Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: aPhfMWZou1m4NYvgJET7/udUv9T2D2tVv9yMt4Np7ek=
Subject key identifier: F4:EA:E4:35:B9:88:B6:1E:03:30:28:50:9C:98:2A:54:B3:A3:B5:D3
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019675D5370ACD93E0D48D57181AD53C9135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 01CF
Signing time: Sun 27 Apr 2025 06:00:29 +0000
Manifest this update: Sun 27 Apr 2025 06:00:29 +0000
Manifest next update: Mon 28 Apr 2025 06:00:29 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: j6YiGv+h4R9SZwxks+rvcVAkIO9dPTxuMrV0r1i8Ais=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:37:0a:cd:93:e0:d4:8d:57:18:1a:d5:3c:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Apr 27 06:00:29 2025 GMT
Not After : Apr 28 06:00:29 2025 GMT
Subject: CN=f4eae435b988b61e033028509c982a54b3a3b5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:4c:27:c6:f8:4c:a9:b4:39:1d:df:b6:65:
6a:32:73:59:44:6e:a2:dd:22:9e:fa:4b:03:e7:ad:
77:5b:aa:d8:87:7b:17:39:90:12:3f:c1:e8:9a:79:
52:df:60:72:f5:e9:30:fa:4a:60:c1:70:15:3a:ff:
03:c4:15:fd:81:11:de:ed:57:59:67:c8:22:e0:0b:
2d:db:23:43:fd:14:ed:12:1f:af:68:2f:06:ad:5f:
57:06:2c:51:de:0e:1b:8f:19:f8:e6:ff:63:f2:5c:
4a:e4:79:fa:ea:7b:6f:40:fd:70:91:7b:9f:9f:ad:
df:2c:51:14:9d:2d:6f:d2:3c:8f:b9:90:d7:b3:1a:
3d:42:d4:ae:bd:77:91:94:8f:46:c9:cf:b3:df:a9:
9e:2f:62:25:00:df:66:90:47:39:1d:73:9b:9c:7f:
63:24:f6:4a:36:64:4f:c8:13:56:a8:b5:70:af:ab:
a6:76:78:39:ac:ed:08:18:ff:73:75:62:d4:34:41:
41:ea:9c:ae:e0:c9:e4:ab:e3:ca:25:cd:fe:09:db:
97:f0:09:25:83:65:11:49:94:1e:b3:81:6f:99:45:
30:8a:72:81:90:84:15:23:4c:36:f7:b7:8d:c0:7f:
57:62:a6:a5:83:9c:8b:ba:e9:4a:2f:67:1f:43:fe:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EA:E4:35:B9:88:B6:1E:03:30:28:50:9C:98:2A:54:B3:A3:B5:D3
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ef:c8:d2:67:62:9f:b0:29:87:d5:16:ee:c1:02:64:c9:73:
c6:36:8a:a3:72:61:43:18:62:d9:8a:72:52:dc:ee:92:8d:e1:
72:16:39:bd:60:d0:f5:47:e0:a2:39:92:36:a3:c7:ff:dc:e4:
31:fb:6f:8b:c5:29:8f:47:47:9e:cc:74:61:e6:0c:03:b2:c0:
11:74:0d:eb:5d:6b:94:47:3d:65:40:eb:0b:d6:c5:1a:53:f4:
78:77:a7:f4:81:6a:50:27:b4:1d:ef:53:b1:97:57:c5:5d:60:
12:05:7e:8b:f9:9f:1a:89:3c:a1:80:26:f6:60:6d:df:df:34:
6f:39:66:0d:0e:f0:f0:05:63:f5:3c:24:20:82:a1:14:f8:1c:
e3:c9:5c:61:83:c3:79:14:bc:96:64:05:0f:4b:62:43:34:3c:
a7:fd:a6:b4:6b:7e:19:21:03:d1:d3:5b:d8:30:74:a6:a8:34:
79:af:ab:85:bc:d4:82:08:e4:9a:5d:d6:ac:77:75:e1:63:5b:
3d:58:92:61:59:ca:d0:35:73:75:8d:a9:df:62:d9:54:a8:78:
9f:dd:22:05:a6:d9:3a:2d:d2:43:a9:ef:b4:fd:40:f4:77:c1:
1f:6e:fd:75:1f:5e:6e:ca:e4:19:ec:26:b4:23:af:e0:df:2c:
08:a4:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:57 2025 by rpki-client