Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: EHa5Ui3oBlZk9kttZKQ0QYeT7UipDaCNCn+D5sgUrv0=
Subject key identifier: 97:48:56:9B:6E:51:81:F6:2C:11:05:E4:7F:4D:9D:34:ED:C8:19:5A
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 0196783183E5C40D5C08107BC429237B6593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 17:00:32 +0000
Manifest this update: Sun 27 Apr 2025 17:00:32 +0000
Manifest next update: Mon 28 Apr 2025 17:00:32 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: FxlOS+v02/TlmYWTCzl+XNYroBA7P3ifutZWQQB74+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:83:e5:c4:0d:5c:08:10:7b:c4:29:23:7b:65:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Apr 27 17:00:32 2025 GMT
Not After : Apr 28 17:00:32 2025 GMT
Subject: CN=9748569b6e5181f62c1105e47f4d9d34edc8195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:23:79:9f:00:ff:8d:30:71:14:ed:8e:99:
95:8e:1d:e7:c1:fd:f1:71:ec:c4:b2:a1:19:fa:ff:
9c:6c:d6:b1:56:18:7e:49:7b:38:29:c8:96:77:b4:
43:82:3b:44:ab:4b:94:46:22:82:24:9d:6a:11:e5:
11:c9:af:77:1f:8a:13:c8:0f:51:da:87:6a:a2:6b:
b5:00:6c:a8:86:c2:62:46:53:0c:4a:c3:b9:79:84:
18:0b:46:ae:e5:fe:d8:d9:df:49:50:65:4b:dd:5e:
d3:58:69:c0:11:08:85:84:53:fa:b9:6c:c9:9b:f7:
3f:f1:17:89:72:d9:2d:0d:95:ae:c5:12:ec:65:b4:
4b:0f:8c:0b:23:04:c5:99:2f:67:d3:58:5c:88:41:
43:ee:28:28:ce:e2:39:3c:d6:48:d7:b9:25:88:02:
7c:22:8f:39:85:4a:b1:40:4c:7b:e8:6b:8d:de:e7:
ed:54:74:15:12:c7:79:df:c0:00:94:6f:1f:fd:55:
cb:30:5f:72:be:c7:34:56:2a:5a:e6:c7:aa:e9:d7:
ae:20:c7:17:4a:6e:9f:e2:7d:e3:68:4c:6e:d6:d4:
69:1e:8d:34:ec:40:d7:41:db:79:40:f7:a9:23:9b:
c3:ab:d9:81:8e:3e:06:f8:08:42:0e:c0:4c:1e:ff:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:48:56:9B:6E:51:81:F6:2C:11:05:E4:7F:4D:9D:34:ED:C8:19:5A
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:29:f2:36:7d:76:c7:61:cf:83:d5:2c:8b:2d:de:68:dd:98:
f1:d3:dd:57:fb:9e:63:90:a9:d8:1e:24:e8:5f:21:6c:57:26:
61:25:53:65:b4:2f:59:ae:ee:3c:fd:a5:bf:b2:ea:3a:ca:f2:
81:e9:0f:bd:c3:f3:5f:a7:1f:75:96:70:0a:56:77:2e:36:a0:
03:c4:10:98:e4:d0:29:0b:6b:95:aa:89:44:fd:93:a1:04:63:
dd:9c:52:8b:24:1d:17:57:3d:a0:88:ac:6b:b3:24:a0:b6:a1:
be:30:8f:e0:f0:f5:85:85:4a:1e:bc:a5:31:0d:b7:c7:60:93:
6c:83:84:05:59:1d:53:b6:72:0b:dc:53:67:d3:4a:db:dd:bd:
ab:bb:e8:ee:1b:10:c0:11:1b:62:64:62:ed:5e:72:0f:c7:45:
98:67:8d:b6:c6:15:1e:e0:b2:6f:ad:3d:c1:ce:0a:43:2b:8d:
8d:ed:90:78:0e:be:9c:3e:ab:08:e8:33:16:41:d6:ff:2d:78:
99:98:41:95:be:0b:4c:76:66:9b:c5:68:7d:2d:3a:72:a3:51:
e5:72:73:dd:27:71:ca:b6:2f:26:66:7a:5b:b9:5d:e7:a3:f5:
a5:8b:3c:47:8e:d5:74:83:a3:b6:af:62:91:99:bb:0d:a7:cc:
b5:c6:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:47 2025 by rpki-client