Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier: GUH0TJOCvUpdUk+YvKLw1hLOuWOCiA1UlZaq/CnIUDU=
Subject key identifier: 4D:58:8C:1A:C5:9B:51:8C:81:5B:9B:38:3F:EB:22:8A:75:42:D1:22
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial: 01967BD7EBECE2E412839F239EF3C60E8ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 10:01:10 +0000
Manifest this update: Mon 28 Apr 2025 10:01:10 +0000
Manifest next update: Tue 29 Apr 2025 10:01:10 +0000
Files and hashes: 1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=)
2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: YB6eOyQT9Rn1dWeldirpmNrec1FY/0ft2QX9KI9ETr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:eb:ec:e2:e4:12:83:9f:23:9e:f3:c6:0e:8a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Validity
Not Before: Apr 28 10:01:10 2025 GMT
Not After : Apr 29 10:01:10 2025 GMT
Subject: CN=4d588c1ac59b518c815b9b383feb228a7542d122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:a3:36:b7:e2:1a:00:ec:86:1c:60:07:87:
d3:e4:5c:59:23:48:15:9b:29:73:d8:f0:e0:8f:a7:
46:ea:b6:ef:9b:75:0a:3b:d1:8a:d2:f7:90:e8:1b:
0c:90:50:33:41:a6:7b:86:e2:fe:fe:41:5b:56:20:
be:ef:71:eb:66:7c:47:b6:b5:6e:c2:e4:16:92:b0:
8c:a5:8b:0a:17:78:0f:12:ea:d4:bc:74:01:d8:0c:
1c:46:f5:ae:f8:0f:fa:e5:e5:f1:01:41:31:93:61:
42:62:dd:8a:35:1f:07:4f:c6:93:4d:47:6b:d7:33:
98:e8:b0:e5:67:07:ec:46:bf:93:32:7c:10:16:68:
42:2b:e4:1b:81:48:80:12:0c:90:d0:a2:bd:c8:2a:
28:f2:86:2f:46:0e:22:61:f9:a5:5f:94:d9:f8:90:
17:46:8c:4b:ff:94:10:35:8c:62:46:fc:88:51:13:
d6:fa:c6:7d:bb:5e:c7:d8:4e:ab:e6:83:e2:b5:34:
24:db:3b:56:28:c7:6d:ea:a9:fc:d3:fc:2d:0c:e6:
e8:b2:c1:8c:77:3f:e9:78:47:00:5e:86:3b:a9:d7:
1a:17:88:d1:a3:3c:c2:7e:80:05:f0:40:7c:90:28:
8b:5e:ac:cc:8c:16:94:40:31:80:94:8f:0f:bd:02:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:8C:1A:C5:9B:51:8C:81:5B:9B:38:3F:EB:22:8A:75:42:D1:22
X509v3 Authority Key Identifier:
keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:f7:37:46:80:ae:40:14:18:b1:3e:89:23:6d:2c:6a:57:
8a:80:53:fe:7e:d9:53:61:7b:76:a4:9b:75:ed:fd:f9:d4:c5:
0e:bd:2e:8f:f2:3c:1b:53:53:27:1c:05:6b:52:1c:ab:9f:e1:
9c:d7:8a:1f:9a:da:d6:66:f5:4e:19:70:e4:58:c4:e6:80:f3:
60:dd:98:6c:fc:50:fd:fc:a9:fc:6b:4f:88:66:22:b9:ef:40:
6c:c0:20:68:b0:04:cf:58:38:27:98:3a:39:6e:b7:70:b3:b6:
57:cb:95:8d:20:e5:2b:bc:26:98:6b:3e:f4:16:d2:70:2e:72:
c0:b9:cb:ad:d7:7e:87:3d:5a:97:64:1a:3a:2b:b1:19:97:40:
1f:e1:f7:ae:bf:1e:15:2a:f4:3e:cc:9b:33:ab:2b:05:a2:57:
a7:72:59:95:41:c0:73:48:8b:8f:36:d9:45:c6:a8:15:86:ca:
40:d6:5f:9a:13:f1:5a:6b:03:df:a3:92:89:e6:6c:01:2a:4c:
4b:52:3a:5e:69:45:0f:a9:7d:20:3e:68:b9:89:d1:95:08:4d:
5c:b3:d4:d7:0e:a7:f2:a6:db:3b:09:39:28:b0:bf:2d:1c:10:
7a:a0:53:c6:15:fd:bb:33:fe:63:6f:04:14:c1:8a:5a:51:ba:
1e:66:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:26:17 2025 by rpki-client