Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier: rY3zOKXlhGTc+gi6keGAQmtb1FN8Lk8HZHeiHNj4Ou0=
Subject key identifier: 29:FC:DF:38:8C:7C:ED:0E:59:A5:D8:8B:57:0A:CD:C5:48:BE:36:38
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial: 0196D588B38465909042263E61CEDBED8DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number: 153D
Signing time: Thu 15 May 2025 20:00:27 +0000
Manifest this update: Thu 15 May 2025 20:00:27 +0000
Manifest next update: Fri 16 May 2025 20:00:27 +0000
Files and hashes: 1: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (hash: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=)
2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: X0+dFtAPg02JMeGkwAvJeNIHZ3gpGSm7JOK1mJkl2Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:88:b3:84:65:90:90:42:26:3e:61:ce:db:ed:8d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Validity
Not Before: May 15 20:00:27 2025 GMT
Not After : May 16 20:00:27 2025 GMT
Subject: CN=29fcdf388c7ced0e59a5d88b570acdc548be3638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:80:d2:65:bd:a0:12:56:bf:64:03:dd:ef:
ec:2b:ef:73:55:ba:18:f1:2b:ab:e7:c7:8a:a9:5a:
14:4b:65:4d:10:34:9c:a0:0b:3b:7d:5d:d1:d8:99:
21:3c:e5:a1:1d:37:56:cb:26:bc:e6:95:7c:78:b0:
de:eb:63:ad:2f:5e:aa:1a:99:a4:a3:82:7f:84:4b:
12:77:cf:b3:19:0a:4b:82:e6:95:7e:49:ae:cd:a7:
10:a6:d8:ac:9d:37:d3:8d:c4:f1:86:74:01:c5:3c:
43:34:d8:43:34:f2:0d:f5:ed:ee:eb:26:73:95:d3:
6c:5d:b2:0e:c3:49:d7:8e:e4:c9:fe:5c:dd:1c:0d:
9e:98:1e:98:fd:56:87:ae:f2:62:c2:9b:90:10:b8:
48:99:29:04:56:29:03:9b:e6:90:3b:42:e9:36:bb:
ba:f2:3d:de:1e:b9:8a:82:3f:c7:a4:7f:6a:27:aa:
c3:df:c8:9b:21:fe:58:b3:07:fa:ed:a0:9b:1e:f3:
0f:87:7e:02:95:f4:1a:0a:33:5b:a5:f4:a9:83:45:
53:1b:d3:e1:60:88:82:6b:ba:3a:26:67:e9:82:ea:
f5:62:4e:2c:2a:71:85:c6:52:29:9c:d6:5c:27:29:
96:75:cb:81:8b:f6:ab:1f:e1:0a:bd:23:0d:5d:a7:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FC:DF:38:8C:7C:ED:0E:59:A5:D8:8B:57:0A:CD:C5:48:BE:36:38
X509v3 Authority Key Identifier:
keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:22:af:0e:87:92:43:f2:38:90:15:8d:da:dc:f8:fe:98:e6:
0b:40:59:71:98:d8:09:73:4a:86:18:43:55:c8:47:03:9c:d9:
b7:fb:24:ef:77:36:8d:c2:9d:31:d5:70:77:00:c3:fe:7a:75:
7c:2e:6c:9a:1a:80:3b:64:10:46:9f:cb:23:20:26:91:0e:62:
ba:88:0f:86:8c:a5:25:bb:27:d9:b1:85:cb:4c:92:9b:db:24:
7d:22:48:61:82:f2:33:e2:df:e9:ab:f7:cf:8b:90:5b:cb:71:
2e:17:5a:4b:17:6f:a8:4d:0f:62:ba:bd:d6:f5:e2:f5:33:f9:
d1:9c:11:f1:9b:fe:b1:79:ad:99:8b:3f:ce:7e:22:b3:1c:26:
70:ae:ba:71:52:53:13:2a:4e:44:2d:f8:41:36:8e:0a:63:75:
32:62:3b:13:f5:02:fa:45:c2:43:66:5f:05:15:34:ca:2c:85:
6e:27:cd:a7:f7:a1:70:20:b6:f1:85:29:74:08:e2:e6:cf:23:
45:cb:48:a6:cf:8f:de:68:c4:3f:a7:37:91:5f:96:1c:5b:b0:
89:67:d1:06:bf:44:8e:4b:64:e0:64:bf:23:c3:b1:2f:e6:5b:
0e:e1:67:e5:b9:a9:29:bd:16:d0:2d:4a:d7:df:9b:af:0c:ab:
bf:1d:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:28:01 2025 by rpki-client