Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: DAoUkQ7UqOGAlH9tpnXKEWdgJ8sbd9N9spJ7dMNTo7Y=
Subject key identifier: 16:93:18:2D:FA:9B:D9:E1:4C:1D:7E:4D:30:CD:4C:42:95:AA:2A:AD
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 0196BE9303B18B002DF547F1D0479B79997B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 0429
Signing time: Sun 11 May 2025 09:00:27 +0000
Manifest this update: Sun 11 May 2025 09:00:27 +0000
Manifest next update: Mon 12 May 2025 09:00:27 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: HnerPcMHcStekDBerQhuHy8RhP6gfCxq0b0zMn60TKo=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:03:b1:8b:00:2d:f5:47:f1:d0:47:9b:79:99:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: May 11 09:00:27 2025 GMT
Not After : May 12 09:00:27 2025 GMT
Subject: CN=1693182dfa9bd9e14c1d7e4d30cd4c4295aa2aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:92:13:49:4f:88:14:7c:65:9e:84:f9:72:
ec:b1:42:1a:39:98:88:a0:e3:4d:bc:81:4c:3a:d6:
92:54:2b:9b:b8:ce:b3:cd:81:c2:08:0e:91:c5:34:
61:5d:fa:21:9b:1c:86:a1:9d:de:32:9d:1b:8d:c5:
3a:9b:de:3c:01:74:80:af:9b:ce:d3:3c:e6:59:37:
80:cb:79:e6:f8:75:a7:db:ce:60:30:9c:ed:8a:21:
1b:89:fd:87:2c:9d:df:87:70:27:9c:84:82:78:39:
55:99:a3:3f:36:8a:2b:dc:4e:84:d2:12:2b:9a:9b:
79:d1:c6:32:ae:b6:99:e2:88:f5:b8:e2:df:4f:ad:
83:56:4c:4b:e1:06:22:56:93:60:f5:17:89:7c:d5:
e7:c8:4d:76:0d:bd:be:bf:a5:a2:a8:6d:e7:67:c6:
55:76:bb:48:ae:2b:15:fd:59:b6:ac:ba:00:73:18:
8c:6b:80:e5:c0:2c:91:99:cc:3a:d2:f5:41:2a:c0:
e5:50:09:a2:f6:99:a2:d6:db:fc:40:d2:54:43:82:
10:bf:13:33:f6:cc:21:be:75:b4:91:b5:dc:9a:53:
97:d0:87:c0:56:7b:ca:63:e4:28:f7:40:f1:8d:e6:
bb:1c:b1:9a:5a:c5:2d:3f:a3:c9:56:b2:6b:44:c3:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:93:18:2D:FA:9B:D9:E1:4C:1D:7E:4D:30:CD:4C:42:95:AA:2A:AD
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:12:ad:5a:48:e4:c5:f7:38:0a:89:31:50:18:7f:88:0e:f9:
21:a7:32:18:b2:b7:42:9c:98:6f:c3:f8:df:b1:85:8a:d6:c3:
8f:3c:92:b3:ec:21:72:82:a9:f3:66:3e:c0:21:2c:9e:36:a6:
57:d9:f5:5f:1f:0c:12:da:e5:cb:29:18:68:98:ee:76:37:b5:
99:da:bf:ed:9b:39:c6:bb:1d:b9:18:ba:85:2c:dd:ec:67:69:
dc:35:c4:d4:6d:ad:da:e3:d7:f9:71:4d:da:76:71:7e:2b:e9:
3d:ff:3b:49:79:67:fc:56:5e:f1:aa:e2:14:b2:e9:d6:d7:ea:
28:95:8c:ee:ef:c0:ce:c0:ac:92:db:85:04:72:4f:d3:f2:58:
3c:c9:35:e5:2c:4f:0b:ca:e4:08:ea:a9:83:bc:08:73:fd:ee:
cb:c2:07:80:21:b7:e0:81:ca:16:e7:28:44:c8:e9:6e:81:1b:
07:54:8c:ac:35:ca:0d:56:0c:bc:86:66:c9:19:4a:5a:1b:2f:
dc:26:92:1e:7f:48:53:3e:58:04:6b:49:6d:06:9e:c0:3f:5b:
9d:93:32:40:b9:20:52:83:a8:c1:de:b3:b1:42:ba:66:9c:73:
ec:ab:43:31:87:87:92:32:f6:d5:22:68:02:f5:f6:79:f2:a0:
4d:cb:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:30:10 2025 by rpki-client