Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File: TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier: SdvWpBH+x9w5MaEYW1FnH4QqOcjVTnoVeF3JTxiYg7g=
Subject key identifier: 6B:9C:AF:DA:95:E5:B2:87:D1:96:1E:F5:CD:A4:77:73:59:4A:21:1B
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer: /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial: 0196BC6DDE9B48B46041BD5D2DA59C5F6D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number: 127E
Signing time: Sat 10 May 2025 23:00:39 +0000
Manifest this update: Sat 10 May 2025 23:00:39 +0000
Manifest next update: Sun 11 May 2025 23:00:39 +0000
Files and hashes: 1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: BYbyDBGzCSodEfS0KbONGxllZ2X5x1B0uObm4TvJmLw=)
2: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (hash: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:de:9b:48:b4:60:41:bd:5d:2d:a5:9c:5f:6d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Validity
Not Before: May 10 23:00:39 2025 GMT
Not After : May 11 23:00:39 2025 GMT
Subject: CN=6b9cafda95e5b287d1961ef5cda47773594a211b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:87:0b:56:7e:69:80:c3:cd:2c:dc:75:72:
8e:ec:2f:95:99:f6:d5:c0:b1:39:fc:75:45:73:92:
69:48:8d:54:3c:9a:5e:5f:98:06:85:6b:a0:5b:3d:
0d:ad:72:5d:de:48:fe:09:1c:5a:58:21:d5:3e:3d:
d6:ef:c6:ff:70:28:12:d5:29:19:cf:d8:4d:9d:92:
9a:e6:28:ba:c3:35:45:90:98:d7:0a:26:7d:a7:99:
5c:e6:d5:86:b0:6d:05:c2:69:f0:44:30:7f:9f:81:
4b:40:7a:73:a2:d2:c3:14:47:bd:7f:c7:0c:0e:57:
dc:f7:44:ea:0b:2b:34:eb:50:0f:79:37:d1:c3:65:
d7:7f:b3:0e:75:26:05:6c:24:47:46:54:c1:70:45:
e6:2e:dc:ef:02:d0:0b:c9:04:77:5c:a8:f3:93:25:
2e:b4:37:3b:6e:80:95:6a:ff:62:9e:94:e4:da:8a:
42:98:f9:2c:71:5c:0b:92:b6:b6:63:00:ae:6e:ff:
0b:c4:94:2a:5f:70:5a:8c:55:24:d5:ec:17:42:10:
e5:aa:05:51:dc:a2:97:d4:2d:80:9c:47:50:8b:34:
6e:37:18:bc:c8:c3:67:de:7a:82:82:5d:65:57:0a:
05:12:30:28:a0:d9:c1:94:e6:a8:f7:72:63:f9:c5:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9C:AF:DA:95:E5:B2:87:D1:96:1E:F5:CD:A4:77:73:59:4A:21:1B
X509v3 Authority Key Identifier:
keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bf:13:81:2e:c6:48:6d:f8:0c:78:26:be:06:2c:8f:0a:2a:
37:59:c5:87:00:07:8b:e8:70:a6:d1:97:c7:07:90:ab:ef:65:
b7:00:e1:73:00:1b:99:16:52:fc:0c:69:76:e6:0c:f2:20:b3:
f4:01:f6:40:96:1d:47:ee:53:0c:fd:c3:cf:91:24:68:ee:59:
b8:7b:00:d1:ae:40:e2:26:6d:64:c5:9e:43:14:34:0e:87:d5:
81:c9:09:1b:29:2b:42:ff:7c:16:ef:8f:bd:1d:06:47:8a:a3:
0d:ba:e4:ba:0c:c5:9f:0a:f8:50:70:a7:1b:ed:bd:fa:37:56:
d9:23:a3:73:e2:86:99:a6:ce:97:6d:38:34:dd:81:e4:56:5c:
da:25:0c:57:aa:c3:22:a9:38:f3:c6:ca:43:48:f8:38:03:3a:
59:a8:8d:af:92:05:e2:19:20:e2:0f:b7:18:97:83:e1:f4:f7:
03:53:a5:13:07:32:bb:7e:b6:40:15:20:d2:e9:11:0b:e2:61:
fd:fe:84:22:ae:cc:42:98:0e:04:52:66:ab:3b:29:ba:af:c8:
ed:3f:fb:47:0a:32:79:12:f4:e7:43:9e:00:f6:db:5a:b2:77:
b8:cb:84:ba:7d:ae:c7:9f:5d:da:cf:d2:6a:ea:03:a6:04:a2:
f1:ca:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:43:28 2025 by rpki-client