Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: KSuhn6cw55BYk80ZKTZzqMrz+1Bzvz3fKw7gEE/cZKM=
Subject key identifier: 8C:57:69:C2:D0:5A:E1:43:65:28:96:DF:8C:11:BB:2D:F1:49:42:D0
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 01967567B3751639F8D0F7CF79DD09964C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 04:00:52 +0000
Manifest this update: Sun 27 Apr 2025 04:00:52 +0000
Manifest next update: Mon 28 Apr 2025 04:00:52 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: lr6/yrhA5WIVo7Iy9H3Wc/T0RfIBXBIDlWm8BhWfa8Y=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:b3:75:16:39:f8:d0:f7:cf:79:dd:09:96:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Apr 27 04:00:52 2025 GMT
Not After : Apr 28 04:00:52 2025 GMT
Subject: CN=8c5769c2d05ae143652896df8c11bb2df14942d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:ed:d1:5d:64:fb:81:38:ef:89:6c:9e:b8:
3f:5d:5c:d0:ab:34:2a:40:f2:b1:eb:17:52:25:9c:
6b:ec:f3:f3:66:56:b7:44:41:9f:a9:95:cb:f8:a2:
4c:99:2f:21:80:40:10:4a:ff:7a:65:3e:ad:fb:52:
d0:37:2d:63:8b:18:72:c4:55:6e:97:8e:7f:07:c2:
81:e1:a6:20:e6:77:04:ad:46:9f:e9:82:bb:95:ae:
86:d0:51:45:e8:0f:2e:8a:02:4f:45:55:94:c2:f9:
26:1b:64:f0:a4:40:6d:5a:a8:9e:ea:c2:81:99:3f:
d7:84:6f:9c:e5:02:a3:0b:d9:57:64:a5:22:d9:a5:
c7:0f:a6:44:ee:72:6c:2e:eb:8e:9d:b1:61:f0:98:
24:f0:b7:8f:ee:06:e3:5e:2f:98:bd:06:be:4c:bb:
83:a0:47:dc:af:02:a8:e0:90:11:24:e1:0e:40:36:
4a:ef:dc:62:06:fa:28:7f:64:90:9c:a3:d1:f2:14:
bb:5e:4f:a4:60:8d:b6:36:85:84:c0:c8:b8:31:06:
fc:b7:2f:a5:93:32:0d:73:dc:14:20:fd:e2:18:99:
68:61:81:9e:c4:1b:f3:d7:d2:85:ad:65:46:26:72:
31:36:2a:0e:dc:c2:4f:95:8f:f5:59:dd:71:69:10:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:69:C2:D0:5A:E1:43:65:28:96:DF:8C:11:BB:2D:F1:49:42:D0
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:80:de:f9:fd:d7:fc:27:a2:1d:bf:65:b4:c9:40:51:99:8c:
14:03:5d:a1:b3:bb:37:93:0e:dc:56:14:38:ba:a6:79:04:52:
57:4c:59:d9:93:1c:d3:2d:75:9b:7b:2b:eb:7f:81:9d:e0:85:
b9:1d:db:fb:45:57:3d:b0:4e:18:b6:ba:59:b3:f1:20:e8:7d:
09:eb:52:34:df:33:af:92:01:ee:57:70:b0:06:56:d2:0c:ee:
aa:dd:e5:ea:ff:b0:c3:f7:a3:73:c9:ae:62:1e:0d:15:56:3e:
70:30:53:28:38:5c:1e:a7:28:d7:ed:3c:9c:93:5b:f2:a4:e6:
28:b6:6c:cd:75:92:50:bd:30:17:93:97:6b:54:69:7f:e6:b0:
17:de:5a:4f:b9:b9:d8:38:86:7e:ff:32:1d:ec:1e:30:88:80:
70:5d:9a:47:2a:a8:27:e2:f4:05:0a:a7:38:3c:f1:19:32:2f:
aa:eb:73:8b:ae:ce:b6:f1:ab:78:bb:90:03:9b:6e:cc:0c:26:
b9:20:8d:08:ac:71:d8:a4:2e:6c:2e:5e:ba:e7:e0:d3:90:54:
22:3f:4f:8e:19:75:1b:04:7c:b4:83:a6:4d:53:48:83:1c:96:
21:f3:4b:50:15:3c:cf:bc:f2:8e:ed:bc:80:25:08:25:f7:7d:
b2:00:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:26 2025 by rpki-client