
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier: skw8qtwfg3leRbwHGEux8OnCcHAAzWIoNfPVvh+Q+vo=
Subject key identifier: 3C:37:AC:9E:58:4C:26:A4:FE:1D:B1:3F:03:B4:87:8C:5E:BC:33:7A
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial: 019680C6FB351CBEDF3B9705C3B223F47EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 09:00:45 +0000
Manifest this update: Tue 29 Apr 2025 09:00:45 +0000
Manifest next update: Wed 30 Apr 2025 09:00:45 +0000
Files and hashes: 1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=)
2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: 5JWvq+gmtqORwIF1X73hY4sF2RqJHjCcWCSKtdttyoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:fb:35:1c:be:df:3b:97:05:c3:b2:23:f4:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Validity
Not Before: Apr 29 09:00:45 2025 GMT
Not After : Apr 30 09:00:45 2025 GMT
Subject: CN=3c37ac9e584c26a4fe1db13f03b4878c5ebc337a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:a5:6f:ca:43:da:17:04:d1:07:19:31:a6:
dc:09:a0:5e:8b:ac:91:ed:ac:06:71:e2:d7:55:18:
86:33:e4:db:14:fa:17:e1:d7:22:9b:75:60:30:c3:
62:b2:4f:77:52:85:a7:6a:bb:eb:41:52:af:3d:7a:
e0:9d:87:cf:ce:15:f6:d4:f0:91:0a:e5:79:a0:74:
2f:df:66:be:2c:66:62:ef:1e:96:87:00:65:07:60:
ef:9b:4b:7a:e6:87:11:c2:25:3d:96:08:aa:ae:28:
1d:46:60:bf:d8:65:6e:5f:32:8f:5c:a6:a7:4c:06:
18:d7:f1:08:e6:32:d6:d7:fd:d5:c6:35:2f:f1:1d:
d7:a7:9e:f4:68:fb:0f:cc:09:e7:1a:f6:c4:56:9b:
21:6a:37:07:55:26:a9:0d:2a:db:10:6f:0e:6f:af:
0a:56:4a:3b:9f:c1:b5:fc:92:57:54:4c:d4:d1:cd:
0b:18:a3:14:d4:25:ce:8d:4b:ef:1d:fd:fb:4a:58:
f8:79:80:2f:83:55:04:eb:95:98:58:f2:a8:dc:a8:
14:17:9f:0f:e5:af:00:75:f3:32:a8:b2:5a:27:2e:
ee:61:b7:e9:77:83:2f:04:8f:ad:49:47:36:fb:a4:
9f:6a:e1:80:6a:8a:bc:91:e7:51:c9:7c:55:a8:e5:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:AC:9E:58:4C:26:A4:FE:1D:B1:3F:03:B4:87:8C:5E:BC:33:7A
X509v3 Authority Key Identifier:
keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:33:83:94:56:86:71:fb:e3:1b:fe:c5:26:1e:66:03:1e:46:
67:f5:dc:05:13:6e:32:d7:4d:0a:d2:0c:9c:48:8f:c9:73:09:
71:f1:91:d1:66:ff:c1:3d:a5:45:48:6a:08:9b:9a:4f:4a:d1:
0e:c5:e1:63:60:54:db:d2:98:09:28:c6:4d:02:19:9f:fb:2e:
a4:ed:1b:40:48:96:e1:67:73:5b:53:ed:b1:5a:aa:24:b7:76:
38:eb:41:e4:e3:61:17:5f:96:00:58:34:70:0b:97:91:c0:bd:
97:76:d9:d1:d4:d0:7e:d8:96:2f:28:f8:34:88:2c:b2:e1:b4:
e3:1d:a2:6d:83:ed:08:64:e1:68:e7:d0:dd:60:43:77:f9:1a:
aa:e7:9d:c2:55:f8:d9:53:50:b0:82:bd:73:9f:72:13:e9:b6:
ee:74:c9:c3:7e:4f:3a:5b:fd:e0:e1:17:1a:85:25:da:08:d2:
21:89:00:59:30:97:8b:d7:42:ab:05:54:08:24:94:c1:02:0a:
a3:0e:a4:58:f5:11:77:03:1f:e8:e4:ea:c2:62:00:b5:8a:b4:
1c:3d:af:9c:06:0f:a7:a3:cd:1b:0e:2f:b6:fd:85:92:36:37:
12:26:ac:dd:f8:f5:e3:7d:d2:ce:00:62:1d:dc:69:c9:64:7c:
0a:77:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:54:16 2025 by rpki-client