Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: OFA3lTUlddTRY4QvWvsooXZQKn5SbacMnk/6jcym6q4=
Subject key identifier: B4:44:5A:2E:28:50:EB:AC:8F:DB:BA:BF:A4:02:B5:0F:E2:36:95:FE
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 0196832344AD26133707B9367F5715E79044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: A6
Signing time: Tue 29 Apr 2025 20:00:48 +0000
Manifest this update: Tue 29 Apr 2025 20:00:48 +0000
Manifest next update: Wed 30 Apr 2025 20:00:48 +0000
Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: k5yJ0GNrPMEzUEpZJjg9vY62Ywt/Hce/nvNiagJMT7o=)
3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:44:ad:26:13:37:07:b9:36:7f:57:15:e7:90:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Apr 29 20:00:48 2025 GMT
Not After : Apr 30 20:00:48 2025 GMT
Subject: CN=b4445a2e2850ebac8fdbbabfa402b50fe23695fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:6c:13:7f:51:a4:8e:38:34:c5:f2:40:cb:
d6:71:c8:6c:ac:1b:ec:31:b2:1a:28:50:e6:30:de:
b5:29:11:29:ac:f7:c9:4d:72:81:ac:25:5f:c1:ff:
51:7d:16:02:e2:11:6d:e0:d2:68:4c:6e:3b:0d:87:
0f:ba:80:23:aa:cc:9c:b7:fb:2c:db:60:aa:e5:aa:
3c:be:5f:0d:71:04:46:ec:d6:f7:e3:e3:dd:6f:1a:
64:ef:ec:d6:50:13:9c:79:3b:9d:cc:f3:e9:fa:a0:
5f:0b:fc:49:70:ad:fa:b4:d5:a0:10:7d:9d:a5:43:
34:ab:46:d9:0a:8f:0a:f7:a0:4c:65:6e:71:95:0e:
65:39:21:bb:30:6b:ec:30:8f:9d:e8:06:b5:4b:ee:
c0:d4:e1:c7:91:ed:79:c9:3f:17:50:9a:31:c6:05:
58:9a:5b:8f:5d:ba:e1:15:37:52:5a:de:cb:d1:0b:
d2:05:19:45:99:43:6a:a2:3a:02:56:5c:8c:9b:00:
a1:05:1a:46:2c:45:8f:70:b2:71:74:ae:c7:61:36:
c4:4c:cd:8e:b8:84:72:00:d4:64:f7:e2:95:bc:f4:
e2:64:ff:7f:6d:fc:57:2d:95:ee:e7:51:e9:5b:56:
20:8f:9b:9c:b5:28:eb:79:c7:9b:63:2f:e9:f5:8e:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:44:5A:2E:28:50:EB:AC:8F:DB:BA:BF:A4:02:B5:0F:E2:36:95:FE
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3b:44:30:90:38:91:44:59:2c:a8:cd:de:ec:33:c4:2b:c3:
f6:72:19:5a:d9:dd:bb:49:e7:0b:ca:cb:85:a6:01:50:55:86:
93:3f:25:2a:c5:58:51:43:c6:ff:a7:2c:a6:4d:12:5a:4d:59:
71:51:3b:b0:1a:c6:5a:06:53:a2:26:fb:45:18:0c:3a:d4:3b:
17:e8:4c:0f:5b:96:7e:0c:84:5b:6f:55:d9:3f:e7:24:f3:12:
cc:99:d6:e0:37:6e:5b:09:96:fc:09:1e:2c:2d:97:5b:b9:79:
cd:ec:f6:50:e0:8b:51:80:7c:08:91:3e:37:20:25:f9:d7:4b:
3f:ab:ba:fc:5c:a3:2b:9e:5b:c4:7d:d6:92:c6:3a:12:41:4b:
21:fb:17:11:25:83:f5:ad:11:89:4e:77:4b:4b:11:36:cc:67:
4b:71:9b:56:53:2c:4d:92:cc:06:cf:43:9d:01:71:f7:0c:fa:
1c:a1:bd:40:dc:c8:85:12:e7:0e:02:8f:8d:72:b8:58:ad:49:
37:ba:21:6e:12:05:39:14:49:e8:39:1d:8f:93:48:ce:41:7a:
23:05:31:f5:d2:e8:f1:15:82:2f:1d:a2:12:ff:7a:c4:35:f7:
0b:d2:8e:a7:82:16:1a:ad:eb:d3:7e:87:ab:31:50:49:90:24:
7b:d3:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:24:45 2025 by rpki-client