Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: NhbM6w9bqZePxqx8bOH7q3eza6SZFYIgRB/ZbrWo+n8=
Subject key identifier: F5:4B:5D:8E:F2:D5:D6:74:FC:9F:8D:D5:D5:2C:64:2F:FF:40:58:1F
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 0196B8C83040661BC504A90718717611E477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 07B4
Signing time: Sat 10 May 2025 06:00:49 +0000
Manifest this update: Sat 10 May 2025 06:00:49 +0000
Manifest next update: Sun 11 May 2025 06:00:49 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: FalVJXH2CAon5qE7tn1JdpPl8YO4Uzd1Q3LZUKyRDNo=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c8:30:40:66:1b:c5:04:a9:07:18:71:76:11:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: May 10 06:00:49 2025 GMT
Not After : May 11 06:00:49 2025 GMT
Subject: CN=f54b5d8ef2d5d674fc9f8dd5d52c642fff40581f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:20:51:24:24:28:2c:7e:44:d2:87:5c:80:
be:ce:24:64:64:b9:a6:f5:db:1c:28:f6:ec:a3:d5:
01:35:3c:f7:bd:f7:b9:c7:92:bf:3e:e3:b9:8c:ec:
f3:4a:1c:97:af:e0:58:de:64:e0:c4:f2:13:f7:97:
32:46:f6:90:7f:b9:bc:da:74:79:b4:48:51:2a:de:
37:db:54:78:a9:f2:50:35:08:ff:9d:ed:d6:ef:ee:
c4:97:cf:62:c5:87:25:f4:a2:10:e7:87:73:7a:20:
6d:62:88:23:e8:bf:3e:ed:0a:d2:23:6c:39:ff:dc:
39:69:e2:93:f6:93:e0:71:57:af:4f:1c:c8:0e:9c:
8e:22:72:ff:c1:ca:84:ea:39:28:68:70:43:3b:80:
ed:e5:cc:aa:e9:1e:5b:d5:ff:73:9d:bd:7b:7e:45:
0d:ed:05:63:df:6d:13:7d:b0:de:57:41:50:07:b2:
58:11:0a:68:9a:f8:39:ca:1e:43:48:b7:0d:29:d5:
5e:06:08:1e:7e:37:10:a7:9e:39:01:2a:ed:2b:d1:
0e:83:52:b9:ec:fc:d9:ee:01:3e:f6:63:b1:a8:21:
f8:1d:ec:1f:5b:48:f1:46:ca:2e:47:64:62:14:48:
00:41:6c:4c:05:5d:44:1e:aa:24:0b:6a:67:dc:ed:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:5D:8E:F2:D5:D6:74:FC:9F:8D:D5:D5:2C:64:2F:FF:40:58:1F
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:54:cc:7f:c6:af:ed:d9:d5:7e:46:62:f4:29:05:4a:b9:04:
92:98:b8:6b:7e:c1:1f:41:21:82:55:34:72:78:51:93:27:70:
dd:e2:31:e0:30:37:60:84:b3:50:d5:d4:09:a1:26:69:dc:c2:
bf:d8:f2:20:f9:0f:3c:6b:64:74:7e:61:c5:b2:70:0a:d5:cc:
c1:0b:62:3d:77:c9:5d:d5:a3:07:25:1b:a6:c2:1e:7d:6a:6a:
fc:91:1b:01:8a:3f:51:dc:c7:41:d6:97:bd:7e:55:f8:78:c3:
c5:46:ad:be:40:71:68:5b:c5:31:b5:ef:3d:ed:94:c2:4f:a1:
1e:c4:8b:9e:a8:86:0b:91:fb:8c:e3:44:fb:68:74:49:9e:46:
2a:f9:a0:11:fc:f6:2c:d8:05:b2:52:73:72:fe:2d:c7:d6:53:
2c:14:08:f1:fe:94:69:b5:67:5d:a5:0c:c2:ed:aa:cb:79:8e:
ec:59:ed:36:2d:2e:57:c4:78:2e:21:b6:65:3b:26:f9:2f:93:
aa:a4:24:6d:f1:80:70:8e:63:aa:dd:c8:72:12:8a:df:65:20:
49:2e:64:0c:ea:19:d2:4c:93:6a:fa:36:89:94:b6:e5:92:76:
ba:a0:cd:f3:76:c9:8f:b1:fa:05:5d:af:49:bc:9a:07:40:d1:
34:8f:4a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:13:09 2025 by rpki-client