Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: pnh9Ym91eplAoEyay4hqPyXYjEp/Sboj8E+Sa067t4s=
Subject key identifier: 7B:5E:5A:3F:F8:B7:C9:1B:6E:0A:5C:8D:A2:73:E6:3E:F1:16:1F:C8
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 01967B69AB42567240F10DC4F0D24D0A362D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 08:00:44 +0000
Manifest this update: Mon 28 Apr 2025 08:00:44 +0000
Manifest next update: Tue 29 Apr 2025 08:00:44 +0000
Files and hashes: 1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: cnFemsBUb8CZh0z/m5NqKIH0ebCZH+ESIslQpbsN/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:ab:42:56:72:40:f1:0d:c4:f0:d2:4d:0a:36:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Apr 28 08:00:44 2025 GMT
Not After : Apr 29 08:00:44 2025 GMT
Subject: CN=7b5e5a3ff8b7c91b6e0a5c8da273e63ef1161fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:2b:80:75:fd:26:67:fc:e2:22:c3:54:ea:
bb:66:91:a3:36:5f:bf:6f:5c:63:d2:1c:a0:03:c8:
a0:3a:02:26:6f:5e:3d:e6:2a:7a:28:e9:20:32:bf:
bd:94:45:db:2a:fb:cb:34:f0:90:e6:0a:20:22:77:
fa:8c:f3:53:8c:b1:9f:57:8d:45:04:84:74:17:b3:
48:c1:60:ec:bc:d4:5b:fc:cd:16:d9:15:15:23:d6:
99:e6:cb:02:cb:5e:72:cc:12:7e:60:06:4a:de:33:
b6:00:f4:09:52:23:11:17:e6:a4:b9:4e:6d:68:da:
cd:30:fc:3c:0f:a8:74:5d:5f:ad:49:02:3a:41:b2:
39:48:1a:13:34:e6:fa:d7:00:31:a4:a4:44:41:b4:
45:2f:0d:87:e5:62:89:01:b5:2f:a2:04:b5:27:51:
e1:ca:1f:ba:b9:8d:48:65:68:82:d7:3f:ce:11:a5:
06:df:de:2b:c0:5f:d7:96:dd:d1:2a:1a:43:cb:bd:
e1:39:c7:f7:1f:ba:06:2b:13:17:e6:3d:da:4f:92:
0c:94:92:bd:d5:95:9f:ca:89:09:0a:31:7d:50:8e:
9b:ec:00:42:20:d0:0a:3d:16:31:33:11:1a:d8:32:
b5:81:03:85:cb:dc:ab:0f:ba:ee:7c:16:99:f6:b8:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5E:5A:3F:F8:B7:C9:1B:6E:0A:5C:8D:A2:73:E6:3E:F1:16:1F:C8
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:76:a7:7e:9d:44:63:b8:48:32:87:7c:76:b5:02:6a:d1:2d:
f4:31:aa:01:4e:8c:e2:6e:07:62:18:59:54:56:aa:39:f2:a9:
a8:fc:de:ff:7e:15:99:f4:19:c3:c3:54:5a:00:97:a4:ee:d8:
e3:e0:04:90:8f:69:16:86:d1:aa:b1:7c:cd:96:c8:11:60:7e:
45:0c:b8:05:59:aa:f6:a8:50:48:fe:00:b2:c1:68:2c:4f:9b:
68:4f:f0:c1:6b:cd:db:d5:1b:a7:a2:d9:51:e9:1a:77:83:a8:
c0:1c:7c:2e:c1:63:6f:cb:54:4b:18:95:6c:75:7f:f1:ff:74:
0c:1e:3e:e9:ab:cb:f8:31:91:6b:b7:65:cf:9a:5d:90:54:02:
87:29:c7:45:87:38:04:92:3e:b0:e1:81:89:02:ee:9c:14:34:
ae:77:f2:ba:5b:c2:b3:5f:7e:db:66:09:4f:a4:39:9c:9b:27:
20:65:78:43:ad:5e:47:0c:ba:69:a2:19:f9:89:f8:c0:f2:2c:
80:a3:34:86:bb:e2:0d:c0:a2:b7:80:3b:1c:c3:ba:e0:e1:76:
98:a6:06:29:f4:ab:94:12:d4:12:38:4e:f9:a3:7f:68:b0:ca:
07:98:c3:99:f0:60:6e:8f:96:b0:8e:4d:da:92:58:36:9a:b2:
19:a3:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:27:03 2025 by rpki-client