Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: nP0dLS4Ow7mtDAMcJOAyikRpYESS+SI3S+mwaboCd90=
Subject key identifier: 25:46:0C:13:6D:AE:01:8B:3E:2B:70:2D:E1:B1:9A:CD:09:67:8A:87
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 0196748C2D9217CA84298576E701415B5FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 12B2
Signing time: Sun 27 Apr 2025 00:01:05 +0000
Manifest this update: Sun 27 Apr 2025 00:01:05 +0000
Manifest next update: Mon 28 Apr 2025 00:01:05 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: lIPhCinQ69/k44xxvox54UBGuw5AWxloTR1sZb0b5no=)
2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:2d:92:17:ca:84:29:85:76:e7:01:41:5b:5f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Apr 27 00:01:05 2025 GMT
Not After : Apr 28 00:01:05 2025 GMT
Subject: CN=25460c136dae018b3e2b702de1b19acd09678a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:e5:46:fa:eb:06:21:ff:b5:29:51:ad:dc:
13:ed:b7:49:58:b3:16:25:f6:95:d4:33:2b:8d:de:
f0:39:16:c3:09:4f:1f:10:a6:bb:e8:07:19:e2:65:
6c:4d:76:cd:99:07:c5:73:7d:d7:51:e5:14:d6:b5:
54:d9:7b:e0:8a:f7:3f:51:3a:06:19:7a:b5:3c:99:
ca:11:05:f8:15:71:6e:91:0a:af:76:80:ad:3d:aa:
27:b0:98:83:2b:3a:63:26:93:a9:be:01:bb:92:b6:
b8:35:01:8b:93:54:95:2d:7b:28:cb:c2:d2:5b:c2:
0a:8c:16:3e:f6:ae:60:1e:80:ca:71:a6:74:f3:bb:
af:0e:0d:e1:1f:f2:82:99:61:9a:58:37:bd:db:2f:
32:9d:a1:da:c4:e2:d5:47:da:63:0d:e5:05:9a:d3:
9e:3a:26:0a:c1:57:d0:41:cb:93:e4:2b:8b:30:77:
de:9b:cf:ed:8e:d2:06:0a:2d:67:1b:d0:ff:ca:00:
45:e8:e6:00:51:c8:b3:11:ba:b7:1c:41:52:73:ba:
99:6a:8c:b4:57:07:84:0d:d6:04:21:36:a3:12:ad:
6f:d2:f1:88:76:7d:9d:91:3a:53:07:ac:b7:04:1a:
00:62:4d:60:e8:30:31:2e:8e:53:93:8d:5e:82:33:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:46:0C:13:6D:AE:01:8B:3E:2B:70:2D:E1:B1:9A:CD:09:67:8A:87
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:1b:f8:3c:f4:0a:7b:81:29:d0:99:c1:c8:9e:2d:00:0e:
c5:71:0e:5f:90:fc:0f:90:69:d9:5c:82:08:13:2c:30:f8:6b:
b5:b6:50:39:59:8c:66:79:f6:72:30:09:79:07:76:6f:f4:0d:
9f:37:38:0c:c4:84:35:e3:d6:c8:e3:c1:9d:83:a8:3d:58:5f:
c3:39:0e:60:55:5f:f8:72:78:f2:ad:d3:3e:c0:cf:f2:94:b3:
9f:de:73:a6:fa:f0:85:2a:06:b8:e3:29:be:31:f5:b7:5a:a1:
fe:82:a9:b5:65:06:2d:51:20:d9:3b:7c:c9:a6:87:2a:73:99:
8f:23:b5:51:2c:01:87:63:05:0a:8d:22:4e:3e:de:77:d8:d8:
18:68:6e:a7:d2:78:30:f9:22:30:62:0a:44:6d:5f:e4:b1:64:
08:38:e8:8d:94:57:5b:ec:6d:dc:e4:06:3b:3d:47:69:b7:83:
7a:f9:b0:a3:fd:c3:a5:74:0f:83:af:94:ea:fb:1f:64:25:3c:
17:43:e3:1f:11:64:ba:16:91:39:c7:8a:a2:e0:73:91:27:df:
58:74:a5:39:c7:fd:9d:56:62:6c:ba:9d:78:8b:5e:25:9e:cd:
d5:ca:0e:89:42:0b:bc:39:89:d4:52:37:ac:22:16:1d:a4:e4:
40:e1:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:50:36 2025 by rpki-client