Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: M+vaef3vQEnStqn/OdXETN7xM6zrKIlLTC+2Puqk+Zc=
Subject key identifier: F4:34:B8:14:1A:AA:E0:DE:EA:72:7D:BB:35:2E:D5:37:C7:D3:E0:FF
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019677FBD08B6C64F57B20FA9DE034EAA348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 0F37
Signing time: Sun 27 Apr 2025 16:01:53 +0000
Manifest this update: Sun 27 Apr 2025 16:01:53 +0000
Manifest next update: Mon 28 Apr 2025 16:01:53 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: FpoR9QkNpGuJko76Nrarm4+BDI/M5HUfi94IzvYh2EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:d0:8b:6c:64:f5:7b:20:fa:9d:e0:34:ea:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Apr 27 16:01:53 2025 GMT
Not After : Apr 28 16:01:53 2025 GMT
Subject: CN=f434b8141aaae0deea727dbb352ed537c7d3e0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:a2:8a:56:14:38:46:42:3c:92:30:7b:45:
f6:dd:db:9d:0b:43:cd:2f:2f:21:e8:07:0b:05:62:
96:f1:9f:23:79:93:2c:84:2a:38:f4:0f:65:48:8c:
67:33:bf:a7:08:ca:a5:ba:ac:68:6b:18:02:32:56:
6d:30:47:67:bc:05:ae:e8:e7:fd:b1:78:1b:d8:00:
37:c7:8a:8a:9c:81:f1:8e:67:fc:ee:e3:9b:c7:87:
d5:67:f9:58:cf:01:4b:ef:4f:68:d0:41:17:04:d7:
9c:c7:31:14:5b:62:48:a3:ca:3d:a7:59:bf:e0:5a:
9b:ff:dd:4b:0e:c5:ce:32:e4:0d:7f:f7:01:5e:0a:
83:66:96:88:aa:2f:60:50:fd:5c:4f:b6:88:db:5a:
31:c3:53:a7:98:88:2e:d5:e8:cd:33:57:06:86:d0:
27:f5:96:1c:76:42:b9:c3:ce:41:75:e5:62:34:ae:
59:f5:34:1f:14:e9:f5:94:d7:e7:66:e5:7d:61:a0:
0f:e0:bc:84:c3:37:a0:8b:f9:10:df:26:3e:a2:18:
97:c5:fd:db:59:f1:a0:f0:e9:b9:70:ae:23:59:c3:
68:bc:72:ae:79:8a:fd:1d:36:05:a7:f3:ac:04:b5:
59:a4:79:73:ae:7c:d0:66:c7:65:01:b5:12:08:1a:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:B8:14:1A:AA:E0:DE:EA:72:7D:BB:35:2E:D5:37:C7:D3:E0:FF
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:14:07:61:91:e7:51:83:be:5a:3e:d3:5d:7b:f7:bf:16:b4:
f9:13:f2:6a:71:a3:1d:ac:2b:65:ce:aa:47:80:2e:ee:b8:e6:
d9:da:a9:02:3e:a1:62:c2:bf:4a:9d:30:52:c3:e3:fc:93:2b:
27:4d:ed:cc:fc:fc:6f:88:c4:7c:e0:41:c4:d3:2c:0e:8c:8e:
26:9b:5c:e4:54:bf:79:65:d3:0f:2c:20:18:21:bb:b3:dd:f7:
81:ed:e8:6f:a2:f2:dd:ed:d2:44:c1:69:72:83:74:e6:c4:7b:
ee:16:87:94:4e:bf:7b:63:90:b6:cb:91:b3:9d:18:f1:fe:99:
8d:0a:9b:f5:fb:27:9e:87:a0:64:36:6f:8b:f6:db:8d:92:77:
87:17:de:7b:fe:a7:ba:a1:ab:d3:eb:79:d7:9c:75:1f:64:5b:
0d:16:ba:1f:f6:8c:9a:10:d3:bb:25:49:d6:b4:32:ae:2e:d8:
62:60:64:db:d3:96:2b:ca:14:03:97:7f:10:d8:87:d7:85:0d:
08:1e:ee:4a:6c:86:32:fb:5c:95:d7:e9:53:c3:55:8a:24:71:
eb:27:45:a1:90:f5:24:08:93:16:cc:64:0d:d9:ee:77:74:ff:
66:0d:c1:45:4d:c3:18:b6:2d:7e:81:34:bb:31:b8:53:a5:a1:
61:4c:b6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:31:30 2025 by rpki-client