Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: /wxjP0xeXRWX99mImCKy5snWDja5GF28fbopa4IGPDA=
Subject key identifier: 1C:BF:81:FC:37:1A:BA:6C:E1:CB:5A:35:60:67:19:8A:C1:64:BB:7E
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 0196AE0D52C5AEAE3ACAB8199AD062543BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 0DC4
Signing time: Thu 08 May 2025 04:00:30 +0000
Manifest this update: Thu 08 May 2025 04:00:30 +0000
Manifest next update: Fri 09 May 2025 04:00:30 +0000
Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: zjW15jrJ8Z5RurAZNae1h+pnJ3tdWf5VeHvBJYf58Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:52:c5:ae:ae:3a:ca:b8:19:9a:d0:62:54:3b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: May 8 04:00:30 2025 GMT
Not After : May 9 04:00:30 2025 GMT
Subject: CN=1cbf81fc371aba6ce1cb5a356067198ac164bb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:b6:d9:2c:d2:2d:42:2b:4c:25:46:3d:52:
18:a2:87:1d:00:96:af:ee:33:2d:23:e5:24:bc:97:
c3:db:53:05:cd:6e:53:28:31:c2:4e:70:b4:c0:b1:
e2:d6:aa:ba:e3:82:3a:b5:a4:f7:de:db:9a:a1:5b:
e2:de:a5:b6:ac:47:47:a9:bc:e1:7a:6f:9c:48:73:
90:29:64:fd:67:b2:f4:6b:d9:42:52:6f:26:47:ea:
81:c4:25:47:17:d9:55:9b:d5:4a:2c:12:65:45:bc:
99:75:6e:a6:df:eb:cd:47:4a:81:8b:74:ed:35:54:
f8:8f:d0:ef:d5:19:93:63:f4:db:f2:64:69:24:ca:
1b:10:f5:ae:5c:53:4b:b2:32:12:15:4e:80:cb:28:
c6:d9:d8:09:65:80:06:4b:d9:fb:d0:fc:6e:4c:7c:
4c:28:68:21:c5:14:24:c6:ed:06:25:da:24:aa:ef:
4f:70:39:50:68:05:64:16:b6:5d:25:ab:fb:f3:67:
9e:e7:24:42:98:0c:86:bb:d9:e9:9c:a3:13:ea:7d:
eb:77:a6:6c:3b:9a:f2:5b:a5:cd:90:57:20:ec:d4:
29:25:17:44:de:af:c1:6e:33:f0:06:60:10:26:79:
8c:bd:09:35:cc:86:73:f8:e8:10:1a:81:c2:22:56:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BF:81:FC:37:1A:BA:6C:E1:CB:5A:35:60:67:19:8A:C1:64:BB:7E
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6f:f3:72:1d:1f:4c:37:6e:4a:85:9c:68:e3:4a:85:d5:03:
31:cb:e9:13:13:3a:da:72:9d:c7:74:bb:9e:1c:db:31:b2:e5:
0e:98:62:8b:eb:55:61:8e:82:a5:81:e5:7c:e7:ea:39:de:2d:
31:60:56:77:91:36:7c:5a:4d:b9:e1:7a:21:c1:bb:e7:14:63:
c8:5b:2f:47:2f:41:03:48:0a:b3:4d:6b:56:cd:85:e7:9f:59:
72:3f:ab:d2:22:5e:95:62:ee:9e:68:67:f5:f6:31:8d:60:a0:
9b:b4:82:01:7a:7b:cb:df:26:3a:6b:b6:24:99:1f:dd:7d:6f:
b3:fc:9b:c9:48:d9:8d:79:b0:48:e9:eb:91:39:58:96:b0:78:
99:09:bd:a1:b4:ca:1c:98:be:52:08:c9:ef:63:13:72:d2:19:
72:2b:87:e2:8d:b5:58:ef:71:e4:74:77:4d:1c:8c:21:51:40:
bc:c6:7c:97:d0:4e:20:e0:cd:7d:16:24:0e:10:ac:9a:4b:ac:
9e:2b:07:ad:1e:c8:4b:95:2a:bb:e6:e9:10:fb:aa:0f:b0:b4:
81:f4:41:1a:30:5c:3b:1c:86:7e:f0:f0:20:31:6f:30:e2:bb:
5b:cb:7c:1e:71:98:ef:8e:8f:8f:35:62:1a:68:44:36:96:32:
c3:3d:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:05:40 2025 by rpki-client