Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File: 9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier: sha3+fcfJmnxBB3JBToYdYU8d2O+mmuSWJrwpwvwwOY=
Subject key identifier: D3:90:EC:3E:68:08:F2:43:BE:55:6B:E9:5C:04:59:DE:D5:B8:F7:2E
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial: 0196A389A3F1DCEAA3FCF7E0E3B05A161DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number: 04AF
Signing time: Tue 06 May 2025 03:00:28 +0000
Manifest this update: Tue 06 May 2025 03:00:28 +0000
Manifest next update: Wed 07 May 2025 03:00:28 +0000
Files and hashes: 1: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (hash: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=)
2: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (hash: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=)
3: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: WvvMi4DzO5Nf0kt9gZ4C+bcSv822Q1tL0WE21YNBhXo=)
4: Pam-mYZhUPxumLyTa-d41AOp2eI.roa (hash: aCi8Qzgn/82AxyGXcRCZJe9cgue7YAZPk3yXhgftdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:a3:f1:dc:ea:a3:fc:f7:e0:e3:b0:5a:16:1d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Validity
Not Before: May 6 03:00:28 2025 GMT
Not After : May 7 03:00:28 2025 GMT
Subject: CN=d390ec3e6808f243be556be95c0459ded5b8f72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:29:f1:da:40:5e:b7:f3:28:29:55:09:27:b0:
a1:30:39:ad:ff:b6:6d:f7:03:ad:ab:e2:9e:5d:d6:
b5:47:bb:05:a6:7b:fc:e7:37:f9:9c:15:cd:03:cb:
e1:86:06:07:2f:9f:f5:44:dc:dc:b8:7d:0b:5b:fa:
7a:42:c4:56:20:70:67:a0:a6:b8:1d:3d:05:00:8d:
06:81:a9:84:0c:e3:40:91:e9:8e:dd:27:0f:a9:d7:
c2:48:4d:5f:88:18:96:9c:ee:00:b4:14:20:fa:98:
45:40:74:72:97:dd:9f:d6:10:53:50:c4:3b:73:78:
20:a4:f7:63:39:dc:c1:86:9b:26:ce:c9:01:d2:67:
44:16:3f:15:de:ea:48:a9:51:0e:68:16:a5:65:f2:
f4:0b:f7:cf:17:56:d9:14:85:a6:62:ae:f4:e7:71:
6b:1a:35:40:09:5f:72:d5:a5:c0:95:90:e2:f1:c5:
72:63:33:3e:7c:40:f9:a3:f2:89:c2:02:7a:f7:10:
73:a9:6b:61:b7:21:54:5f:37:92:c4:d3:eb:4d:3a:
c2:7c:5f:12:9b:3f:6c:cf:33:15:a7:12:0d:0b:29:
91:da:96:55:b2:4e:22:2b:8b:1c:4c:b8:37:1f:26:
be:6a:2f:0c:02:13:26:c2:3c:2b:9e:dc:17:09:1c:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:EC:3E:68:08:F2:43:BE:55:6B:E9:5C:04:59:DE:D5:B8:F7:2E
X509v3 Authority Key Identifier:
keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fa:a7:35:97:64:68:f0:c6:e0:e1:ba:49:26:58:1f:e8:fa:
2b:40:c8:71:ab:ad:f8:87:c0:e5:fa:6c:5d:25:90:19:71:6f:
08:93:4c:ed:e5:10:c3:28:5d:58:c4:6a:9d:62:4c:5c:0b:ad:
91:87:0c:1f:b1:f2:b2:73:78:6c:70:da:e8:09:cf:f9:3b:53:
a6:cb:b3:73:af:b7:c7:4e:10:3f:3e:33:38:3f:72:d1:02:69:
07:2f:08:13:6b:f7:e8:55:02:5d:e7:19:6b:00:02:5b:39:89:
3f:40:57:3e:7f:7b:5a:c4:65:ff:cd:54:d7:5a:a8:13:d0:ca:
cb:25:6d:6a:dd:85:12:b6:01:36:6d:75:05:5d:3e:92:46:be:
35:a0:48:66:86:48:3f:67:7e:79:a9:57:9a:5b:b0:13:14:4d:
d3:e0:b2:6d:97:ac:b0:9d:65:76:0f:78:cb:67:85:2f:de:c6:
ae:17:3e:24:28:bc:9f:9f:6e:90:f2:cd:c3:d0:88:e9:ed:c8:
55:20:e1:25:6a:92:3f:06:cb:5d:53:ec:c4:61:bf:97:78:7b:
7c:4f:fe:e8:39:82:ed:dd:8b:ee:d7:bb:57:98:c4:e0:a7:9d:
88:31:c1:54:7e:03:32:54:02:88:98:4e:4a:91:eb:f8:6b:b8:
77:f7:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:14:06 2025 by rpki-client