Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
File: toF3Ytn8jxGwHPUjS25DHPvsG80.mft (raw, json)
Hash identifier: 5fxLCPhfH69l1Qde6/z/UWD6jJ3H/XQuJl9HMII80/E=
Subject key identifier: FD:0C:77:B1:D4:B6:19:66:D4:AB:42:F9:78:FA:9A:AB:3B:3B:F0:9B
Authority key identifier: B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
Certificate issuer: /CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Certificate serial: 0196AA675962A964DD6BBE6E42CFCF0E9C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
Manifest number: 088A
Signing time: Wed 07 May 2025 11:00:21 +0000
Manifest this update: Wed 07 May 2025 11:00:21 +0000
Manifest next update: Thu 08 May 2025 11:00:21 +0000
Files and hashes: 1: iFeMzfeEdL5eLiPhJVZH9fOR9os.roa (hash: Hluf44L3umjh9a1sEhuox24mM0+jKftFeuevrlqeW6M=)
2: toF3Ytn8jxGwHPUjS25DHPvsG80.crl (hash: btcd6luce63NYZJAFe/v61o0itXW0IT4rFicCJFfLoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:59:62:a9:64:dd:6b:be:6e:42:cf:cf:0e:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Validity
Not Before: May 7 11:00:21 2025 GMT
Not After : May 8 11:00:21 2025 GMT
Subject: CN=fd0c77b1d4b61966d4ab42f978fa9aab3b3bf09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:4b:08:ce:8e:b2:f8:38:1d:fa:e2:b4:df:
42:f2:3b:68:6d:65:d8:d8:3f:a7:05:d4:ef:a3:dc:
29:52:91:db:61:8e:05:2b:e6:ef:de:3f:51:da:70:
af:48:78:d8:77:62:94:fa:92:c4:3a:8f:98:e6:34:
37:80:be:c4:98:5a:20:d4:3b:09:5a:23:75:46:87:
96:a2:47:2f:72:77:92:1d:ce:47:8b:4b:0e:7e:72:
8e:55:59:f6:ab:47:69:7c:bc:42:86:64:94:91:be:
a7:43:6f:e2:75:e3:41:be:54:52:7d:03:6b:49:56:
ae:02:d6:23:76:c9:44:60:b2:e5:ce:11:97:e5:40:
a0:34:59:54:5d:9e:0a:8d:de:06:93:3b:af:72:48:
49:e1:fb:b5:c7:a5:f4:85:0d:b0:d0:86:a8:d2:1c:
5d:0e:64:de:bc:f4:26:1a:25:81:53:b8:04:39:c2:
2b:06:d9:39:ae:41:cb:86:09:69:8a:45:21:c5:b3:
fd:a2:15:28:72:de:64:46:03:7d:f8:9d:14:9f:8b:
a0:c6:20:d6:20:60:5c:4e:61:0d:13:ea:b8:93:f5:
6c:77:8e:1a:4a:ff:66:30:1f:b2:10:b1:97:0f:91:
1d:80:f0:57:09:f8:e3:f4:ca:15:31:2d:2e:27:87:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0C:77:B1:D4:B6:19:66:D4:AB:42:F9:78:FA:9A:AB:3B:3B:F0:9B
X509v3 Authority Key Identifier:
keyid:B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c1:68:54:fc:37:ce:a5:aa:0f:f0:a4:1a:d6:ad:a8:29:37:
3a:7b:bd:0e:15:7c:a5:fd:58:6f:64:7b:23:29:f2:64:34:01:
0c:fe:4e:a2:57:6d:b9:76:c4:64:b5:4a:ae:d3:7a:f8:25:eb:
87:45:be:b7:6c:b9:f1:fb:fb:fa:0a:d0:c5:4a:88:f1:22:21:
a7:07:e3:51:19:6d:54:a5:a2:1d:2b:43:7f:e2:a7:11:6d:96:
5b:b2:94:0f:67:f9:e7:7e:0b:f3:4a:20:54:56:46:41:ce:2b:
94:38:86:5c:a7:57:c6:b9:00:63:c0:43:d3:92:9b:86:40:76:
fe:ae:65:f5:da:e0:56:5a:ba:7c:ca:65:97:bc:3e:75:3c:a6:
7a:85:71:87:bc:aa:c3:72:32:03:50:f0:92:77:68:75:0b:5d:
67:0e:6d:4a:a3:95:f3:25:30:5c:66:db:fc:d5:76:e1:91:35:
5b:ff:44:44:81:62:33:c0:89:0f:0c:cb:86:b3:01:d8:32:7a:
14:bb:38:19:f1:79:de:26:e2:e8:f1:50:ca:bd:94:c9:fe:d7:
71:56:ca:77:0a:a8:b0:55:b0:a9:4b:18:ec:49:f5:cf:64:c1:
11:d4:54:97:ce:2e:1a:82:86:04:d2:8f:6a:93:8b:ec:55:c9:
6f:eb:02:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:17:06 2025 by rpki-client