Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: DfFmDM4YMhQpbzUXjlXPt5BF8K1gxDpUCj2n8hdq/dQ=
Subject key identifier: EC:3E:AB:22:23:0E:29:93:2C:39:A3:AF:8B:C5:1C:1C:E3:4A:6A:E7
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 0196A91E52A0E7D84EC8F0005FB3A9CE4E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0966
Signing time: Wed 07 May 2025 05:00:58 +0000
Manifest this update: Wed 07 May 2025 05:00:58 +0000
Manifest next update: Thu 08 May 2025 05:00:58 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: z7rWpUZQ47ej6mUk/eJcZNKcrGxSGxjACXUILN+xCl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1e:52:a0:e7:d8:4e:c8:f0:00:5f:b3:a9:ce:4e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: May 7 05:00:58 2025 GMT
Not After : May 8 05:00:58 2025 GMT
Subject: CN=ec3eab22230e29932c39a3af8bc51c1ce34a6ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:3b:ec:dd:71:58:b9:4a:7c:b7:0f:fc:1e:
b6:08:ce:d7:66:6d:83:b2:65:46:05:25:a1:20:b5:
3e:b1:18:c1:90:ee:26:a4:e5:ab:c0:66:c2:79:85:
cd:7d:35:b7:b4:10:25:02:0d:27:b6:3a:05:0b:16:
76:4f:86:5d:8b:4e:41:eb:b0:25:4c:a7:8c:99:f9:
0c:1e:45:87:e1:c2:c6:62:c2:ac:df:cd:f7:6f:d0:
53:05:e1:82:86:0b:fc:30:c9:65:1c:a5:d7:f7:a3:
cd:5f:ce:af:90:ae:fa:31:e5:23:d3:c1:87:c0:bd:
03:f4:84:00:e6:b9:ba:d9:c0:ad:c1:62:d8:e8:55:
3e:af:40:b8:13:7b:44:50:6e:f6:fd:e9:f4:2f:14:
96:91:d5:ea:ef:41:90:4b:69:7e:1e:ab:fd:dc:bf:
96:32:73:5f:cb:ba:73:21:80:32:6a:74:7e:7d:ff:
da:f9:f4:09:40:10:df:f0:e3:93:a9:cb:1f:5a:2e:
dc:5f:54:f8:8c:11:6e:e7:ab:ad:2b:a6:43:75:4d:
e6:fc:bf:6b:08:92:ec:e6:6b:a4:b6:4e:98:6b:a8:
ce:64:6f:48:79:28:12:a6:66:55:f2:52:27:c5:6e:
2d:c7:5c:6c:e5:d2:a1:e2:9a:86:04:c7:0c:86:66:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3E:AB:22:23:0E:29:93:2C:39:A3:AF:8B:C5:1C:1C:E3:4A:6A:E7
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:64:2c:96:ac:9f:3c:36:d4:79:9a:4a:4f:33:77:3e:05:49:
e7:ac:91:3b:ee:94:8b:db:91:d6:5d:f2:6a:dd:37:d4:07:75:
fb:28:5f:cc:5e:0c:4e:25:01:ce:1d:89:1d:ca:3b:8a:0d:63:
ef:bb:fc:73:f0:a2:05:24:36:e8:95:50:b2:b7:67:e8:ef:06:
a6:51:f8:06:00:a0:cf:91:17:cb:6d:b4:f2:89:c2:39:93:21:
53:66:dd:26:b1:c1:73:9b:9c:21:08:f5:56:25:97:26:13:bc:
7c:16:24:a3:25:40:53:06:f1:79:77:c2:cc:d5:fe:60:a7:c0:
bf:e6:9d:83:0f:a7:ff:35:72:a5:c8:11:c0:97:fb:6d:32:52:
87:c4:4b:a2:92:e1:73:1e:81:2e:16:ae:b0:5c:40:1e:e3:58:
a7:18:20:9a:87:42:4f:fd:7e:cb:df:ea:aa:57:eb:e6:65:f6:
1c:75:06:20:1b:fb:52:41:da:b4:86:c7:61:16:79:ae:2c:b7:
07:21:fd:39:51:0e:66:8b:33:9a:13:a1:03:3a:74:44:83:40:
b5:cd:9e:5c:9c:8d:bb:e3:0f:27:3a:99:39:21:72:28:ba:da:
b3:45:12:92:cb:c0:0e:9d:9f:3d:cd:46:01:04:e1:f5:a1:e1:
44:66:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:27:52 2025 by rpki-client