Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier: 2n42rP8xibZqmuUqY1vrwU6onWINKQRwkQiUIgBe3vA=
Subject key identifier: E3:B0:0A:B3:C9:39:4E:EF:FF:B6:48:6A:E0:71:A7:9C:5B:85:7F:3E
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial: 0196BC3733BEEF129F5108557C581A788C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number: 04F6
Signing time: Sat 10 May 2025 22:00:56 +0000
Manifest this update: Sat 10 May 2025 22:00:56 +0000
Manifest next update: Sun 11 May 2025 22:00:56 +0000
Files and hashes: 1: BkDrM4-atcp10Br--qbvg_yK1zg.roa (hash: OQTXLqdYWvwdj8zXSXiFu8x5dJlCSPxgy4/Qhi1Yohc=)
2: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: ahrw2grr+wmSwaNhfVY72Y0g/iXUVwlJAloFvrjCKkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:33:be:ef:12:9f:51:08:55:7c:58:1a:78:8c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Validity
Not Before: May 10 22:00:56 2025 GMT
Not After : May 11 22:00:56 2025 GMT
Subject: CN=e3b00ab3c9394eefffb6486ae071a79c5b857f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:51:b1:4d:32:b0:e7:d9:74:ed:bb:7e:ea:
c2:83:f0:5a:ac:ac:3d:98:81:7c:3b:f3:61:5a:5b:
13:58:8b:4c:56:a7:39:b0:d2:88:03:06:a0:da:9a:
45:e8:bd:b4:50:27:1f:46:b9:f6:4e:3a:fa:a0:e0:
37:86:70:42:95:3b:fb:92:a1:aa:2c:e1:97:b0:a7:
2c:6c:bf:3b:e1:85:45:af:7e:26:1c:b0:71:92:34:
b1:93:eb:e5:c4:ce:f8:89:03:53:c4:df:16:b9:78:
e4:ee:d5:37:db:3f:e7:72:33:9a:2d:56:a8:5c:39:
dc:f9:3a:f0:93:b6:60:7e:d7:3f:2d:cf:0b:6c:49:
b5:fc:3d:f6:0d:92:7b:a2:98:f1:98:26:91:86:7b:
83:a6:9a:c8:13:fd:c1:a3:d9:66:6c:86:bc:2f:7f:
c3:a7:3a:23:9b:0c:58:f8:03:f8:e8:c8:06:a6:69:
de:0c:24:c8:40:a4:fb:6b:01:71:be:67:8b:14:bf:
2d:42:82:36:ee:0c:48:84:51:8c:82:c3:1b:f0:77:
66:c0:ce:37:5a:4c:42:a9:9f:b7:a4:10:0a:fe:e5:
db:25:9c:54:70:35:fa:71:61:89:d3:a9:8a:d5:8d:
a7:73:84:92:ff:77:ca:4e:f2:09:d7:b1:67:0e:23:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B0:0A:B3:C9:39:4E:EF:FF:B6:48:6A:E0:71:A7:9C:5B:85:7F:3E
X509v3 Authority Key Identifier:
keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d1:7d:6c:b7:9d:94:40:16:fc:27:94:54:60:66:25:e5:4a:
d9:f7:7a:ca:d7:23:d8:cd:f0:7f:20:70:f5:4b:fd:5a:ce:be:
b6:90:19:72:0a:42:a6:4d:ab:5e:44:58:f5:59:cf:5f:fc:e7:
8a:96:b5:71:62:82:38:93:72:7a:ef:e9:1a:9c:ef:f0:00:c9:
77:62:af:f5:05:32:80:76:ac:a6:a7:25:83:1a:a6:64:98:56:
f9:c7:71:a1:f8:b1:df:6e:78:43:64:08:4c:41:af:72:f1:59:
62:d3:49:c2:6a:33:c7:13:ca:69:16:fc:67:eb:ef:d5:ac:c1:
a0:a5:fb:89:0b:6f:87:fa:3f:db:15:08:a0:a7:68:98:ee:de:
8f:d9:50:c7:26:3b:c9:c8:23:77:d4:81:8b:d3:2d:93:57:56:
94:75:5d:53:8a:b4:fa:af:57:f9:96:29:37:fe:90:f8:6d:16:
a0:64:61:d7:74:fb:4c:e0:0a:1d:e9:f9:91:60:d9:8a:2f:19:
1f:8b:0f:a7:05:4e:7c:bc:6c:21:ca:43:4e:41:3b:0b:70:d8:
72:e8:1d:6a:8a:b4:7e:7b:c9:b2:74:12:73:2d:ba:bc:47:45:
f9:da:4f:90:6a:90:94:33:fd:e1:28:65:37:e1:1f:95:0d:de:
61:64:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:41:03 2025 by rpki-client