Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: 2JKbzfe5BgYuC5RJ1CqCEXsUFOUpFZPPw2rQiXZNKs0=
Subject key identifier: 36:F5:A8:9F:05:B4:88:B5:57:67:44:34:48:F3:92:D7:77:5E:AA:5E
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 0196C1CB3062F8065188947A430588D778AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 10A6
Signing time: Mon 12 May 2025 00:00:40 +0000
Manifest this update: Mon 12 May 2025 00:00:40 +0000
Manifest next update: Tue 13 May 2025 00:00:40 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: 1kin9R1pwnqgkMvtGBEp2ZAZ+y7EWN6sIFFIoOnM/oM=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:30:62:f8:06:51:88:94:7a:43:05:88:d7:78:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: May 12 00:00:40 2025 GMT
Not After : May 13 00:00:40 2025 GMT
Subject: CN=36f5a89f05b488b55767443448f392d7775eaa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:71:ef:2f:d9:8b:81:8c:74:fb:a8:5e:15:
47:58:02:3d:68:8c:a5:25:af:81:a1:41:d3:ef:93:
53:21:44:96:3e:a9:9e:93:43:26:9e:8a:3a:7b:5f:
4c:49:2f:f7:5f:7d:cd:0c:cd:90:4a:14:af:17:76:
82:6d:78:2c:e7:f2:bf:35:45:1b:57:c3:ba:a7:4a:
4e:95:48:9e:01:e9:be:e5:f1:f6:7f:7d:96:0f:3a:
1d:22:a9:0f:0a:9f:28:17:be:f0:ba:5a:dc:5d:bc:
06:08:db:60:5c:8e:42:0c:aa:43:06:3b:05:a2:3f:
88:23:02:bd:6f:ab:53:ab:50:83:79:29:24:a7:78:
ee:fd:12:d4:62:36:e7:32:15:bc:fc:23:d7:c6:e1:
a0:d1:47:20:e0:3e:bc:dd:a6:6d:14:d4:bb:39:71:
cb:46:1b:3e:15:71:6a:6f:6d:e1:79:d1:9d:de:8c:
49:b5:81:ea:2f:32:e1:16:75:fb:3f:51:d8:c4:15:
de:9a:0b:33:23:09:a0:1e:4b:89:57:9a:36:e5:31:
9b:c6:6e:fb:ff:3c:9f:e4:f4:2b:34:f2:cc:88:1a:
38:4d:3c:d6:70:1e:e2:f2:df:6d:23:1e:33:66:07:
91:74:44:a6:80:15:2e:22:71:c0:62:03:3d:87:39:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:A8:9F:05:B4:88:B5:57:67:44:34:48:F3:92:D7:77:5E:AA:5E
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:33:5e:9c:6f:49:d0:4a:af:1c:77:51:9c:56:c9:9b:de:04:
e8:6e:c7:50:e6:44:26:04:ec:3d:a9:20:07:a3:30:89:1b:13:
09:7c:35:b6:de:09:03:5c:10:22:5d:50:94:1d:ba:7c:aa:a1:
fa:48:90:b9:6c:da:1b:fc:01:e7:d4:34:99:ae:ed:e9:ba:4e:
c5:e3:78:01:33:b7:f8:07:71:04:30:b9:ab:87:ec:08:22:af:
b2:9c:b6:3d:5a:1e:80:f9:c6:58:4d:90:d0:97:8f:b2:58:29:
0b:0a:a8:11:75:88:0f:0d:aa:98:f2:4b:5e:87:d3:8b:dc:b5:
c8:fd:a9:57:5a:f6:02:d9:e2:88:03:ac:18:5e:15:3a:06:2e:
18:e6:1a:65:97:b5:52:87:aa:99:bd:90:fb:cc:a6:ff:af:70:
c1:e2:ea:81:90:4c:c2:aa:b8:a7:57:a9:13:ea:76:e2:7f:ce:
95:74:3b:a1:69:d3:38:05:e4:bb:68:22:4a:11:04:6e:29:bc:
2d:b8:f8:cd:1a:e5:3a:26:9c:ac:0d:e3:f4:5f:c6:9a:ce:bf:
2f:62:34:f6:83:a7:95:81:62:44:7c:05:f3:4f:5e:25:96:6c:
4a:a5:23:1d:a8:13:20:83:41:58:54:a7:a4:7e:f2:b9:c0:e6:
02:e8:0e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:23 2025 by rpki-client