Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: Myl3QgjHXXj/XGyCnAE7+7jTgLRvOhicXGrEQYDjphI=
Subject key identifier: 36:23:F5:93:76:BA:3E:DC:65:E3:6F:BD:5E:6C:5E:7B:57:5D:A2:D2
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 01967BA09A13371BD21AFA89D140F8A06BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 09:00:44 +0000
Manifest this update: Mon 28 Apr 2025 09:00:44 +0000
Manifest next update: Tue 29 Apr 2025 09:00:44 +0000
Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: NR/JBux/yOn8d59euSmPU0DhwXu1nt963T7X0O94YH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:9a:13:37:1b:d2:1a:fa:89:d1:40:f8:a0:6b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Apr 28 09:00:44 2025 GMT
Not After : Apr 29 09:00:44 2025 GMT
Subject: CN=3623f59376ba3edc65e36fbd5e6c5e7b575da2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ec:2f:d7:68:46:e2:89:fa:b2:68:69:c4:28:
36:df:5e:b7:cc:df:9c:63:38:98:ac:f2:82:ef:06:
98:5c:a8:ce:89:89:9d:85:02:87:27:99:8e:4e:c1:
82:13:f6:b9:db:88:1c:71:f2:4c:7c:48:b0:57:43:
27:bd:5f:4c:2d:7a:7b:53:04:c4:76:7a:e2:7b:aa:
e6:20:67:c8:68:7a:e3:64:ce:4d:d5:46:17:4d:c3:
15:12:7a:30:09:ca:9e:79:c3:df:5e:83:69:e9:aa:
ac:94:cb:3b:ef:20:bf:b8:fb:ff:40:c4:2b:43:d0:
3b:c6:99:2b:5e:ea:cf:b7:29:f1:cc:13:07:bc:76:
80:15:5a:1a:e0:a9:c3:cd:8a:a7:38:a2:8c:54:34:
85:b3:93:06:25:b9:f8:0a:ed:3c:fa:7e:04:4f:e8:
69:46:b2:35:2a:2e:e2:c3:14:4f:74:29:ee:35:ea:
4e:c9:7b:41:43:c0:c6:a8:5f:fc:e4:c2:d8:63:37:
47:9c:55:41:ed:6d:70:cd:c1:25:57:c7:cc:ee:49:
6a:cf:25:df:a1:46:4d:a2:2e:ef:c8:d1:f7:45:e2:
d8:76:0a:8b:11:82:55:2b:00:ac:6e:ef:11:67:f6:
b2:f8:15:71:d8:8b:8b:d2:ab:68:90:31:37:80:c4:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:23:F5:93:76:BA:3E:DC:65:E3:6F:BD:5E:6C:5E:7B:57:5D:A2:D2
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:36:5d:89:cb:7d:df:76:87:53:ad:e4:0a:1d:ef:55:f4:73:
43:52:82:4b:77:ff:cb:2b:e9:23:62:a8:52:28:8f:e5:f7:dc:
db:97:14:f9:d2:ad:72:6c:34:5f:59:8c:55:82:99:78:12:da:
81:da:67:c1:90:d7:86:01:f4:47:27:17:c7:52:a4:c5:c5:2a:
42:41:ab:09:cc:48:b9:c1:11:0d:de:b5:df:83:f1:ce:73:6e:
28:af:ee:f9:1a:68:ee:e2:57:76:ca:48:a1:1d:92:18:b8:50:
59:35:b5:54:95:c4:e6:3b:c7:ce:24:0f:91:07:b8:76:8f:f1:
52:75:67:b6:98:44:a1:b6:37:ba:3c:96:dd:ef:59:26:86:0b:
03:ad:2c:28:44:e7:b9:39:b8:4a:5e:d0:f8:99:ae:b2:f7:7a:
8e:38:54:60:1e:75:6a:34:74:bd:ea:7e:58:31:ee:b2:d8:8c:
a4:86:c4:5d:25:f6:44:28:ee:c1:13:7e:e5:69:1b:3c:93:35:
21:d7:1c:86:06:2a:cf:6d:e8:de:a2:9a:6b:e8:93:b8:c6:56:
c2:81:69:63:9f:47:61:4d:31:fa:a2:ff:fa:82:b1:19:99:eb:
7a:c5:75:10:cc:39:a0:34:22:be:79:4c:eb:a5:2d:d1:a7:ee:
6b:5a:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:42:00 2025 by rpki-client