Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
File: rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft (raw, json)
Hash identifier: 21Tyspx1NSOlC2HHxEriZau/qMCf5nvDIJ8glBeXYvM=
Subject key identifier: FA:01:26:94:D6:DE:91:1B:AD:BD:7B:29:CC:A1:22:0A:F9:2E:EE:3D
Authority key identifier: AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
Certificate issuer: /CN=acfbbca852b957385909f6bd288cdf363f218b06
Certificate serial: 01969FE41023A038E01E65B8F8A6A8F2FD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
Manifest number: 11FA
Signing time: Mon 05 May 2025 10:00:45 +0000
Manifest this update: Mon 05 May 2025 10:00:45 +0000
Manifest next update: Tue 06 May 2025 10:00:45 +0000
Files and hashes: 1: IsJ0c25oEMcq2hs62WVn3JnR5kc.roa (hash: FVZnWTpWqx/hdTsogFHC4HE54Isaap3vLQprMcgXpZE=)
2: rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl (hash: Ah5lnDsKlxpHt2/DKkkTuMNRSQzKYpBlO3Aui6SnA64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:10:23:a0:38:e0:1e:65:b8:f8:a6:a8:f2:fd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfbbca852b957385909f6bd288cdf363f218b06
Validity
Not Before: May 5 10:00:45 2025 GMT
Not After : May 6 10:00:45 2025 GMT
Subject: CN=fa012694d6de911badbd7b29cca1220af92eee3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:ac:88:37:f7:61:d9:f8:c4:4e:38:2f:68:
67:61:ea:9e:25:c0:09:65:45:fc:11:7e:e2:ee:b7:
7e:24:43:61:76:42:53:64:c3:42:b7:c8:cf:d3:d0:
a6:7b:fc:3d:56:f8:40:9c:3d:f6:57:5e:ed:07:ff:
54:fa:d6:57:ad:91:d9:03:9b:32:aa:22:65:32:f8:
33:24:e4:8b:28:9f:53:93:2a:00:d7:f7:3b:73:f5:
f4:c0:84:59:ca:8d:34:8b:b8:ba:f7:59:4c:2d:23:
32:fb:e2:47:c7:31:36:0b:7d:ff:58:eb:53:d1:7e:
9c:25:01:34:23:f4:e1:af:90:51:bd:9e:d4:ae:28:
ac:f3:08:98:36:11:08:18:4d:ad:e3:cd:65:cc:d1:
50:12:4c:d5:ad:d2:57:c6:8d:0c:7d:26:63:28:d9:
f4:0f:39:68:77:cd:61:30:76:43:4a:a9:a3:b6:15:
68:35:f0:61:55:74:94:9c:51:19:6f:7d:8e:be:52:
e8:a5:8b:0d:ae:9e:e1:6a:43:d5:b8:52:e8:70:1f:
61:91:4c:d1:fd:1a:c6:f7:2a:01:ba:29:15:6c:c2:
6c:e9:79:53:1d:0e:d6:09:f0:06:5a:a2:d9:c7:28:
5d:f6:d3:5a:72:8d:bc:07:af:70:b2:3c:21:ed:85:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:26:94:D6:DE:91:1B:AD:BD:7B:29:CC:A1:22:0A:F9:2E:EE:3D
X509v3 Authority Key Identifier:
keyid:AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:22:af:69:4b:cf:e6:4f:e8:ec:82:85:7f:ec:ca:80:e1:2a:
41:c4:18:49:c4:11:b5:8c:9d:8b:f5:14:f1:27:7a:df:53:42:
87:f0:88:d4:03:22:10:67:09:bc:8d:c6:e4:ee:9b:c9:77:4c:
07:38:d3:eb:0e:25:b9:b0:05:09:21:ee:e2:ad:10:a2:ce:40:
6b:a6:c0:cd:09:44:ac:e4:b8:33:b5:a0:66:f8:71:1f:39:73:
f9:70:6b:ac:32:ae:69:0f:5c:93:db:5f:9c:c8:9a:bb:ab:4b:
ff:f0:5d:e2:ee:4c:7c:ce:fe:e2:9e:fd:13:97:b7:6e:74:d6:
c2:47:4e:aa:82:05:e3:9c:ea:b2:ac:cf:e5:13:f1:3c:f2:90:
d1:02:7c:8a:4b:e0:a6:e8:08:e4:dd:ea:a0:36:fb:f1:58:3c:
ff:19:f3:11:5b:00:0e:00:7c:0f:b1:59:d3:46:67:f1:4e:ce:
05:9f:cf:01:8c:24:0c:4a:53:19:d8:84:d1:13:f8:8e:2b:81:
8e:66:02:48:63:8d:1f:70:d2:ea:cd:94:ce:3b:08:09:63:3b:
4a:ff:d6:b8:83:8e:7a:a0:08:b1:c9:64:12:35:a9:c8:72:18:
b4:7e:e0:78:4c:a1:d6:fb:1f:e3:27:bb:84:36:f6:59:a4:44:
71:b9:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:22:54 2025 by rpki-client