Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: 7S3V4fRtTgevwvLn6VlqaPFGFC45PKErqcQzCUDzW2o=
Subject key identifier: 7A:03:A5:79:48:25:08:D6:BB:07:5F:5E:EE:64:6B:9A:8E:48:AF:5C
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 0196C31475103EFB554F4BC8C391F4408C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 098A
Signing time: Mon 12 May 2025 06:00:19 +0000
Manifest this update: Mon 12 May 2025 06:00:19 +0000
Manifest next update: Tue 13 May 2025 06:00:19 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: IsPoPVYUTigjiPUtFbZNnxMKF3Iz78qkp4CEMuSeQNQ=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:75:10:3e:fb:55:4f:4b:c8:c3:91:f4:40:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: May 12 06:00:19 2025 GMT
Not After : May 13 06:00:19 2025 GMT
Subject: CN=7a03a579482508d6bb075f5eee646b9a8e48af5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:10:f4:33:b5:a8:db:c6:e7:3e:7d:53:19:
eb:73:d2:f3:9a:9a:a2:42:0e:ad:e1:60:91:61:25:
43:4f:55:5a:0c:b7:d3:a0:d2:72:5e:63:bd:a0:b3:
4c:8c:ae:32:33:67:03:11:b8:2f:81:1a:94:22:f0:
11:11:d8:3a:89:9c:a6:e0:56:35:4c:38:35:cc:ff:
b6:b3:42:df:f5:54:a1:cb:0c:2b:28:50:0b:d9:44:
0b:95:4d:2b:a9:85:db:fc:18:47:d8:9f:0c:db:ce:
f1:5f:93:30:8a:c9:22:d1:e6:f9:6c:74:c8:bc:d9:
b4:4b:61:3d:2b:99:45:e8:ad:1d:71:32:40:28:48:
a4:93:b7:8b:6e:76:90:54:a2:52:8c:44:52:f9:fb:
92:5b:eb:fe:0b:91:3d:7f:e5:c0:b1:78:b6:c3:72:
c7:8f:68:89:69:b5:80:09:57:79:92:aa:77:20:93:
e0:59:b6:c7:ee:a7:5a:67:7a:02:a3:e7:7b:fc:49:
a7:7c:c7:ae:e7:b7:63:21:92:5a:3e:18:c8:e1:d4:
90:2c:74:2a:f2:e2:7b:2b:16:b0:5a:b2:9e:e6:3b:
c9:b1:e3:18:67:c4:1b:d4:06:c3:e3:73:66:59:69:
dd:d4:fc:96:de:60:5d:40:e4:78:fd:e4:13:bf:93:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:03:A5:79:48:25:08:D6:BB:07:5F:5E:EE:64:6B:9A:8E:48:AF:5C
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:22:7b:0c:fe:9d:0f:71:9c:92:6d:c3:40:0e:f9:f8:fb:fd:
1c:85:11:41:e8:c4:3f:95:a5:9d:b3:b2:ac:92:5f:40:8a:25:
20:7b:03:27:bf:8c:be:93:64:88:80:82:65:60:99:d4:a9:b1:
86:4a:18:2f:45:84:cf:2d:26:3d:7b:04:47:67:66:cd:c1:12:
32:d8:5e:96:83:d5:f9:58:9f:a1:2a:7e:7e:4b:f4:5b:98:52:
c6:5e:fd:9d:96:c5:a3:39:28:9b:36:8e:59:74:25:15:d3:b0:
df:bd:90:03:ab:bf:c8:f5:54:93:c5:47:e9:0b:29:a5:89:4b:
3a:39:cd:b7:64:7a:75:85:81:28:47:f1:4b:23:cd:b6:15:bc:
fe:f5:54:b2:81:b1:54:41:7b:c1:f2:aa:f3:e1:32:a2:82:44:
96:c3:3d:eb:6f:49:64:20:61:26:27:c2:40:c7:e7:1b:87:07:
4c:84:20:0e:a1:d3:f7:ee:a5:d8:b6:33:76:33:4b:f3:4b:17:
b5:5b:17:22:ba:7e:7c:d4:75:a0:41:a5:14:08:9d:00:2c:12:
f5:c4:03:f4:22:21:1f:03:23:89:47:23:4c:99:28:eb:5b:62:
ba:39:b4:4e:e6:6b:98:59:bc:30:7e:2f:cd:7e:91:22:6b:4f:
42:ba:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:42:11 2025 by rpki-client