Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: p2V8L7/s8agP6yFp07WPtIeswAzJ7ZNl/ypRQsBt4+w=
Subject key identifier: 20:00:FB:7D:BE:DB:3C:96:CD:DA:7C:82:96:BC:98:19:C5:D9:1F:61
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 0196BD498B88D1AB67A52B81176A2BD50864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 0E9F
Signing time: Sun 11 May 2025 03:00:35 +0000
Manifest this update: Sun 11 May 2025 03:00:35 +0000
Manifest next update: Mon 12 May 2025 03:00:35 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: ywetvuZWlotesXNRgJP+rAS6QFokzbYwHhqfAKc434A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:8b:88:d1:ab:67:a5:2b:81:17:6a:2b:d5:08:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: May 11 03:00:35 2025 GMT
Not After : May 12 03:00:35 2025 GMT
Subject: CN=2000fb7dbedb3c96cdda7c8296bc9819c5d91f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:f7:4d:28:89:aa:3d:7e:2b:47:4a:9a:d1:
a2:45:3e:0b:c1:3c:fb:62:e0:2b:65:0c:0b:4f:b4:
71:90:57:fa:3b:d5:74:87:be:2a:4b:2e:5e:a8:03:
ab:f2:36:92:bf:93:1a:e9:de:0f:bd:43:fa:8c:eb:
66:89:e7:0b:87:ab:d5:ee:45:d6:03:49:30:cb:94:
ed:e4:82:19:82:ab:97:3e:b0:4e:37:29:4d:94:3a:
c7:b6:06:99:3e:08:80:be:12:76:18:a0:73:82:4e:
00:f1:00:d7:74:36:01:23:d5:56:1c:14:64:69:b4:
39:32:55:7b:4a:69:92:f0:c5:cd:43:7c:d7:24:82:
99:0a:88:50:db:75:cb:b5:19:0b:58:f2:d9:65:54:
d7:b4:62:ae:ec:20:98:f9:2a:90:6c:3c:d5:02:e3:
c8:85:35:0a:c5:d4:1a:48:66:06:cc:53:6f:19:a8:
50:c3:bc:75:b8:77:bf:9d:0c:af:c5:cc:70:8c:28:
9a:85:d2:3f:31:2b:9b:56:40:c8:ca:78:13:1a:b1:
4f:83:5d:34:2b:15:a0:ac:7f:c2:fd:98:92:2f:87:
3d:df:90:7c:c3:15:8e:8c:04:eb:e1:83:4b:c7:67:
1f:b2:68:83:4c:f8:60:d0:18:c4:99:e1:a7:ca:9c:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:FB:7D:BE:DB:3C:96:CD:DA:7C:82:96:BC:98:19:C5:D9:1F:61
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8a:d8:db:1d:26:27:f4:84:69:ba:9c:02:50:e6:d5:4b:52:
a5:94:e1:eb:f3:d8:01:a2:88:6b:52:11:ff:fc:c3:eb:5b:06:
82:9d:3b:90:c6:16:61:7c:18:2e:c8:4c:f3:ed:71:9b:3f:31:
4f:a2:57:71:ef:a1:b5:22:29:d6:cc:86:f2:1d:ef:5d:9e:26:
0c:30:d8:52:8e:d4:e3:de:14:da:7c:06:ee:9f:b0:7a:f8:f8:
86:25:a3:33:0b:bf:8f:83:3d:11:8f:e2:0d:7a:4d:f7:77:fa:
e2:7f:94:e3:92:a2:74:f0:4c:a3:97:a9:eb:df:72:95:05:3b:
f8:ec:56:f9:5a:19:6e:cf:99:88:91:f5:92:a0:85:a0:7b:b3:
05:e9:a3:06:99:48:40:0e:a8:f0:e5:c4:55:a9:4a:83:b2:98:
03:b5:4e:59:f6:5e:ca:69:1b:04:de:19:30:47:63:87:43:fc:
c8:69:44:52:24:1f:32:ec:c4:9a:e7:0d:50:c5:da:2b:ea:c6:
65:8a:9e:cc:fc:7f:91:1a:37:7f:82:19:7a:56:09:9d:ff:5a:
12:ff:d7:ee:84:cf:4b:e1:fb:da:c7:e9:8f:28:a1:56:3c:4a:
78:62:69:e2:e7:df:c5:a9:42:3d:50:e5:e2:5d:53:46:5a:60:
79:e0:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:57:34 2025 by rpki-client