Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: YNsychFpuhMRaQCyOv/6X7jy0nRtLxmHMy1J3QfDwoA=
Subject key identifier: 65:6B:F8:37:C9:C8:FD:84:13:4C:99:36:93:75:3F:DD:5C:9C:40:2F
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 01968623F8F84DBAE211DEA1CF3B3FF01A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0308
Signing time: Wed 30 Apr 2025 10:00:26 +0000
Manifest this update: Wed 30 Apr 2025 10:00:26 +0000
Manifest next update: Thu 01 May 2025 10:00:26 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: /Znoqnd1S0nY7x60lfJPrYBoZBE7TmDO26L35KQWP+M=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:f8:f8:4d:ba:e2:11:de:a1:cf:3b:3f:f0:1a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Apr 30 10:00:26 2025 GMT
Not After : May 1 10:00:26 2025 GMT
Subject: CN=656bf837c9c8fd84134c993693753fdd5c9c402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:04:7d:a7:61:3d:07:3c:6f:7a:aa:8d:a9:
f9:b5:6e:f9:06:95:ac:00:93:46:5b:c5:f5:64:20:
c6:cc:86:c0:69:4b:4c:10:43:fb:a7:db:79:8c:32:
aa:4d:4a:84:06:9f:d1:0d:c5:91:ac:ef:ab:6a:09:
ed:e5:62:3c:30:45:50:24:3b:54:62:aa:7f:df:2c:
74:8b:ee:5f:b5:84:11:b3:bf:a0:89:7b:7e:fc:f4:
c3:1d:e4:71:14:29:2a:ce:74:77:cb:68:96:4b:c9:
95:74:dd:26:f4:c9:40:bb:24:5e:b8:28:e2:51:61:
21:29:24:c5:88:37:b7:24:14:ae:8f:ac:f4:c6:ce:
1f:6d:fd:90:e9:b7:7a:db:7e:5f:ba:95:0e:62:05:
3b:1d:cb:19:6a:ec:0b:c3:af:5e:b5:8f:c5:d8:31:
d8:a6:5f:88:a1:6a:28:ad:cd:af:cc:9c:30:a9:a4:
a5:1d:2a:70:39:63:5e:4f:31:e8:3e:41:a6:a4:01:
ac:42:e9:31:0b:d2:40:25:d6:53:91:e5:08:e5:87:
90:c8:f1:29:80:ac:67:cf:80:f6:51:09:f4:d7:ee:
dc:f6:cb:15:6a:1f:bb:1d:54:db:dd:0b:c2:8b:51:
6f:e6:77:b6:a6:a4:7a:ad:c8:a6:8a:1b:86:e1:98:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:F8:37:C9:C8:FD:84:13:4C:99:36:93:75:3F:DD:5C:9C:40:2F
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c1:30:5a:80:a8:f7:d4:01:59:00:73:28:74:02:12:83:ca:
e3:47:03:b9:4b:ff:dc:06:af:d3:e0:d1:20:79:de:ed:b4:03:
62:c3:52:f6:93:64:57:18:5e:d1:b5:b3:05:7b:61:4e:19:47:
80:16:f2:ea:e8:1e:dc:6a:72:ef:7c:2a:57:d0:6a:41:1c:ca:
13:27:46:20:c4:aa:67:1e:7f:5d:b2:12:c9:af:cc:cd:49:f1:
b7:f2:1a:cf:55:ae:c7:05:e2:b5:1f:4e:e2:1b:1b:9f:cb:97:
de:a4:74:d1:46:d0:92:5a:29:9e:5b:db:31:e1:07:b8:eb:e8:
f9:62:da:e1:fe:c1:ca:cc:55:38:30:98:49:03:2c:d0:3b:0b:
51:ed:b5:73:b9:cf:bd:5d:9b:0f:a9:8f:9c:00:5b:d5:d5:c4:
4a:a1:ce:b5:ca:aa:82:7a:f6:9f:73:04:45:da:2a:42:56:03:
56:f8:35:b9:5e:1a:0f:43:27:c0:92:f2:3b:b0:8f:31:74:80:
58:65:4a:3b:0e:18:fa:9e:e2:83:1a:ba:12:d2:57:bf:2f:16:
76:31:6f:f6:92:d4:ca:6c:89:da:87:20:81:66:c8:d2:29:7d:
7f:e7:9b:df:7a:8a:70:1d:29:42:35:d5:26:6d:5b:ff:df:6a:
9f:d3:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:09 2025 by rpki-client