Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: vTAJi3pfhUICoju5tUi+gujH2Tw6wlXBirAEA31MYCY=
Subject key identifier: D1:DE:7D:39:6D:64:66:49:4F:81:B5:F2:97:FE:2F:8B:6C:56:3A:57
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 0196827EA41BBB1802B26730CA6B5785869F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 108E
Signing time: Tue 29 Apr 2025 17:00:59 +0000
Manifest this update: Tue 29 Apr 2025 17:00:59 +0000
Manifest next update: Wed 30 Apr 2025 17:00:59 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: dP2QmAxLsSq9mOJZ/ngagN6/Ww8NYsojpEQIeG3ZMx8=)
2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:a4:1b:bb:18:02:b2:67:30:ca:6b:57:85:86:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Apr 29 17:00:59 2025 GMT
Not After : Apr 30 17:00:59 2025 GMT
Subject: CN=d1de7d396d6466494f81b5f297fe2f8b6c563a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:84:f2:1c:9d:9a:58:b2:f0:0a:7f:5b:16:
07:b8:a6:4c:6c:f4:bc:9e:6b:ac:40:f9:b7:1c:a6:
08:29:31:33:6e:87:fe:17:62:94:6c:6e:c3:fb:eb:
3b:15:f3:11:7e:cd:d4:7d:8b:01:1e:61:f4:a0:57:
63:9f:22:e8:3a:de:38:cc:a9:99:8a:ef:69:cd:f9:
07:6d:59:75:aa:e4:44:7d:c8:70:42:9c:18:6d:10:
8f:05:89:77:58:1e:f5:ee:ee:b9:b5:f0:8e:80:ae:
c0:97:42:57:75:38:7f:1d:85:7d:7e:bc:7d:82:f5:
d6:6b:d7:ad:0b:1b:f8:c3:77:9c:2b:84:41:0d:f4:
fc:4b:14:68:58:7f:bb:62:1e:64:30:35:87:5b:04:
85:ee:a3:5c:b0:f9:79:c1:03:3f:76:a3:a7:b4:64:
4d:89:0d:32:9e:2c:7c:1c:e1:92:22:84:0e:fa:66:
3e:f3:f3:4f:2f:e7:ba:d5:51:22:37:4b:f0:82:2b:
20:9f:01:76:a3:98:aa:3c:e7:bb:a2:1c:fe:c7:34:
0d:49:f4:f3:13:5e:2a:99:d6:46:14:e7:40:2f:ad:
23:aa:c2:c4:ae:99:f4:0d:21:66:2e:2f:f4:dd:ca:
9f:05:79:38:0c:c4:76:8d:50:20:2f:bb:4e:a8:3a:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:7D:39:6D:64:66:49:4F:81:B5:F2:97:FE:2F:8B:6C:56:3A:57
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a7:84:f0:49:5e:a4:f8:1f:14:d9:c2:e6:5c:91:8c:47:8a:
70:49:c1:59:0b:ef:07:af:d4:25:59:a0:6e:f5:b4:76:2e:48:
34:84:07:37:9f:fe:0b:9a:c1:bc:a9:7a:ec:b6:85:79:c9:98:
f6:f7:89:c2:2c:45:b0:0c:3e:38:e6:0b:9f:44:77:3c:9f:f5:
ba:23:51:f8:08:d3:c1:17:4f:7c:65:54:ec:9e:b5:6b:db:83:
9a:2f:f6:54:4f:a9:dc:3e:e6:2b:4b:77:12:28:0c:e7:9e:34:
8c:83:2a:d1:83:f7:16:bf:27:4f:a3:e8:eb:3d:3f:50:57:c0:
99:6c:78:e9:4d:2a:1e:b3:18:3a:76:be:11:5c:b1:18:f7:ee:
43:1f:2d:e6:22:49:e2:bf:75:7c:85:b8:48:9d:53:a2:82:c2:
6a:5a:6e:45:d1:93:11:52:02:a6:1a:20:fd:1d:1a:50:27:59:
ca:72:e7:1a:fa:c9:92:0d:1f:9b:f9:2d:5f:aa:34:7c:93:56:
88:c4:e2:7a:cc:09:94:15:43:8d:d2:59:9a:22:8c:c1:c0:60:
2b:3a:45:5c:4a:fd:b9:79:b5:33:f9:8a:48:aa:d7:ac:10:71:
5e:28:c6:c5:b7:7f:a3:5d:4c:35:7a:5c:91:5e:d6:98:d0:f0:
1d:72:80:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:29:35 2025 by rpki-client