Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: TMT5GTRA6xFW5kvFw7XIOmO2G9GY4KFJ19p7PXwVXP8=
Subject key identifier: AA:3B:76:13:C3:12:98:F3:53:96:F8:A9:47:29:52:58:93:AD:D2:C0
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019678D67F8240A6D4CEF27EE9FB0B3741CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 20:00:45 +0000
Manifest this update: Sun 27 Apr 2025 20:00:45 +0000
Manifest next update: Mon 28 Apr 2025 20:00:45 +0000
Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: p7XtZ8I9CnOHTbVS7EtMgaxsa/X8ZTN7kyitopqWKzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:7f:82:40:a6:d4:ce:f2:7e:e9:fb:0b:37:41:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Apr 27 20:00:45 2025 GMT
Not After : Apr 28 20:00:45 2025 GMT
Subject: CN=aa3b7613c31298f35396f8a94729525893add2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:ad:58:ed:94:19:83:20:81:54:1f:44:18:
25:2a:a6:f7:21:47:04:7e:89:69:b1:65:8e:3b:8d:
f5:ce:4c:17:42:d2:92:f7:8a:f2:97:2e:ba:0c:97:
dd:2d:2f:44:f9:84:38:b7:d6:1d:62:ee:33:b0:c0:
8e:a2:46:31:80:f6:2e:99:23:41:65:c2:3e:5e:c9:
ee:e4:67:c8:ba:e9:f6:69:5c:24:12:45:c1:91:41:
29:e4:7b:68:17:36:16:cd:d9:51:a4:b1:cc:b6:09:
47:d8:02:f3:83:4f:32:76:64:ec:96:d5:1e:60:c4:
5a:c2:38:11:f9:ac:32:76:d0:5f:89:04:bf:e8:13:
08:0e:0e:b8:7f:44:82:c4:cf:9f:b2:ec:e3:41:c8:
ed:be:de:db:53:29:7b:df:ae:c3:d4:ff:29:18:5b:
3d:3d:ac:b6:51:d0:45:ff:ee:c6:f5:24:2f:1b:c8:
5f:73:4a:4d:98:77:d9:27:0c:91:4c:c1:32:5e:62:
b5:62:be:d8:ea:fd:88:d1:7c:19:6c:e1:f7:b3:98:
98:84:c9:d6:ab:fc:25:b7:13:df:0b:96:ab:c2:2c:
fc:b1:0f:4b:63:7c:47:af:b4:43:a8:07:7b:77:d6:
5c:80:a5:83:2f:17:ec:b3:45:f0:bd:32:c5:5d:84:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:76:13:C3:12:98:F3:53:96:F8:A9:47:29:52:58:93:AD:D2:C0
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:20:e7:97:db:bb:7f:a3:2c:ff:d7:65:0d:bb:6b:5f:e6:29:
fa:b7:03:be:1d:9f:69:4c:ed:6c:79:7b:90:f3:88:d8:ba:04:
22:03:31:0b:5a:ec:a5:c9:dc:cf:15:84:07:8d:f5:c5:3e:38:
ce:fb:72:3d:6a:3c:fa:8e:ee:05:ac:5f:c2:72:15:2a:2e:92:
76:63:42:da:ab:cf:85:dd:23:3c:b7:cc:41:85:9c:84:33:b2:
0a:f6:4a:51:f8:65:9c:7b:d2:30:e3:53:44:b2:12:d3:be:0f:
40:ba:db:d1:ba:fd:21:19:24:d4:02:1d:b8:19:36:52:21:30:
d9:dd:63:5b:6c:c6:00:4e:5a:39:dc:ed:f4:03:da:73:8f:d6:
40:f5:9c:9b:7f:4a:cd:a3:ad:53:95:d8:19:af:65:26:95:ce:
85:38:4f:78:fe:b5:ac:f5:1d:e5:a8:7b:a6:18:f2:de:9c:10:
ff:ac:3c:be:09:97:90:21:81:92:b8:76:a1:6b:dc:1d:02:25:
99:04:5e:c1:a9:16:ea:60:37:93:40:9c:47:ee:e4:fc:69:ef:
92:e3:f6:5f:de:74:b1:87:b2:5f:99:40:48:8d:a4:0a:c8:5a:
89:ee:2a:b3:d6:b2:c7:84:3b:dc:97:a5:5c:2a:21:c7:90:87:
78:3f:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:16:05 2025 by rpki-client