Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: u0pw40H57cebLVVVro1zUHye5jdTnobmmMrmUiUTWWA=
Subject key identifier: 6E:BF:1B:7D:5C:56:9D:CC:2D:58:72:70:B6:DC:3E:91:D3:A9:80:69
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 01969596FFD2988CAA3C8E9D913C89A59621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 0483
Signing time: Sat 03 May 2025 10:00:23 +0000
Manifest this update: Sat 03 May 2025 10:00:23 +0000
Manifest next update: Sun 04 May 2025 10:00:23 +0000
Files and hashes: 1: 2DvVU95orox5IeGSdibufOYyF_M.roa (hash: zYc2kejhvwZAMUP9rtgZ0VImRS6xXrZBfW+6RhgOP2c=)
2: _vBlwHfpCbgKUBFoqSs3ggu60nI.roa (hash: AsAILNa2VMgTcOZ13cTcAxG+d9Mwo5a4AZ6ZUVGbk/c=)
3: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: LQCQEz511L9Ck67/+Te6LK2GzsPfhMVwfBeOebwQ0ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:96:ff:d2:98:8c:aa:3c:8e:9d:91:3c:89:a5:96:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: May 3 10:00:23 2025 GMT
Not After : May 4 10:00:23 2025 GMT
Subject: CN=6ebf1b7d5c569dcc2d587270b6dc3e91d3a98069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:3f:0a:70:a4:a3:b0:ee:e5:0f:2e:b6:a2:
88:bf:1a:70:e3:51:25:c8:7f:7b:d8:29:15:eb:1b:
bd:5b:e5:33:85:0a:47:ef:d7:7b:6b:eb:f6:b7:e5:
e1:4d:8d:e0:3e:24:2e:4a:0c:83:72:24:88:f5:44:
36:74:4d:47:ed:0b:64:09:01:f3:11:e0:82:d6:9c:
37:80:92:7f:21:de:72:b2:06:56:8d:20:00:6e:9c:
3f:86:31:68:cd:ef:d7:61:b1:cb:dc:5e:85:d5:a0:
04:72:62:64:5a:d5:07:43:88:14:2b:f5:83:2f:b8:
37:a6:ec:5c:54:66:ac:8a:02:02:20:31:61:23:0f:
18:b1:7c:04:78:26:cd:b8:1c:e8:5e:56:eb:22:56:
9e:27:0c:82:4a:d7:ac:16:a8:8b:b2:1a:90:86:c4:
0d:bf:44:d1:06:04:bf:87:70:3b:2e:ba:38:12:5b:
66:2e:bc:6a:13:3f:c7:31:9a:54:a0:21:e4:0e:84:
bf:aa:2a:d8:9d:c5:72:a4:ff:74:f2:81:62:42:16:
bc:aa:aa:b1:bf:78:19:36:bb:93:30:36:35:fa:73:
ff:8a:31:a2:cd:6a:35:ed:78:cb:58:75:bc:0f:01:
4c:ae:9a:9e:9a:96:e7:f4:10:87:d4:ad:fd:20:6a:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BF:1B:7D:5C:56:9D:CC:2D:58:72:70:B6:DC:3E:91:D3:A9:80:69
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:95:00:a2:b5:45:b8:02:08:42:c7:16:d7:2a:a6:27:9d:
01:6b:cd:9a:25:5c:00:ac:61:35:1b:25:93:5b:1f:0d:12:96:
81:36:5e:9c:95:53:bd:6d:e1:ad:7a:d3:36:52:1d:f9:16:92:
82:11:4c:3d:ea:1f:f9:e3:f5:88:71:b6:79:e3:a6:13:fd:a6:
0f:45:ad:bc:72:99:ae:cb:dc:1d:5e:84:57:80:db:1c:f0:33:
79:43:70:bb:c1:c7:5b:b0:ef:26:eb:34:62:7b:cf:55:8d:40:
7e:54:fa:90:a3:5e:67:0c:4e:ee:ad:83:2c:2d:f3:b1:40:80:
9d:45:05:fb:7f:dd:e9:fa:fc:57:db:d0:30:ff:99:e0:db:1e:
96:01:91:0e:f5:67:07:fa:fc:69:9b:56:5a:d2:70:7b:c9:ac:
67:86:35:97:45:80:9f:48:01:99:b1:d9:cb:d4:77:31:e7:65:
ee:ea:7f:cb:f9:4d:6b:2f:c2:fd:ac:17:ba:46:27:2c:a2:c6:
35:11:6b:62:66:17:09:a8:de:d3:d6:f1:da:5d:db:7e:3f:55:
32:07:ad:07:dd:81:88:95:12:38:42:5f:11:df:d7:d3:bd:e3:
01:5f:c4:2b:a0:df:6c:44:2d:5a:2e:9b:51:05:1f:d3:04:0c:
25:70:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:04:40 2025 by rpki-client