Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: OoXy1y+RsGawBuJT+UsNwJxXWw/kIHZzM9rEV5kc8P4=
Subject key identifier: 33:3D:D6:DC:C8:4F:9E:D6:D1:2C:35:FF:68:24:58:81:A5:2D:2F:67
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 019689C9D7378BD6FC02CD913080F370812B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 09E0
Signing time: Thu 01 May 2025 03:00:28 +0000
Manifest this update: Thu 01 May 2025 03:00:28 +0000
Manifest next update: Fri 02 May 2025 03:00:28 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: qbabv8+/fvCzcPoORfpHoQjiKfuWU2mcnR7m5csnN4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:c9:d7:37:8b:d6:fc:02:cd:91:30:80:f3:70:81:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: May 1 03:00:28 2025 GMT
Not After : May 2 03:00:28 2025 GMT
Subject: CN=333dd6dcc84f9ed6d12c35ff68245881a52d2f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:24:70:86:da:24:c2:06:e3:11:e0:80:b8:
fd:7d:3d:af:a8:53:50:18:67:ea:58:8c:4c:03:01:
93:2d:4c:71:db:cd:ab:0b:dd:28:e5:5d:46:bf:19:
ee:1c:6a:5e:1a:ef:f2:83:32:94:61:4c:73:3e:42:
32:66:57:5f:a4:1d:99:77:fb:6e:0c:de:25:c0:1c:
67:35:6e:84:f8:41:6b:c1:a8:84:4b:08:74:97:9d:
a5:2c:ff:93:d7:03:c0:79:13:cd:3a:bc:c0:42:45:
8f:80:74:60:c5:0f:fe:aa:cf:04:0b:19:1d:f6:17:
13:88:06:d1:1b:cb:76:51:07:03:68:d7:f2:31:88:
a2:b7:b1:82:fc:53:b4:da:89:55:f4:2d:71:ff:78:
88:18:f4:ed:45:c0:7d:18:a2:a5:b6:b4:ff:3c:89:
06:8a:9d:bb:bc:7d:81:bd:3c:bd:1d:9e:02:39:fa:
97:b3:75:4b:8d:d9:f1:10:1e:0b:90:b8:49:d2:c8:
64:50:f5:97:bf:7e:92:8c:c6:21:7a:23:2e:69:76:
d0:38:54:f0:62:0f:0f:48:86:71:34:47:ef:74:34:
8e:ba:0a:42:30:cf:13:cd:f6:9d:4d:e7:de:3c:e7:
8c:cd:59:09:0c:cc:1a:11:29:b7:ab:03:86:be:01:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:D6:DC:C8:4F:9E:D6:D1:2C:35:FF:68:24:58:81:A5:2D:2F:67
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a0:c3:5b:2c:9d:5a:fc:92:ba:43:2e:7c:1d:12:80:27:ba:
a5:94:b2:f6:90:b7:76:92:17:99:8a:a5:b2:3f:e3:27:3f:57:
0d:42:c3:e3:ee:7b:43:09:5b:ca:f1:d3:26:f9:01:a5:91:bf:
9a:17:72:5b:b2:54:d9:63:03:11:1b:eb:af:03:54:5c:0a:86:
5e:04:da:12:5b:5f:b0:db:cb:2d:d0:cb:79:2c:62:18:46:99:
2c:65:6e:74:ff:77:7f:d3:0b:1d:2a:a4:75:88:72:67:3d:db:
6d:56:62:3e:78:99:67:b3:67:a3:04:e1:aa:27:75:fd:18:14:
22:95:d0:8b:91:d4:d2:07:47:c1:0c:c8:81:31:9c:8a:7d:2d:
ca:74:6f:76:ea:91:19:4c:60:3a:41:91:2b:a8:90:33:43:ff:
e6:6e:f2:c2:e6:9e:84:62:e0:3e:e8:8e:05:a2:e7:e8:4e:cf:
4e:9e:48:37:a3:d5:22:7e:54:1f:f7:b2:17:cc:20:12:14:e2:
78:58:b5:8e:bd:ff:61:9d:56:e8:a5:19:d3:26:4a:31:58:f8:
d9:31:71:5b:ae:b4:05:4a:6f:ed:3e:ee:d0:86:15:60:9b:c3:
69:0f:ac:56:56:c4:6c:d2:f8:24:f6:d4:dd:d8:e6:5d:5c:9b:
7b:61:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:01 2025 by rpki-client