Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: LH5iKXawupN31rzw+SstcsdvXRxjlov8tT+liwmcnjs=
Subject key identifier: 76:2B:B9:2A:39:38:CB:62:4C:EE:66:5D:83:27:48:69:02:9F:DA:EA
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 019680C6D70487F12C66A999875BDEBB15C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 0F5D
Signing time: Tue 29 Apr 2025 09:00:36 +0000
Manifest this update: Tue 29 Apr 2025 09:00:36 +0000
Manifest next update: Wed 30 Apr 2025 09:00:36 +0000
Files and hashes: 1: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (hash: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: zJlHP80kVbj/w0UU6NQpKAs/AgOfWorq4JvAuTFfcDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:d7:04:87:f1:2c:66:a9:99:87:5b:de:bb:15:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Apr 29 09:00:36 2025 GMT
Not After : Apr 30 09:00:36 2025 GMT
Subject: CN=762bb92a3938cb624cee665d83274869029fdaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:9c:2c:cd:ed:a5:5f:1d:50:42:29:88:3a:
90:3f:1d:52:25:e1:cc:6b:f0:43:00:1f:7a:77:fe:
df:9f:fc:bd:7e:82:1b:8b:9e:76:16:a2:42:6c:73:
98:82:ad:97:f7:47:5d:ce:c0:10:af:a5:4d:7c:6d:
e2:af:a9:67:03:4b:1e:52:80:20:2f:3b:e5:76:f7:
0f:3b:79:fe:00:5b:d6:28:8f:e7:68:5a:05:8e:08:
3b:a7:a2:9c:19:e0:06:16:33:a9:b8:a7:54:c8:21:
49:87:ce:8e:85:01:15:a4:4f:ec:d1:40:4f:6e:bc:
b0:98:bb:e6:47:0e:a4:cc:aa:8b:df:32:8b:8b:4f:
e3:df:e8:6e:72:52:51:a2:6c:02:35:35:f1:d6:ec:
be:b5:61:01:4f:58:01:ee:15:4f:20:6e:f8:e2:c1:
e4:f2:ab:a9:c3:87:57:88:d4:d6:3a:ea:5e:83:dd:
7e:de:3b:6a:1f:6d:ff:e8:c2:6b:80:1a:6d:cc:1a:
9a:89:14:fe:c2:d2:a8:4c:8e:e3:36:af:0d:46:01:
b6:e1:a0:3c:53:df:26:d1:0b:59:19:cf:24:07:fb:
a3:24:68:84:73:39:e6:70:73:20:af:82:0d:ac:43:
e5:6f:c0:97:22:f1:93:16:5f:39:c1:ed:77:21:a5:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:B9:2A:39:38:CB:62:4C:EE:66:5D:83:27:48:69:02:9F:DA:EA
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:a7:04:90:60:e5:d5:02:3b:9f:b2:f8:d2:9c:ad:c8:92:
d2:de:9c:ba:38:bc:84:68:59:62:80:6e:5f:ab:93:e5:06:e3:
6e:be:49:93:1b:e6:e3:3a:4c:5a:4c:f4:7e:a9:db:88:64:f3:
02:06:ae:c9:f5:26:5d:5f:a3:41:f4:61:cc:ba:56:57:63:72:
b5:e4:ee:3e:30:b4:12:26:25:af:52:ab:44:30:24:32:29:5e:
e5:b8:e6:55:6f:48:29:3d:e3:0a:1a:4c:2a:90:a4:34:7c:09:
4c:09:dd:81:8b:da:b2:64:1c:86:d1:c1:6b:45:07:4f:d9:93:
eb:25:4e:c3:29:60:c2:95:d5:d1:16:ac:e5:c2:76:3c:2f:d7:
08:d2:5c:d6:0f:04:2d:6e:6d:d7:a6:89:e1:3a:b4:68:69:c9:
91:03:66:cf:28:fd:23:ff:6d:48:f1:1d:60:dc:39:1f:37:96:
a1:d9:5e:e2:05:c1:42:85:96:15:29:79:43:61:d3:28:4c:22:
d5:f8:cd:a1:6a:21:7c:5a:76:6d:b3:9c:0b:9c:59:c1:10:71:
0f:d3:2c:0f:e3:8f:67:ac:79:6c:59:fc:66:80:5c:12:98:1b:
8e:0a:3b:16:3b:b4:45:7c:4e:9c:90:33:fa:ea:66:d8:b6:1e:
3f:26:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:53 2025 by rpki-client