Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
File: F43VHX5As0tDn4_fTQUUEcU0cuo.mft (raw, json)
Hash identifier: 9o4v5uFgXPpHmq7phsJ29H4jB+wkQTrMYKQkNckLr0Q=
Subject key identifier: AB:75:F6:55:17:6C:8E:82:B2:72:8A:B5:FD:ED:78:14:51:11:51:47
Authority key identifier: 17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
Certificate issuer: /CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Certificate serial: 01967C0E887BD2EE2C8FF9A3EC4663083011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
Manifest number: 02D8
Signing time: Mon 28 Apr 2025 11:00:49 +0000
Manifest this update: Mon 28 Apr 2025 11:00:49 +0000
Manifest next update: Tue 29 Apr 2025 11:00:49 +0000
Files and hashes: 1: F43VHX5As0tDn4_fTQUUEcU0cuo.crl (hash: vVjG4xLdsXX+S2Y8qZeOKrxPvKagOwRNBxDsYE3ux4k=)
2: sY0r0y4AruQYBO-qa1jtodSMRJI.roa (hash: fgiZ0pPukyfp5f/cG9pJMs5XjY+lIWQ3prMocyZ72Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:88:7b:d2:ee:2c:8f:f9:a3:ec:46:63:08:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Validity
Not Before: Apr 28 11:00:49 2025 GMT
Not After : Apr 29 11:00:49 2025 GMT
Subject: CN=ab75f655176c8e82b2728ab5fded781451115147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:17:e0:9a:31:c1:9f:ca:3d:8f:12:70:e1:
9c:b8:83:67:2d:89:1d:39:bf:c9:f1:b3:ea:12:7f:
53:b4:eb:cf:af:2e:1a:cd:1d:ff:70:a6:78:c6:cf:
d5:e1:04:3b:c2:f3:35:7b:b9:35:02:b2:12:d2:c9:
66:3c:84:1e:d8:c8:d8:9a:60:66:49:8b:86:3c:6a:
ec:0a:b0:ac:0b:6f:e6:29:96:61:50:4b:8e:76:2b:
c8:f0:34:01:52:fc:a9:41:af:a1:21:5a:79:cd:a3:
74:f6:6d:02:cd:39:3e:a4:76:9d:0e:98:99:4e:83:
3b:a7:97:24:f7:12:25:63:f7:78:7d:45:1f:a3:d7:
b0:7e:52:b3:7d:39:5c:48:04:de:2c:1a:70:10:1c:
96:ee:4d:15:64:8a:f0:c9:bf:8d:d3:3d:0b:c1:51:
6d:47:3a:cd:6c:09:04:8a:b3:70:08:b6:e0:0f:e7:
f8:8d:db:83:5b:87:6f:e4:64:2b:a8:d7:58:4c:2d:
57:e0:27:f0:37:a7:af:67:69:cb:a9:bf:f1:3c:94:
60:b3:43:fb:d3:62:e2:68:26:5a:f3:64:74:70:a4:
a0:a4:9f:4e:95:08:0b:ee:a6:de:de:23:8b:2f:a6:
22:1d:e6:4b:58:88:4f:85:8a:f9:5f:fb:c0:d6:0f:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:75:F6:55:17:6C:8E:82:B2:72:8A:B5:FD:ED:78:14:51:11:51:47
X509v3 Authority Key Identifier:
keyid:17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6d:d7:f7:86:12:51:d6:85:09:ff:78:95:b0:7e:02:e7:da:
c7:88:d7:13:65:9a:d4:c6:0c:12:48:cf:74:41:65:99:75:bb:
28:2f:35:0e:bd:cb:15:cc:98:c7:23:3c:2a:1d:59:33:c9:9b:
fc:a6:8b:55:30:c6:b8:02:80:f7:31:2d:5c:8c:17:54:ad:7b:
5b:c6:56:ea:a0:6c:85:d6:fe:93:45:11:b9:b6:fd:7a:82:8d:
02:e5:6d:25:45:1d:34:40:46:58:58:02:78:32:b0:c3:18:d1:
66:ef:55:70:34:5b:c1:26:44:2b:d3:5c:db:90:ee:66:d3:9b:
2c:0b:30:d0:2f:1b:c7:9d:af:f5:a9:c5:9f:66:41:cc:91:cd:
66:83:45:05:9b:29:e3:ac:eb:5c:24:e3:e1:bd:75:2b:ab:e9:
b8:ac:c1:40:da:c0:41:b1:67:bd:01:51:cb:57:3a:98:be:79:
cf:d8:48:4a:cc:59:1e:b5:42:94:29:31:32:fe:0a:62:41:4c:
61:e7:5f:80:8a:11:95:ca:57:d8:24:25:26:35:08:82:8a:b3:
86:b7:ca:8e:99:f6:f7:b0:9d:96:47:4b:be:a9:f5:4f:88:18:
6c:d3:b6:b9:e6:e2:f3:66:8c:a3:79:3f:98:22:9e:4c:d4:7d:
ef:7e:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:26:05 2025 by rpki-client