Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier: gAUOgxfPauSY0AggrFr+8X1u0sBfqVympNyYbKoncMU=
Subject key identifier: 3D:B4:31:08:99:C7:97:84:74:4A:06:01:35:0F:CB:6D:FE:70:9D:FE
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 0196A842A04E26AF8FFA48DC6EF9FB18EE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number: 148F
Signing time: Wed 07 May 2025 01:01:00 +0000
Manifest this update: Wed 07 May 2025 01:01:00 +0000
Manifest next update: Thu 08 May 2025 01:01:00 +0000
Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=)
2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=)
3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=)
4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: pID3g5jY1/5MdJmvt1HWmy+cj42MNKaQo8aARxuhXLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:a0:4e:26:af:8f:fa:48:dc:6e:f9:fb:18:ee:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: May 7 01:01:00 2025 GMT
Not After : May 8 01:01:00 2025 GMT
Subject: CN=3db4310899c79784744a0601350fcb6dfe709dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:5d:c6:bd:32:50:b4:2c:89:c0:b7:aa:0f:
8a:8a:90:2e:8f:e3:99:0d:aa:0e:05:7f:7c:af:18:
3b:4c:8c:86:6f:04:e6:80:1a:9a:62:6b:42:11:73:
17:e6:dd:43:00:fc:e0:76:77:39:9d:b7:d1:5a:e2:
c3:cb:dd:e2:94:fa:f0:66:c8:9f:9c:fc:76:a5:69:
9f:e6:95:49:fd:ee:61:00:59:54:06:43:d2:b6:92:
e8:72:3b:25:6b:3a:98:7a:e2:ea:ea:b0:04:90:eb:
38:68:78:d9:57:31:7c:85:f5:06:2f:21:68:16:8a:
c7:05:91:a6:5b:3f:2a:f2:d5:2a:53:48:f8:8e:f2:
f2:97:f0:d7:58:87:c8:2e:96:5a:ca:4b:64:4d:09:
52:8f:5f:2d:4c:86:6f:5a:8a:85:5a:94:e6:11:da:
13:d0:ad:6f:38:a4:f5:78:d2:c5:9d:f6:56:b5:53:
03:f1:46:ba:ef:47:65:fa:fd:4f:4d:32:4d:2c:72:
88:7a:ba:d0:5e:99:b3:ac:ab:34:79:bb:fd:f5:d1:
89:f2:27:ea:c9:1c:ba:d5:2d:3e:a3:dd:8a:97:5c:
b4:4d:32:c9:ff:dd:aa:27:f1:f0:67:db:7c:98:58:
82:a8:54:d2:24:61:f4:dd:00:58:0d:c9:43:df:9c:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B4:31:08:99:C7:97:84:74:4A:06:01:35:0F:CB:6D:FE:70:9D:FE
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:58:a5:53:57:12:b8:cf:bf:12:7f:a7:1a:cb:fe:b2:f7:62:
52:2c:be:e3:3c:8a:b2:58:2c:61:5e:da:c3:7b:b5:4a:84:db:
18:de:a3:ba:e2:1b:a7:06:82:c8:0f:b3:2e:5a:c8:b1:31:d6:
72:d2:92:f1:58:06:db:b6:1b:42:2a:bf:78:35:56:b6:2b:92:
b6:b9:b4:34:aa:a8:a5:af:78:03:70:93:09:d8:77:57:10:28:
94:38:97:fd:1e:b1:7d:c7:cc:09:77:6b:8e:ff:fc:6f:b4:b7:
f0:56:7c:69:0c:13:9d:f5:b7:2b:f2:24:b4:b9:65:df:a5:26:
99:48:90:b6:13:e1:00:03:3e:a1:5d:f7:d9:66:1f:f1:d2:9f:
b1:3b:1e:92:7e:9f:0f:d9:54:e8:a1:9f:de:92:87:20:82:c7:
91:62:dc:b8:ca:66:62:57:6a:ab:a5:76:b6:8f:b2:ff:4d:74:
0f:02:81:27:15:e0:92:e3:33:41:d8:2f:5b:9d:69:52:d2:47:
50:1a:05:84:94:b9:0e:78:ee:a5:dd:c4:7f:07:f3:22:83:d9:
ed:35:cb:2a:24:6a:2f:57:5a:5d:11:43:7e:ce:0b:6a:c5:57:
c3:05:3d:32:02:e7:d4:df:2f:1b:59:85:ab:d7:4e:7b:3c:15:
59:8e:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:56:52 2025 by rpki-client