Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: BfiSjm4p4nGLkdqivqRI0ZWPdsJAWRy5fLxm+/PjwHs=
Subject key identifier: C5:EB:B2:86:98:66:C2:08:8A:66:51:71:72:B8:8B:EF:2F:F3:DA:A3
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 01969E9AD2369759E65F0BB5589B6EA8CDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 04:01:08 +0000
Manifest this update: Mon 05 May 2025 04:01:08 +0000
Manifest next update: Tue 06 May 2025 04:01:08 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: iac5NPRBVvsulRBsKBbrMo9TkcKujT/rEqXU0CVWp7c=)
2: _lgnGISO0ktGS-TS3jHHuxqlGcc.roa (hash: 2bgXxxG8FQEtolmgRr2kuRhZKybBJ/pEC6iODZDta6M=)
3: yIVyJLl1EpKKS9GoVS2g6EtcfKo.roa (hash: +BexIZ1+iniEPsBZlKynSCHhy877ZiICabmi/L0fbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:d2:36:97:59:e6:5f:0b:b5:58:9b:6e:a8:cd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: May 5 04:01:08 2025 GMT
Not After : May 6 04:01:08 2025 GMT
Subject: CN=c5ebb2869866c2088a66517172b88bef2ff3daa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:d7:6d:b0:c6:ed:80:92:83:c0:a9:4c:88:
df:b4:83:d6:63:77:f2:ba:fc:8f:99:80:a0:50:55:
54:27:64:45:05:a2:a0:ac:e9:01:7c:75:11:1d:3a:
61:77:57:8e:95:34:22:6f:c2:57:c9:7e:cd:5c:04:
e7:58:26:03:f8:29:7b:d6:82:ed:b4:ce:8d:f3:76:
4c:28:85:28:15:cf:9a:b7:a6:85:e3:62:74:b1:b2:
35:7a:ee:79:cf:95:bd:96:0a:83:12:9d:ca:b3:66:
5f:fe:f5:b1:21:52:6f:f3:05:13:98:19:1a:58:26:
a3:6d:4d:67:50:38:1a:f2:c5:7d:c5:08:1d:61:78:
9b:5c:a9:cd:fd:96:fc:56:21:33:f2:9d:35:83:70:
b5:c0:5a:2b:cb:59:5d:8e:a4:eb:af:78:42:2d:44:
c9:41:36:49:74:65:56:d7:6e:b7:41:a2:e0:c5:13:
ec:3b:d1:4b:9f:40:67:b7:57:8b:43:94:19:90:fb:
0e:17:b9:e4:a3:64:ef:f3:88:49:95:f9:d3:db:11:
61:6c:33:2c:63:24:f3:a9:30:99:e5:27:47:c1:5a:
e4:c1:d2:5f:72:5e:db:2e:69:d4:46:40:d8:a9:4d:
4d:f6:36:68:06:94:b5:fb:69:20:09:34:15:4b:55:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:B2:86:98:66:C2:08:8A:66:51:71:72:B8:8B:EF:2F:F3:DA:A3
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:69:84:af:34:7d:d9:66:79:98:e8:72:01:7f:2e:a2:a6:d1:
0f:3d:c6:a4:2d:3a:6c:60:19:ca:82:f6:ab:4f:2d:ec:31:f6:
3d:e5:01:59:80:d8:bc:c1:24:be:72:0c:d4:28:85:3d:94:ce:
87:3a:a8:28:83:24:17:5b:73:bb:1e:00:3e:a4:3c:3b:0d:dc:
cb:7f:26:f5:df:31:a7:ad:82:f5:03:85:6f:8d:a7:23:12:cb:
ef:7f:08:2c:cc:fb:61:f8:40:80:c2:b6:71:e6:5c:9b:71:69:
d0:06:ef:70:5d:c7:0b:f7:41:66:bc:7a:ae:2c:f9:53:fd:2f:
f2:c0:1f:64:d9:78:74:0a:2a:ca:c2:9b:c2:f7:99:81:e2:5d:
e3:dd:aa:81:2e:e8:9a:95:81:3b:29:d8:32:2a:e1:c9:07:52:
bc:60:dd:d3:6c:92:2f:65:6e:05:14:0f:20:9e:ea:47:73:9e:
10:fa:ca:fc:92:c9:03:12:63:95:63:7d:ca:d5:cc:3b:5c:44:
84:2e:de:83:1d:bd:e6:45:25:ac:5c:a3:44:6f:c4:58:82:be:
fd:fb:c1:7c:57:05:4e:60:8c:de:5a:49:2a:67:29:38:ac:ae:
a4:3a:bc:31:11:4c:c8:c5:47:12:18:ea:d2:5f:7f:43:78:e2:
a2:e3:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:57:49 2025 by rpki-client