Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: ieeSzk6pzDuJIh202N5e1VUC/abSn8UbU4UaYajk/4o=
Subject key identifier: E6:46:DF:DE:67:2F:04:3D:A0:51:D4:46:52:55:B7:CC:3A:F2:40:BF
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 01967C459AED1489CC48056997B16A5D0CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 0E12
Signing time: Mon 28 Apr 2025 12:00:58 +0000
Manifest this update: Mon 28 Apr 2025 12:00:58 +0000
Manifest next update: Tue 29 Apr 2025 12:00:58 +0000
Files and hashes: 1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: 8weA4UaKaqDmfYgdULdgJr3OWTt7gqO3PtwH+ujlhJI=)
2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:9a:ed:14:89:cc:48:05:69:97:b1:6a:5d:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Apr 28 12:00:58 2025 GMT
Not After : Apr 29 12:00:58 2025 GMT
Subject: CN=e646dfde672f043da051d4465255b7cc3af240bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:81:7c:77:ec:ed:04:6a:50:f6:dd:8e:72:
19:ed:76:3d:55:90:af:45:fe:01:5a:64:28:93:a1:
f9:a2:aa:a6:33:64:39:e0:48:e8:30:2a:27:22:d1:
e2:82:c3:d3:4f:c1:cb:24:5f:1f:e9:96:b1:82:89:
e9:7f:16:d7:a4:ae:51:95:86:8d:0b:12:69:40:d1:
f7:44:99:7c:14:a2:89:fe:a7:a7:3a:6d:aa:52:56:
29:91:73:45:dd:a1:de:6d:77:fc:c6:30:1c:e6:b8:
f3:99:00:f6:6d:ed:a7:96:ec:9c:e4:15:ec:83:6f:
86:c1:f4:4f:b8:10:92:aa:7d:83:67:e7:f2:e0:33:
97:66:7d:a7:22:5e:81:7e:95:7e:ab:51:dc:c8:74:
e8:ce:dd:7e:3c:8a:a1:eb:7b:4d:e2:87:2b:34:8f:
7b:db:d8:d9:bc:8d:d7:78:bc:be:de:c1:17:9b:f0:
e0:5a:ab:aa:4f:d3:ef:15:7a:be:f5:32:eb:89:f4:
aa:a3:1c:6e:c4:0b:b9:c6:a1:f8:58:7f:c9:9e:e0:
f9:46:fe:c9:0b:3c:5c:27:19:87:16:0e:d1:a4:58:
79:f1:d1:6a:5d:f5:82:a6:46:c2:e4:e1:79:93:10:
c9:68:6b:67:be:2c:85:3c:08:2e:dd:39:a3:5d:73:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:46:DF:DE:67:2F:04:3D:A0:51:D4:46:52:55:B7:CC:3A:F2:40:BF
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:69:61:07:40:84:ed:69:fb:e7:00:1e:2f:94:98:b8:48:5f:
c7:34:a7:8a:ce:53:15:c4:ea:86:fe:e6:2a:55:a0:50:78:6e:
41:b0:2f:85:ac:78:0c:69:75:af:e6:51:bd:46:48:5e:49:04:
93:a9:ea:b3:12:ff:8e:24:c6:26:2b:55:9b:1a:33:9c:f4:23:
2f:ee:cf:b0:8f:63:54:b3:dd:03:be:88:76:11:eb:ae:d5:b4:
e6:92:5a:e9:eb:4f:11:b2:4e:29:13:af:b2:ca:08:7a:0b:bb:
e0:cf:ca:48:6f:17:16:69:49:3b:d4:b2:f3:d6:6a:6e:b0:ed:
8a:14:c6:aa:30:44:80:ae:9d:97:0f:eb:6d:a9:36:0d:be:c0:
97:b9:44:f6:36:9b:7a:4f:da:ff:99:44:d1:0e:a9:f2:f6:06:
db:cd:8f:45:fc:f8:25:31:9b:0d:fb:54:45:30:a9:c0:34:b5:
4a:a4:06:4b:3d:7a:75:9b:32:bb:41:de:77:07:29:28:13:56:
2a:ce:56:3d:9a:9b:10:e9:cb:c1:0a:5d:6d:dd:9e:c1:a1:3e:
cd:04:93:6a:c2:05:c8:d5:11:52:e6:e9:14:df:f3:70:ae:b6:
54:b9:01:07:65:f7:45:26:1b:0b:a4:56:d9:b6:1e:95:50:cb:
54:e2:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:09:07 2025 by rpki-client