Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier: nZuVTyZJn9HuTNug6T+Ax21FBXgRuxWt1VDRlI2vo1o=
Subject key identifier: 82:87:61:F6:5C:20:4B:81:1A:B0:68:C3:B4:30:64:08:DC:68:28:A1
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 019674C261FA35E9D8F39FFFE0AA7C463C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 01:00:18 +0000
Manifest this update: Sun 27 Apr 2025 01:00:18 +0000
Manifest next update: Mon 28 Apr 2025 01:00:18 +0000
Files and hashes: 1: 6qhp5vwZ8p1XWEkHrAMyfBZ0C0g.roa (hash: 0m0+rWitIg/f9VuIjl3Rs/guFd3w09/gqRrViMamRLQ=)
2: cnPGqCG5nEkNqGWJOAr_TkoWilA.roa (hash: CYypMEm0JHEvZ4au2O1TzsyqDXsSN8doV/iIx579FcY=)
3: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: utKZzjU1AYFF88npsff3DcnbzICC+w4ax+gkg1Ip6/A=)
4: vXJ2lw4e2BpE0EN8XtHKh0qHF7g.roa (hash: M8+6jzD+LskphDgNZ2CuRjVcaknibU8I79hv7S74NCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:61:fa:35:e9:d8:f3:9f:ff:e0:aa:7c:46:3c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Apr 27 01:00:18 2025 GMT
Not After : Apr 28 01:00:18 2025 GMT
Subject: CN=828761f65c204b811ab068c3b4306408dc6828a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:8c:75:02:89:c0:ec:89:75:81:a4:44:81:
05:d6:50:66:f8:b0:36:9b:e7:49:95:75:98:2c:7d:
ff:f5:9d:8b:ea:2c:29:89:5e:d4:56:9b:08:b5:f2:
34:91:64:7f:a3:1e:51:ee:06:b0:a8:26:4a:af:02:
1b:1e:cf:a3:85:25:84:67:04:c9:41:53:c1:94:89:
dc:f1:df:8c:c1:f2:20:9a:42:21:4e:70:8f:39:5d:
1b:7b:ae:98:85:25:63:1f:27:e3:d9:59:4d:fc:8b:
f6:4c:b9:38:1e:5a:4e:04:5f:ba:41:02:be:f7:2e:
1d:5b:7a:71:26:ca:9f:fa:75:68:16:1a:10:dc:43:
0a:88:c5:b4:67:b6:7c:52:50:7d:25:40:8e:00:a4:
d8:10:dc:64:a2:ce:e0:37:b6:a1:bf:ee:29:98:c1:
79:b0:d8:42:c7:09:02:b7:b4:eb:a4:e1:d2:45:80:
da:0a:58:7f:b6:99:ef:d4:bb:7e:78:71:ad:5c:cd:
e7:34:f9:61:b6:10:14:d9:87:ac:71:88:4b:81:b6:
f2:a2:20:0a:32:e0:10:39:14:a2:81:dd:a2:c6:32:
b9:04:f0:b4:15:fe:35:3d:ce:85:81:28:eb:ba:0e:
1d:49:b2:ac:62:6d:18:e3:a9:ff:66:ed:1b:33:f5:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:87:61:F6:5C:20:4B:81:1A:B0:68:C3:B4:30:64:08:DC:68:28:A1
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:cb:3f:aa:0c:79:58:07:66:fe:33:13:04:9b:42:16:48:
45:07:2e:94:29:46:98:f0:ca:aa:b3:4d:42:4b:7d:30:0e:fd:
63:47:3e:fa:c2:56:16:81:13:d7:89:cb:f4:52:4a:1b:00:d7:
32:25:41:68:43:41:bb:01:c8:b7:89:74:53:19:20:b8:8c:b5:
12:8d:77:c9:d4:f7:be:7b:dd:0c:b9:8e:60:5a:65:10:c0:28:
f8:da:0a:8b:fa:22:72:ef:22:ab:1f:6d:fc:c9:6c:4d:76:38:
5f:30:a8:a4:86:6b:40:b9:16:bf:d9:2b:12:6f:ab:17:5c:25:
3a:a7:02:1f:d1:c2:d6:57:44:08:a0:88:2c:6a:48:6b:34:34:
4d:e1:c2:a2:98:0e:83:b2:37:f1:4e:4f:55:a6:39:23:ad:cd:
d9:fe:80:03:1e:57:08:5e:8d:93:20:80:93:54:15:a9:1c:e1:
0d:22:96:a6:a5:9c:c9:0a:6b:44:9e:e6:60:a1:c2:bf:03:08:
1a:e9:36:b9:99:ac:9e:69:f9:2c:42:12:2c:9f:58:9b:a8:c4:
aa:73:fd:68:50:01:d0:db:8a:cc:3e:49:a9:c9:51:fa:61:69:
24:22:a6:de:17:bc:b9:8c:76:c6:9a:6d:ac:90:bb:d7:4d:d6:
69:1f:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:51 2025 by rpki-client