Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: MHr01FezUHuTe1SS0rj4rZfE/UO72pB4IIrVzVrYFeg=
Subject key identifier: D4:C2:00:EF:B1:1D:43:1C:C5:63:57:26:51:54:C4:8B:82:A2:74:CB
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 0196C04A990E18F5EB474E40EC06DE74BD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 05EB
Signing time: Sun 11 May 2025 17:00:36 +0000
Manifest this update: Sun 11 May 2025 17:00:36 +0000
Manifest next update: Mon 12 May 2025 17:00:36 +0000
Files and hashes: 1: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (hash: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=)
2: Ye2lhVqLlVViESIa1X_75ZD_K3Y.roa (hash: GkZd+LIfPke0Hk41OCtwwY1KwALgbjtXK8ppjf/on0I=)
3: ZTj2ZwJbmSTqqGkaHNeSOzaRucE.roa (hash: 5l3ZvQv6nxBKcaHiVSLVWyVMDLkrqNymK7dZBTsMLbU=)
4: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: wlXEpWYSqiziU4OdqXtAKRPGvlrpE3AAzD7rZKrXPQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:99:0e:18:f5:eb:47:4e:40:ec:06:de:74:bd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: May 11 17:00:36 2025 GMT
Not After : May 12 17:00:36 2025 GMT
Subject: CN=d4c200efb11d431cc56357265154c48b82a274cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:82:08:0e:08:8c:92:53:9e:55:66:93:df:
3f:de:0c:b7:fe:fe:0c:a4:41:da:c2:8f:f5:fb:28:
41:89:f4:d2:9c:3c:83:df:72:6e:8f:ab:91:bf:73:
05:2d:4a:09:77:e0:33:08:9f:8f:b0:5d:f2:a8:a3:
db:bb:20:25:64:6b:48:ef:30:99:9e:93:e8:a2:66:
9a:4f:42:61:1b:03:e2:c1:e5:ad:77:2c:21:8f:4f:
45:e5:2d:c5:57:c0:d6:3b:2e:b5:43:4b:94:7c:34:
36:8b:89:f1:f9:65:7a:62:3a:3e:7a:10:8b:f6:cc:
c3:f9:46:18:fa:5e:a3:8e:69:5a:d3:37:bf:19:09:
cf:7c:78:47:39:60:46:11:c4:22:2b:be:82:52:b7:
8f:ec:dc:fd:26:eb:84:35:4c:92:70:0b:3c:1f:39:
58:6b:bd:de:8a:8f:93:89:39:92:43:a5:11:7a:f8:
2a:90:ec:e5:aa:11:c9:57:38:34:5a:bf:77:e2:fa:
3d:35:04:44:26:ea:6a:73:45:62:f4:14:98:8c:a7:
07:26:8d:df:5b:5c:1f:ba:ee:3c:7b:1b:b4:da:ad:
e0:09:52:c7:8d:bf:c2:62:ac:70:51:58:74:80:a8:
22:92:76:69:03:60:34:ab:c7:67:74:f0:61:d8:70:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:00:EF:B1:1D:43:1C:C5:63:57:26:51:54:C4:8B:82:A2:74:CB
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:55:eb:e3:38:a5:ae:d9:60:04:e6:87:6f:37:17:b1:6e:f7:
1f:5b:50:26:71:d8:18:91:84:f2:59:6e:9a:59:ef:49:e4:77:
8f:d6:81:d1:6b:a2:d2:8f:90:c8:52:e9:cd:12:b4:73:e6:f3:
20:7b:8d:a3:e5:dd:24:65:db:29:08:c9:08:92:51:cd:28:89:
a3:4b:c3:df:34:1e:2b:33:ee:07:3f:8e:db:1f:4a:fb:45:08:
47:3e:9b:b3:64:6d:a4:c8:5c:d8:10:de:65:61:ab:3e:c9:33:
42:c6:74:48:d8:52:f1:5d:ac:b2:3f:46:aa:ff:d7:f5:8b:a1:
76:9b:82:b2:0d:8b:33:bd:1c:3e:7c:1d:63:e3:65:8d:2b:b2:
5c:81:6a:79:80:b9:d9:8c:34:4e:55:1d:bd:af:46:99:c4:e1:
92:36:9d:1c:47:9b:f8:89:cb:1f:2b:86:f5:b8:13:db:22:e0:
5e:46:90:6f:34:90:4e:ee:5c:17:40:74:2b:76:f4:74:91:1d:
82:66:72:f3:de:24:1e:da:43:90:e7:21:eb:c8:57:3f:b2:8a:
d7:9e:c7:1d:ce:86:bb:19:00:0c:44:66:80:89:02:97:57:77:
0d:43:d0:98:a9:39:51:1c:f0:8c:c3:96:87:8b:d9:cf:41:60:
18:a0:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:14 2025 by rpki-client