Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier: BnwUmRH7MZDf4fE8Qur7KDNK62hMc4YKTW76LCHuWeY=
Subject key identifier: 2F:2D:F8:44:DD:1B:30:20:C6:CF:1A:75:DE:EC:26:1B:F8:71:D0:AB
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial: 01967F46688EB65DCB4B3B5975D4F0A56B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number: 036D
Signing time: Tue 29 Apr 2025 02:00:42 +0000
Manifest this update: Tue 29 Apr 2025 02:00:42 +0000
Manifest next update: Wed 30 Apr 2025 02:00:42 +0000
Files and hashes: 1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=)
2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: kNzeGrJNLurgyZJ0p30DX9/lqzC6kU7UgVvNzZujOC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:68:8e:b6:5d:cb:4b:3b:59:75:d4:f0:a5:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Validity
Not Before: Apr 29 02:00:42 2025 GMT
Not After : Apr 30 02:00:42 2025 GMT
Subject: CN=2f2df844dd1b3020c6cf1a75deec261bf871d0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:c0:43:f5:7e:20:99:e8:37:35:77:ca:b7:
fd:b9:b7:37:99:bd:e9:80:f7:1b:38:11:cd:48:94:
8d:c2:b5:e2:4e:92:2b:38:7c:00:23:d6:e0:eb:d7:
f3:09:42:d7:6e:df:a5:fb:db:25:1b:7a:06:6c:ed:
74:62:82:29:4d:26:3d:c6:b8:15:8a:dc:83:f3:23:
28:be:d8:99:bd:22:ec:24:8c:eb:4d:3c:82:18:66:
22:1e:93:36:0f:f3:9b:30:06:54:2a:55:6b:e3:18:
fa:d6:ec:b7:41:f9:60:22:69:41:7c:80:d5:29:37:
21:4e:17:2c:94:60:11:5c:a4:83:52:9a:f0:d9:e0:
c1:54:84:ab:4f:cf:e2:d8:5e:13:5c:a4:26:4c:89:
c7:6c:37:8d:8a:e3:01:da:83:a4:c4:9c:de:2a:1f:
a1:3e:65:bc:df:1f:aa:91:4a:ca:76:bf:c6:55:87:
58:00:cf:c4:96:7e:ca:17:d4:fe:56:45:3f:b3:90:
49:26:2d:7f:31:e1:98:0c:08:bf:77:1a:f4:1d:d5:
e0:fc:c2:74:e0:7a:3b:1a:42:e3:44:ed:32:42:83:
29:de:8f:fb:f2:40:1a:c2:94:d3:c9:2b:2e:8d:a2:
46:32:d7:fd:93:8d:b8:40:1c:1b:5a:fe:96:3b:63:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:F8:44:DD:1B:30:20:C6:CF:1A:75:DE:EC:26:1B:F8:71:D0:AB
X509v3 Authority Key Identifier:
keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c8:d9:33:52:93:38:c1:75:57:13:f2:51:30:01:a8:7f:fa:
dd:86:95:67:80:0b:7b:a2:53:9a:ad:43:b2:01:c4:91:4e:06:
7b:d3:f3:20:4d:8a:38:5a:05:52:8d:c9:f8:b6:40:c7:2c:49:
20:75:46:28:33:12:10:b1:0d:da:fa:d2:ab:24:5d:b2:9c:f4:
18:c5:d2:89:2b:f9:71:9d:99:7c:71:56:ef:0f:69:0e:d0:cd:
99:61:51:b4:ea:72:9d:b3:33:3a:34:63:f7:c0:71:a7:e5:e0:
7e:7f:f9:af:ec:bc:10:69:8c:af:88:53:1d:dd:1d:4d:ed:87:
e7:ea:8e:07:8b:40:30:46:ed:6f:c4:f7:11:a5:73:70:fb:26:
6c:31:a2:c9:12:17:14:45:bb:37:e9:af:25:f6:66:7d:e0:bb:
ab:70:75:d5:0e:73:8f:fc:02:40:7c:b6:d6:23:b3:20:ae:5b:
72:6a:83:0b:93:de:6a:ca:2b:98:af:58:62:ba:d0:c1:d5:e8:
58:1c:e5:f2:93:db:8d:c1:78:c0:3b:96:97:ee:03:96:5a:8d:
88:80:73:1e:68:46:55:4e:d6:82:1a:51:e3:c7:e7:cd:9f:a1:
45:93:43:85:de:29:be:57:db:96:8f:b1:2e:cf:68:27:f7:92:
38:56:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:58 2025 by rpki-client