Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
File: f3YJUscz9vLuklTtzRTg2qeLOIw.mft (raw, json)
Hash identifier: +Y415QV0YMu/mG58VhkfAKvk1Ru0m0Er3Qoi/ehbZ2U=
Subject key identifier: 8E:3F:39:87:BA:1B:D1:28:B2:89:56:90:42:F9:8E:8F:7E:55:ED:22
Authority key identifier: 7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
Certificate issuer: /CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Certificate serial: 0196764329D700ACD7E2A1CE6892F441E10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
Manifest number: 02F3
Signing time: Sun 27 Apr 2025 08:00:35 +0000
Manifest this update: Sun 27 Apr 2025 08:00:35 +0000
Manifest next update: Mon 28 Apr 2025 08:00:35 +0000
Files and hashes: 1: ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa (hash: PB9NVbc1SKDdgUUB+S0NaDZM0GQCTky3OkA9OktttX0=)
2: f3YJUscz9vLuklTtzRTg2qeLOIw.crl (hash: jEqeMqV7q8xMot98PY5DJ4jVd1ZCRBG9NpxWcm2sx6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:29:d7:00:ac:d7:e2:a1:ce:68:92:f4:41:e1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Validity
Not Before: Apr 27 08:00:35 2025 GMT
Not After : Apr 28 08:00:35 2025 GMT
Subject: CN=8e3f3987ba1bd128b289569042f98e8f7e55ed22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:1a:a0:fa:5f:d2:11:fe:c3:48:25:9a:b1:
06:42:f9:1a:e2:93:0b:9e:5a:6b:5f:af:d9:5e:c6:
2f:88:0d:cd:58:4c:52:22:2b:e0:48:bc:5d:19:15:
cd:fa:3b:47:74:1d:31:8b:72:e8:5c:ea:55:e9:f0:
b3:78:71:5d:6e:91:3d:71:13:7f:b4:cf:76:49:1e:
4f:55:0f:31:fa:ea:3b:d5:ae:c8:49:23:71:8d:a8:
58:ba:68:89:76:41:64:d3:d8:07:87:b7:21:dc:e5:
90:03:78:ce:c4:fd:2b:85:99:8d:f5:f6:a1:ab:ba:
9a:ba:87:f8:36:81:ef:c3:9e:92:d3:ba:de:fc:4a:
40:2a:a0:a3:ee:33:98:53:a0:fd:81:84:71:a9:12:
8c:50:a6:8f:b4:77:38:3b:cd:7d:c6:cb:27:9d:58:
9d:aa:6f:5f:4b:73:cc:fc:f1:81:1c:f8:c2:5e:42:
ee:d5:74:5d:7c:1b:e9:12:52:77:3b:61:b4:3a:cc:
95:ca:11:b5:8e:86:e9:f6:03:8f:22:ca:68:79:21:
c4:04:81:8c:a9:c6:01:48:63:fc:f9:5f:b3:dd:68:
ea:ab:d2:2a:26:b0:81:c4:94:b6:dc:e1:da:df:e4:
84:89:4e:51:c5:50:44:69:d2:1d:25:0e:0d:ad:31:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:39:87:BA:1B:D1:28:B2:89:56:90:42:F9:8E:8F:7E:55:ED:22
X509v3 Authority Key Identifier:
keyid:7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4d:73:62:0a:5b:8d:68:4a:16:35:24:d1:97:b4:1a:1e:a7:
ea:62:61:7f:86:84:e6:a1:68:b9:fe:1c:3a:89:c1:52:29:55:
72:bf:e1:4a:4d:f1:2e:97:a7:2b:f1:6f:7b:34:3e:0c:02:21:
d8:44:4f:f5:5f:04:1b:41:0a:39:f0:7b:62:cc:db:02:7d:a0:
10:68:50:b3:ef:29:1d:aa:1e:96:1a:c3:2d:ba:44:5d:6c:c3:
f7:fb:f7:59:84:ff:fb:f3:ae:8e:dd:d4:c5:b8:ba:74:3d:ee:
2d:5d:57:99:77:40:85:a7:72:ef:ea:33:f4:4f:68:47:df:f5:
bf:20:d6:53:46:e8:bb:c1:16:98:66:93:e4:4b:c0:a9:bc:cc:
6c:5a:d0:42:58:9b:f6:3f:41:ba:4c:20:60:4a:4e:6c:44:79:
59:dc:fe:6f:55:6d:56:68:e0:5f:96:95:e9:51:83:1c:35:16:
4c:dd:1a:40:05:ad:a9:59:60:50:b6:8d:d0:13:73:1f:91:10:
54:7d:44:f1:67:9e:f5:74:03:43:e1:27:8a:d7:be:9c:47:43:
34:5a:a0:1d:01:4c:62:3f:99:43:32:1e:d9:b1:8c:6e:65:57:
d0:bf:10:36:17:e6:8f:9a:05:1b:33:2b:94:c0:e5:b0:c1:be:
b6:33:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:55 2025 by rpki-client