Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: L73KFprdNsIthTQCgMGDAIN3Cdt+N8znT7YmjjVUOtY=
Subject key identifier: C1:1C:34:85:12:86:E3:69:D4:85:94:4E:CB:17:65:35:D2:17:47:AF
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019688B7AACFE7D1F56DA58FA26C170A66A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 22:01:00 +0000
Manifest this update: Wed 30 Apr 2025 22:01:00 +0000
Manifest next update: Thu 01 May 2025 22:01:00 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: ccW48HrfVyfvxrdZcjw55LlBFT9gKNKSJUsEfpUBFcA=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:aa:cf:e7:d1:f5:6d:a5:8f:a2:6c:17:0a:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Apr 30 22:01:00 2025 GMT
Not After : May 1 22:01:00 2025 GMT
Subject: CN=c11c34851286e369d485944ecb176535d21747af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:c0:2f:3f:7d:8c:60:1d:ad:fe:ef:91:05:
4a:8a:f6:90:f2:86:4c:64:58:0c:73:ab:9a:a5:35:
88:64:a2:a1:a6:d1:25:ac:e9:f2:cf:0d:6f:1f:58:
78:14:6a:08:4f:e3:ba:03:00:03:43:63:8a:94:86:
ef:e6:ca:86:ae:1c:20:be:52:be:7e:c5:3b:48:01:
e6:b6:fb:97:80:f4:c2:dd:cf:0d:50:7e:5b:fb:91:
0b:cc:82:3a:cc:a2:0f:b6:67:76:0b:09:08:43:06:
32:04:7d:8b:7c:35:62:72:86:68:4b:e3:9f:4e:51:
d9:ae:0d:f8:9f:63:4d:f8:36:0e:89:30:e3:22:0b:
3e:4a:89:04:2a:e8:d8:b4:3b:87:4c:9b:94:b9:8b:
56:b0:78:59:aa:f5:cc:a7:53:5c:fb:8e:ea:28:c4:
7b:4f:bf:80:2d:cf:98:1b:22:d1:3a:62:2f:33:da:
d5:e4:35:a5:b2:63:8c:7d:58:fa:d6:90:a2:d4:1e:
0d:17:e0:c3:18:98:ad:3f:1b:9f:49:62:cd:31:d3:
97:8b:56:6e:3e:86:36:dc:d1:2f:25:0f:f3:5e:df:
d6:41:a4:89:ef:38:37:b7:a6:53:38:33:1d:54:da:
04:d3:4b:df:04:d9:52:c9:d0:b0:0f:db:00:02:53:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:34:85:12:86:E3:69:D4:85:94:4E:CB:17:65:35:D2:17:47:AF
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:39:7f:e8:21:4d:43:0e:bc:10:91:63:06:9b:f4:10:0d:27:
9b:09:bc:f5:00:5e:17:85:c5:d8:ef:4d:34:70:09:93:2a:86:
8c:92:0a:fd:ea:b4:8d:5e:80:00:01:93:12:25:ed:a6:6e:aa:
b7:51:37:f8:02:25:3b:9f:c5:0c:5a:5b:41:e7:c0:af:a1:f3:
6c:d8:3f:59:69:40:c9:38:13:73:22:bd:66:eb:b0:bf:41:9b:
60:db:d7:60:0e:0a:e1:6a:c5:9a:a9:e0:3e:9f:ae:3c:6c:17:
62:7e:c1:b8:e6:5a:46:65:d2:90:96:1d:4e:bf:65:aa:92:c6:
e6:40:eb:50:ec:79:72:2b:aa:e2:53:24:be:e5:3d:45:77:41:
d5:27:e4:c3:74:48:40:f5:62:bd:7d:53:4a:76:df:a5:6f:4f:
2d:d0:00:9e:5d:81:92:56:f6:a4:96:f6:b6:ef:e9:8c:4b:4e:
fa:dd:85:73:2b:20:b6:62:76:8f:8b:a7:21:c5:0c:a5:52:6b:
e4:88:5c:39:07:94:b5:8d:a2:1c:1e:2e:c6:0f:c9:3f:b1:9a:
88:a4:06:ba:c1:ef:ea:cf:23:f9:8e:24:5b:1d:2c:4d:4e:0d:
2c:97:1d:0c:bf:26:d6:1b:b6:05:ca:3e:34:fc:3f:68:fa:2a:
f7:dc:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:19:36 2025 by rpki-client