Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: aelSWmckc935fn33hZtiSH/9jkzmD+PpKM4m8TBrFNM=
Subject key identifier: 47:5D:CA:3B:CF:A9:7D:36:AE:37:B9:20:BC:7D:B8:E3:1D:95:3B:53
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 019685113F38B811EC01D15AE258A41796F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 10F4
Signing time: Wed 30 Apr 2025 05:00:22 +0000
Manifest this update: Wed 30 Apr 2025 05:00:22 +0000
Manifest next update: Thu 01 May 2025 05:00:22 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: RKy8ACz+NmxID2ajWWNzQFLMCXSJYy0S/uRVywT43QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:3f:38:b8:11:ec:01:d1:5a:e2:58:a4:17:96:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Apr 30 05:00:22 2025 GMT
Not After : May 1 05:00:22 2025 GMT
Subject: CN=475dca3bcfa97d36ae37b920bc7db8e31d953b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:36:7c:c5:3e:8e:89:de:79:95:fa:36:47:
7a:da:03:4f:0e:20:51:a1:41:90:22:2e:33:11:cc:
38:67:89:b2:1c:b9:bb:38:93:e1:e7:01:88:05:b4:
94:97:a2:a1:5e:82:3c:59:41:9c:10:f7:c0:cd:6a:
47:7f:48:0b:8f:31:29:6e:d3:39:10:d7:02:51:01:
12:b5:49:a0:54:a9:c1:e2:f9:fc:db:cd:55:2b:82:
3b:75:f3:57:77:f7:cd:7b:de:a3:7b:0b:a0:11:fb:
9c:22:21:af:0a:71:76:23:26:02:24:d4:9d:f7:7f:
7b:64:73:42:48:9b:01:a1:c1:92:0b:17:28:89:2a:
77:24:2f:27:4b:fe:19:03:87:dc:d1:98:00:cd:01:
d5:bb:12:fb:b6:95:c0:b5:a4:a1:f8:20:a4:ad:bf:
20:68:40:e5:31:fc:4a:2f:de:cf:8b:2f:67:6d:56:
fa:c4:21:1c:83:5d:a7:35:a5:39:c9:64:cb:8b:37:
2f:64:b1:44:ba:9f:e7:d6:2b:6d:bb:14:0f:03:33:
1a:c2:cc:ae:69:21:3f:ed:1c:fc:40:a2:f5:00:4d:
78:e6:f1:d8:2d:49:25:43:60:1a:9c:8f:86:d5:14:
c8:e4:40:7f:30:f8:b2:9d:2f:80:87:18:e0:1a:4d:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:CA:3B:CF:A9:7D:36:AE:37:B9:20:BC:7D:B8:E3:1D:95:3B:53
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:79:60:2c:d0:8d:01:40:f0:b1:df:5c:a0:8a:56:39:88:76:
91:8c:a6:68:c3:48:23:3a:0b:7f:20:61:5a:d9:81:c5:8b:e4:
3e:4d:75:9c:9b:93:28:08:1a:82:ff:46:64:63:3d:b5:45:13:
22:cc:96:b1:d9:26:a7:8a:54:65:a6:6d:a4:0b:f9:4e:ee:09:
3b:a4:57:76:0f:02:6a:97:a8:14:9b:43:f7:1c:fc:72:99:2f:
2f:58:77:2c:10:12:e4:d1:e0:86:2a:52:3d:12:89:2b:3a:85:
33:12:f4:96:10:63:34:72:76:0d:91:87:ab:67:4f:fd:1f:99:
24:bc:b2:4f:78:7a:78:cf:94:09:ec:2a:8a:10:1d:70:1c:0a:
30:61:df:7c:dc:33:f5:c5:ab:64:54:81:63:d3:5a:b8:9c:1b:
ed:42:06:83:56:f5:1c:be:ad:48:55:95:67:9f:eb:e8:41:ff:
88:77:df:a4:0d:87:c2:36:dd:2e:0c:f9:7e:b6:2b:ec:60:eb:
99:a3:b8:8c:64:e9:2f:a3:1f:9b:b8:85:2e:c7:41:b3:5a:7a:
17:6c:39:75:7e:82:dc:f6:71:ed:5d:2f:0d:be:1a:21:90:26:
50:0e:d3:89:90:0b:f9:0c:3b:4f:f7:33:53:af:76:c6:15:46:
1a:68:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:46:57 2025 by rpki-client