Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: PMMx92a4NFbLIr+aFn/n5veoyi6myiif2hTwfozdjVw=
Subject key identifier: FD:37:79:EE:0A:D4:DD:0F:A0:A1:BC:01:CF:B6:BB:FE:88:B5:E9:4C
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019689CA38ACD696348395193B5C5CD7856E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 14AB
Signing time: Thu 01 May 2025 03:00:53 +0000
Manifest this update: Thu 01 May 2025 03:00:53 +0000
Manifest next update: Fri 02 May 2025 03:00:53 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: IapFznpUVXUjWaVWLRSpNtu9YCP2RDmWIsOArNkbGXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:38:ac:d6:96:34:83:95:19:3b:5c:5c:d7:85:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: May 1 03:00:53 2025 GMT
Not After : May 2 03:00:53 2025 GMT
Subject: CN=fd3779ee0ad4dd0fa0a1bc01cfb6bbfe88b5e94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:c9:a0:51:45:3e:cf:37:d5:bb:d2:4c:24:
5d:bd:70:b9:ca:ad:29:68:ee:a3:91:c5:d5:0c:da:
44:f6:30:c1:3b:d7:ba:c8:e5:4a:eb:53:59:c7:ca:
e7:50:f5:74:ed:e4:dd:16:8c:f8:68:50:e9:0b:58:
46:30:fc:1a:ed:9c:ab:82:37:35:37:e9:b2:f0:35:
3a:01:04:66:15:6f:86:d3:d6:7b:ed:dc:32:37:c1:
1f:cb:fd:38:72:8c:f8:05:61:27:eb:b8:24:b5:fe:
a5:90:2c:b3:d3:0b:15:7a:2e:94:33:0a:ae:23:4a:
c1:6b:09:17:04:d3:6d:ab:49:58:9c:ba:fb:6f:b0:
50:ed:84:4a:dc:c8:1b:e6:72:d1:13:a4:40:9f:3a:
ad:cd:d2:72:65:e8:10:b6:42:7e:b8:23:5e:f9:a5:
b9:b3:9c:36:42:64:c0:8a:d5:56:22:3e:91:d8:3b:
15:59:9e:73:64:2d:4d:7f:65:15:ef:81:8b:52:e3:
90:75:8a:b2:9e:e2:67:05:16:08:55:c8:5f:fe:18:
61:65:74:42:e3:1d:a9:ed:0b:24:07:b4:d8:4a:e4:
99:24:ff:f3:80:5c:d9:3e:74:83:c5:05:0e:fc:bf:
52:dc:bb:bc:fb:98:f2:d2:36:2d:2a:ef:4e:e5:36:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:79:EE:0A:D4:DD:0F:A0:A1:BC:01:CF:B6:BB:FE:88:B5:E9:4C
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:de:1f:e6:a5:99:f7:94:c7:6c:08:de:66:51:bd:58:77:67:
68:b0:51:45:97:46:86:a6:d6:64:89:8b:82:ee:ad:fe:eb:e4:
0d:6b:79:36:51:fc:a3:31:34:f9:59:42:5c:c4:c8:6a:5d:6b:
ec:50:9c:cb:0a:92:42:67:20:7e:30:c2:d4:a4:1e:0e:64:11:
49:4e:5f:73:41:bf:e1:46:58:c7:c1:cf:0b:96:2a:b5:ce:1b:
d4:1b:30:91:23:fe:8c:77:c0:8d:fe:b9:ef:2e:9d:05:df:c4:
a9:ff:fe:23:8c:ae:4b:e3:3a:1f:40:45:82:b1:24:c6:91:df:
92:fb:c1:e3:dd:eb:60:6b:0e:23:5b:c8:d7:dc:42:42:a6:62:
52:e4:2c:c3:81:1a:79:96:80:69:6d:b9:d8:c2:30:a4:e0:77:
2c:be:99:a3:31:b8:42:11:f7:f0:c3:e2:20:03:74:f5:48:89:
a7:78:3a:96:74:57:14:17:17:bc:81:69:b7:d5:38:d8:bf:a9:
14:38:26:da:d8:02:ba:0f:7a:85:81:28:99:2f:ce:68:0e:2e:
35:95:bc:5c:a4:9f:85:6e:01:71:b5:49:91:90:1c:f4:19:cf:
6d:9d:ad:88:62:0d:ba:2a:f1:9e:94:a2:da:2f:da:fb:0f:b7:
90:57:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:12:13 2025 by rpki-client