:69:a4:13:61:4a:e6:
3a:54:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:11 2025 by rpki-client