Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
File: fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json)
Hash identifier: ilSu7B6prPW5lq0Vu4d7SAmzwIza3lU9MdyqaIepcNQ=
Subject key identifier: 65:21:0C:EC:45:AF:30:AA:CF:D1:82:AB:22:DD:2F:78:A8:86:2A:B3
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 01969A869BCAF346A153FE52B3AD26505620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
Manifest number: 1521
Signing time: Sun 04 May 2025 09:00:35 +0000
Manifest this update: Sun 04 May 2025 09:00:35 +0000
Manifest next update: Mon 05 May 2025 09:00:35 +0000
Files and hashes: 1: NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa (hash: O7U2IilgFNx0uKZ0Sr7mdLoGiE/mqht2K9UbhPNacVM=)
2: P4rhr2yvQsT2Wmsa0d3b9mzRihQ.roa (hash: yJrwkDYUS+18A8gxekBRmTpvchECkoVfjLp8pGWlkB0=)
3: P_efas48rvkeOWLowealn6FM2EU.roa (hash: bHQu5iQgYpW7McRBDPs2F3TVgL2C6692qQjIPdJ6jr0=)
4: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: mnEr9wbWgD0C5E4VDVcHnzGnS3/lUke9ts4cm/O8sZE=)
5: lMnxmNh0WyR-ZyXRmR4VxessOW0.roa (hash: d+d+I0SIA2DkllPKcjDwQF5GfnIiXguhQ7tmZZ0v1io=)
6: xIJo2EuzM_PScXOHUg-DUkxIyEk.roa (hash: DPBdyOvextHK9GmgkjEDN72tHol0hR/S27niPvwBhyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:86:9b:ca:f3:46:a1:53:fe:52:b3:ad:26:50:56:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: May 4 09:00:35 2025 GMT
Not After : May 5 09:00:35 2025 GMT
Subject: CN=65210cec45af30aacfd182ab22dd2f78a8862ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:ac:7e:d8:0c:43:77:94:8b:50:f0:c6:c5:
9a:67:7c:9d:99:47:bb:ab:63:0e:fc:15:75:10:a8:
5d:e7:89:c3:e5:ad:81:fa:ee:b0:b8:b5:c8:2e:dd:
50:27:fb:5c:cc:75:6f:ef:aa:c6:b6:8c:74:6b:9e:
90:5a:26:86:f3:9e:9e:0a:5b:6e:34:af:ac:63:b4:
ba:af:8c:4c:37:99:a1:22:a7:1b:7b:9b:cd:ec:dc:
83:7c:dc:08:33:a7:ac:c8:d0:ca:84:3b:5b:fc:21:
52:b7:7a:a4:56:94:33:2a:92:d6:f3:89:ca:de:f3:
47:6c:ba:5d:24:d3:ee:b3:cd:1f:8d:7a:c3:56:b2:
01:da:67:79:f5:24:91:ca:01:08:e5:9c:3e:08:bf:
e9:4b:b5:42:38:91:b7:5d:2f:aa:d3:d6:45:69:fc:
73:55:9b:e2:94:e7:e0:f5:77:ef:30:e8:8b:80:be:
d9:e2:e1:23:01:f5:7a:9c:e4:5c:7b:5a:5b:a9:83:
21:8c:b2:be:e5:40:ec:8c:ca:04:22:1d:dd:f6:bf:
89:f9:b2:33:e0:17:3d:69:ba:ad:8e:97:14:4e:67:
a2:f5:c2:07:2f:0e:4d:23:a4:aa:01:1f:f2:49:22:
59:d5:9d:dd:0e:48:6c:68:f1:92:ec:0e:08:0e:3b:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:0C:EC:45:AF:30:AA:CF:D1:82:AB:22:DD:2F:78:A8:86:2A:B3
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6c:8e:f8:3d:cd:6e:dc:5e:c0:d0:73:c2:da:d4:57:e9:bf:
b9:3a:7b:14:4e:5c:b1:e2:bb:c2:0c:e7:43:dd:0f:91:ac:49:
39:4e:01:82:68:82:f4:2d:a5:32:24:d3:7d:a9:af:54:34:01:
32:5c:63:a7:ea:8f:1e:e4:6c:8c:c3:a9:ad:57:37:09:44:33:
e8:70:16:0e:24:1d:3e:c1:87:10:40:ed:42:2a:77:67:00:8b:
19:09:bf:ee:2a:07:44:67:00:d6:a8:4e:6f:e4:d2:7b:af:06:
6e:60:e0:fc:c4:09:91:06:1d:b9:e2:8c:ca:b0:f2:5a:0c:40:
bb:d2:2a:c6:d7:72:f7:f9:78:25:80:2f:c2:11:00:88:a0:ce:
30:1f:dd:74:2c:7d:de:c5:5d:3d:c6:28:f2:7d:30:b6:c8:8f:
a5:66:33:73:4e:d7:52:f7:af:e2:39:ff:f1:be:fd:f8:d9:5b:
56:54:8b:2f:da:9a:15:aa:7e:e9:34:5f:57:c4:2b:06:78:47:
6c:b7:c7:44:9a:72:0b:fc:e2:b0:af:b8:5d:3f:98:f3:93:c1:
a6:71:d3:16:42:4b:e0:98:fa:8a:25:24:6c:57:74:c3:f3:02:
cc:d7:3a:d2:5b:03:45:43:71:29:dc:f1:ca:94:56:cd:31:13:
69:2e:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:49:06 2025 by rpki-client