Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: ylQN+K5A+8rFtVG43cYExd/5No6Yog6qwQUmfLcMRBk=
Subject key identifier: E0:28:D2:43:00:D3:76:C4:3E:0F:04:90:0F:58:ED:DE:69:72:46:8B
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 01967E342353B549A21B3EC14167C53164AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 085B
Signing time: Mon 28 Apr 2025 21:01:08 +0000
Manifest this update: Mon 28 Apr 2025 21:01:08 +0000
Manifest next update: Tue 29 Apr 2025 21:01:08 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: XNgn8pcSqjMvcRBFUh6KZUTHOXKaNx/mWNMPZwtNrWg=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:23:53:b5:49:a2:1b:3e:c1:41:67:c5:31:64:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Apr 28 21:01:08 2025 GMT
Not After : Apr 29 21:01:08 2025 GMT
Subject: CN=e028d24300d376c43e0f04900f58edde6972468b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:6e:a1:a1:46:1d:c5:f4:81:58:ca:64:64:
11:e7:09:48:80:23:a4:a7:5c:4f:28:31:18:7e:38:
c2:8f:e7:ad:b2:0d:f7:47:90:89:c7:1d:1e:6f:55:
53:fd:4e:c2:34:3f:9e:fb:e4:cd:b2:4c:0b:bc:76:
c8:cd:c9:f7:f8:fb:71:06:ff:3e:27:1e:f1:66:c1:
da:e5:5f:5c:e3:5c:95:ce:b7:79:4b:65:bc:ff:50:
4a:e0:13:d3:09:7e:d1:3b:c3:27:10:52:94:99:36:
47:81:b4:89:13:2e:b3:70:35:cd:e0:d8:8e:1e:25:
b6:77:3e:89:46:1b:82:3a:b0:2f:8f:cf:97:9f:31:
61:e8:15:c1:8f:fb:b6:ac:14:69:44:88:3d:2d:f6:
7e:69:18:0f:c5:ef:96:b9:25:d3:d3:8e:4f:92:c3:
ab:82:7a:e5:dc:63:8f:84:1d:20:a6:65:74:7f:1d:
80:5b:81:2a:e7:6b:84:95:5e:d4:47:74:2e:09:e2:
a4:fa:10:f9:54:99:77:0e:a3:bb:e1:33:e5:ba:40:
2c:39:f7:0d:60:05:af:65:19:0f:3c:2d:d7:03:34:
6f:09:29:f8:4e:16:11:c2:4d:22:fc:16:e5:4c:a7:
af:f5:2c:2d:7c:71:92:32:02:c4:59:71:54:2f:8a:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:28:D2:43:00:D3:76:C4:3E:0F:04:90:0F:58:ED:DE:69:72:46:8B
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cb:99:f4:4d:da:bf:5e:a8:44:94:6f:f2:96:de:af:14:22:
00:e0:a8:ec:f6:e6:d1:84:45:4c:49:1e:d3:a6:0a:52:df:90:
89:36:48:cf:24:39:36:83:de:c0:ab:5c:75:61:b1:c8:ce:da:
b9:4a:2d:32:a8:08:c7:41:ff:f3:2c:28:ce:d8:3b:26:ef:1f:
bd:18:9b:3c:87:02:af:d1:e4:c9:50:f2:03:81:fb:43:08:69:
5b:0e:cb:e4:2a:a9:46:96:a4:ec:91:f8:3f:e5:a5:d0:31:72:
10:55:4d:c8:dc:25:0f:e2:64:e5:b6:76:94:54:29:78:50:45:
c6:63:44:00:5a:08:8b:59:0e:94:70:5a:39:bf:82:35:a6:8f:
e4:b9:43:b4:d1:c7:ed:d5:a5:3d:4f:ac:5d:fb:69:e9:fa:51:
5e:47:75:bd:4d:52:0b:aa:ce:95:db:f5:bf:35:e6:a4:67:3b:
e9:e5:31:d1:e3:9a:67:4d:3f:73:d7:cf:ea:3e:28:49:65:1d:
07:f2:2d:75:00:a6:e9:af:a8:f0:5e:3e:c8:f9:c8:cc:33:07:
6a:39:8b:64:09:8f:14:72:46:7e:48:73:cc:32:dd:91:03:4e:
85:40:cc:30:a1:30:26:1c:17:7d:b6:05:e1:6c:08:57:81:67:
22:cc:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:37 2025 by rpki-client