Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: ulUrct8v4/Kd1RelWBR92zSsq2yWZ2D8Mkr8lkZ6WgE=
Subject key identifier: FF:46:F6:7C:55:A2:EA:9E:DB:C4:90:14:3F:BA:E6:1A:7D:70:F0:B2
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 01967BD79313A8E9A6809CFCFB8D8FB66274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 10:00:47 +0000
Manifest this update: Mon 28 Apr 2025 10:00:47 +0000
Manifest next update: Tue 29 Apr 2025 10:00:47 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: WipCIkD03c6D/mUrmHFX7+54YtiOiyefNPn032JqJlY=)
2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:93:13:a8:e9:a6:80:9c:fc:fb:8d:8f:b6:62:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Apr 28 10:00:47 2025 GMT
Not After : Apr 29 10:00:47 2025 GMT
Subject: CN=ff46f67c55a2ea9edbc490143fbae61a7d70f0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:1e:11:66:c2:5b:56:15:28:37:c7:2e:f4:
6b:03:0a:fd:56:45:c1:37:c5:0f:f1:e6:5d:2c:9d:
2c:cf:2b:55:b9:21:cf:f6:bb:e8:0e:57:72:94:83:
9e:8c:ad:e0:ae:53:47:58:5b:72:41:36:11:de:e2:
e1:4f:f9:0e:f5:6b:a6:4f:94:71:99:55:ee:6d:8e:
44:97:01:80:0a:61:19:82:93:2e:58:03:68:6c:60:
15:da:c8:e1:c8:32:c2:cb:5e:d3:6d:60:d4:7a:21:
e5:41:77:e4:c9:ee:4a:30:fd:65:68:54:82:13:76:
1f:ae:6f:cc:76:ae:a3:a5:59:89:45:a5:bc:1d:23:
06:bd:33:b4:b4:94:b7:ab:18:96:34:12:63:74:32:
5a:98:44:6b:20:2f:88:98:47:4c:de:2e:55:c3:b6:
53:85:86:ef:ff:09:d4:49:30:94:0b:e8:7f:39:20:
13:de:bd:d2:20:e7:ed:ea:af:14:52:99:4a:5e:39:
ad:35:b6:3d:55:8d:90:4a:df:38:3c:a7:5c:ac:8e:
1f:c2:e9:0c:e8:e1:39:46:55:c8:36:b0:c7:0a:98:
57:e4:34:fb:91:85:68:a7:05:f9:99:8b:57:e0:23:
a4:82:68:93:3d:bc:7a:63:24:33:53:f8:e0:ec:47:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:46:F6:7C:55:A2:EA:9E:DB:C4:90:14:3F:BA:E6:1A:7D:70:F0:B2
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:59:be:b9:91:43:da:93:2e:6e:a7:07:8b:d2:32:53:93:05:
5d:2b:0b:1d:86:10:d6:88:71:4f:e4:bc:d5:7d:62:a8:54:17:
5f:5c:60:2f:56:12:2d:ee:6c:36:87:ab:fe:fb:07:a3:59:ea:
be:0c:c1:3f:f5:16:98:c9:48:92:3c:e4:c7:6e:74:82:c1:4e:
a2:ab:be:83:13:d3:c5:e9:fa:90:93:7b:15:bf:6e:bd:a9:6e:
2e:6a:cf:e8:e4:45:15:59:30:39:68:63:2b:d8:e2:a0:56:df:
32:68:40:ab:8e:95:a0:ef:bc:be:45:24:4b:c2:de:1f:b7:a6:
ac:2c:f9:66:3b:b0:2d:a8:2c:c6:66:96:3f:1f:78:f6:5e:df:
9b:4d:b3:22:64:10:5d:eb:b1:bf:42:ab:9c:d5:54:b1:a1:f7:
70:4b:87:27:8a:df:e3:d2:f6:7d:d8:9d:e3:79:ad:59:1e:55:
96:2d:1d:61:9e:a4:10:20:d0:12:49:68:0a:f9:dc:18:50:45:
2d:89:ba:69:9e:68:bb:0e:11:6e:ba:f6:8f:d4:30:5e:69:00:
8a:dc:f3:1f:ba:b6:ea:b3:96:27:57:a9:0b:51:0a:c1:54:0c:
d5:bd:37:a2:d6:6d:91:2f:0c:cb:5f:00:c3:05:5b:0b:09:09:
eb:cb:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:08 2025 by rpki-client