Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: dIdpFd6VBOQwHy0V3jGSJc7/HDITNyBWGZTuRRrCImE=
Subject key identifier: 83:FC:B0:25:9C:B1:3C:73:45:59:0D:26:9D:96:AE:39:1B:FE:A8:A3
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 0196C15DDF50D2863DCE87C59B31FFEFDDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 0F01
Signing time: Sun 11 May 2025 22:01:16 +0000
Manifest this update: Sun 11 May 2025 22:01:16 +0000
Manifest next update: Mon 12 May 2025 22:01:16 +0000
Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: xMo3ilWlAXnWuKzUVuLH8O7gyz4n8VdDuSNqhFuS88Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:df:50:d2:86:3d:ce:87:c5:9b:31:ff:ef:dd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: May 11 22:01:16 2025 GMT
Not After : May 12 22:01:16 2025 GMT
Subject: CN=83fcb0259cb13c7345590d269d96ae391bfea8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:89:9b:16:0a:5b:8a:b6:0e:7b:b1:3b:9c:
11:6f:5d:66:d3:02:1c:2f:f7:21:9a:30:f4:99:26:
fa:cf:f6:12:d4:35:33:c8:db:79:d0:59:65:f1:32:
1b:34:3f:35:33:6d:26:d4:7b:2a:4f:58:79:6f:1d:
39:09:4b:04:d2:e9:91:6a:1a:af:00:56:ac:c1:70:
68:cb:1b:25:7b:b2:45:58:f1:c9:63:4f:dd:f9:1e:
e7:65:60:b5:37:26:b8:15:be:1f:b9:64:25:66:79:
d0:13:21:17:68:dc:bd:e9:64:61:b7:14:9f:2c:b6:
e2:c7:b7:f2:15:98:98:02:91:78:60:c2:d7:1b:5a:
55:99:03:e5:d1:a2:e3:2c:be:6d:9d:ae:75:95:44:
08:50:e9:bb:88:cf:d9:08:2e:23:3c:b5:5f:aa:cf:
1d:db:78:b8:28:ed:72:0d:a9:9f:82:4b:68:4e:c2:
6c:00:2a:ef:48:0f:cc:ac:01:0f:c2:55:74:0b:bb:
6d:05:35:20:d6:d9:ae:e3:61:0b:4c:32:8b:6e:13:
fa:96:cd:b9:1a:05:a1:74:e7:9a:15:4f:78:a9:e2:
d9:f4:8d:2f:31:f5:88:1c:e5:97:88:ef:d4:b3:c2:
f5:4e:59:8e:94:13:7c:61:48:30:df:25:36:3e:2f:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FC:B0:25:9C:B1:3C:73:45:59:0D:26:9D:96:AE:39:1B:FE:A8:A3
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:60:b6:dc:35:92:8e:0f:ab:d8:72:ec:3c:26:cd:29:a5:
95:47:69:d7:e8:68:b4:0d:bc:af:47:3e:d3:6b:8b:3d:d0:cf:
bb:c0:63:3e:4b:26:2a:46:fc:90:79:c7:b3:dc:2e:69:64:cf:
75:bd:0c:7f:c3:e2:be:7c:8d:d1:7a:3c:8b:84:40:46:b6:5e:
61:84:25:43:63:35:ee:c9:53:c7:24:03:47:cd:41:70:ff:06:
06:aa:28:42:ea:4c:23:4c:a7:e4:13:92:1f:56:dc:75:85:aa:
8b:ad:fb:56:11:5a:26:3d:3c:4a:f8:48:34:0d:ec:07:01:71:
c0:91:89:be:ae:da:97:be:26:82:53:28:d9:12:80:8b:77:d9:
23:22:e5:14:6f:95:82:3d:09:e9:81:36:01:71:ad:bf:b3:3e:
3c:60:40:33:ec:08:cf:2d:73:b6:01:d2:ae:88:21:fe:ef:29:
c4:7f:5b:e2:56:5b:7f:38:b1:f5:d3:30:88:93:7a:f0:84:99:
ae:11:49:9e:9a:4c:09:f3:33:89:76:7b:75:db:19:b0:97:6c:
96:4e:c6:a4:e0:9b:fe:3c:e9:3b:2e:e6:04:6b:ac:37:4b:b2:
3e:6d:b4:78:2d:4e:ed:a9:e9:6b:e5:36:e0:a0:ba:43:ce:82:
50:5c:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:24:47 2025 by rpki-client