Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: DG+cXFdpIF5ryg0jBrV1EmqdsL9D1+0uOWcMG+xs5zA=
Subject key identifier: 17:A2:64:A5:D0:04:17:E4:46:B1:D8:B4:34:33:D7:8A:DB:E0:F5:A0
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019673B01ABD10E5E1F503260A2AA39405B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 076D
Signing time: Sat 26 Apr 2025 20:00:43 +0000
Manifest this update: Sat 26 Apr 2025 20:00:43 +0000
Manifest next update: Sun 27 Apr 2025 20:00:43 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: 0xNPXBBwp6ZkLOfYhw2T9+9ykGN9STwJROp6Vn9wga0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:1a:bd:10:e5:e1:f5:03:26:0a:2a:a3:94:05:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Apr 26 20:00:43 2025 GMT
Not After : Apr 27 20:00:43 2025 GMT
Subject: CN=17a264a5d00417e446b1d8b43433d78adbe0f5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:45:4e:53:d2:d5:57:25:da:2a:f3:0a:5b:
2b:94:4f:8c:14:ec:fb:ed:a0:56:ec:63:4a:11:a2:
3a:16:b1:d6:d7:89:08:e6:cb:5d:be:99:7e:2d:0b:
04:73:21:79:8b:96:50:32:63:82:50:28:4f:03:b9:
e8:b6:54:98:60:10:9d:d9:84:42:67:ec:32:10:df:
70:cf:c4:52:21:8c:bf:3e:5c:d8:5d:7b:a8:9b:eb:
0b:52:d4:29:b0:69:62:ca:35:33:79:8d:96:65:5e:
73:24:2e:7d:9a:1f:99:ab:8e:8a:39:f2:64:52:11:
62:7f:a9:e6:03:eb:bd:f9:34:52:05:25:40:13:df:
e7:f5:a1:f7:ad:e0:a9:5d:e7:9a:15:e7:86:fe:fc:
41:2e:6c:34:32:83:30:12:57:c1:ea:60:ad:70:48:
94:b4:1f:11:bc:20:18:4d:a9:71:8d:42:2f:35:17:
8e:3f:fb:2a:95:b2:9d:c5:ac:fd:cc:28:2c:c4:85:
e5:7e:f2:ed:42:50:33:8e:39:9c:b9:70:f0:bd:2c:
9f:72:91:87:b8:25:fd:b1:21:bf:f3:c8:fe:6f:bd:
bc:2f:d0:01:05:17:f7:26:c6:d1:d2:34:ec:42:95:
fe:ad:cf:19:6c:fa:06:ea:04:35:7b:96:8c:06:c7:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:64:A5:D0:04:17:E4:46:B1:D8:B4:34:33:D7:8A:DB:E0:F5:A0
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:60:35:6a:ad:65:13:47:25:ef:5d:60:54:87:2f:eb:82:63:
96:60:99:25:96:b5:1f:90:55:41:49:e6:fc:df:b9:07:56:06:
b0:0e:c1:99:f8:b4:5e:ce:0a:f9:47:42:75:22:78:a0:20:4a:
8b:a1:f4:04:46:94:04:48:8a:6b:7f:fd:19:93:e2:62:71:77:
4c:81:48:85:49:25:97:99:40:d2:b0:37:b7:81:50:b2:8e:df:
f8:62:db:17:a1:13:77:b8:64:12:55:d7:6d:bc:fc:a7:a1:7d:
31:b6:e5:f1:4b:2a:18:c0:a3:01:7e:38:45:19:17:e9:f7:02:
b1:c4:06:9e:8d:a7:55:61:fb:d4:e5:e5:b4:0e:7e:59:ba:1d:
a8:ee:24:57:a8:14:77:e9:56:6a:f5:d3:15:26:1b:1d:7f:ac:
d7:39:24:2e:57:52:bc:67:75:d2:78:21:b8:2d:5c:f6:9a:be:
56:82:fc:bd:29:2f:d2:bd:19:f2:40:8e:73:d3:f6:13:61:b3:
12:30:c9:f4:09:9e:58:4d:29:31:67:76:1f:d9:03:d4:21:7a:
44:8a:9d:37:d4:34:6e:88:bc:19:d0:b4:74:88:a3:03:66:c4:
db:84:fd:27:fd:00:9b:d8:e0:88:e0:c4:d2:04:00:1e:6a:2d:
e2:4c:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:22:52 2025 by rpki-client