Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
File: _Jvk7U5UtgHmtqQtC6BM-3qyw78.mft (raw, json)
Hash identifier: NBKi1wuSM2FnW2ExO0ZddfRN/97QEIirNkdtIPBSvQc=
Subject key identifier: 73:31:59:9F:47:D7:C9:49:E1:3F:D5:85:99:D3:DA:B5:52:1C:2B:66
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 0196BC6E6DC14EB48FD9923B12AF8863B727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 23:01:15 +0000
Manifest this update: Sat 10 May 2025 23:01:15 +0000
Manifest next update: Sun 11 May 2025 23:01:15 +0000
Files and hashes: 1: UT4NXn4ZcTkJwvgQgl9dQtMGQHY.roa (hash: nylFSQWGan1W87gYguk9ri6Ziw1VxhwDfj3K/sUzuCM=)
2: YrzvUNT5M4hj46aUuOCmh4XVM5A.roa (hash: rUaB6yYaD6EfXVc/GJmri33jh5n71ZBoGI/gA7B8G6I=)
3: _Jvk7U5UtgHmtqQtC6BM-3qyw78.crl (hash: IaPVd2VS8YYwothSv+T85bTj31c0bhqXzaGuNpQ9zt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:6d:c1:4e:b4:8f:d9:92:3b:12:af:88:63:b7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: May 10 23:01:15 2025 GMT
Not After : May 11 23:01:15 2025 GMT
Subject: CN=7331599f47d7c949e13fd58599d3dab5521c2b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:63:67:89:cb:b1:1d:2a:54:c9:ba:90:fc:
70:78:e5:bb:e6:48:b0:e6:59:33:df:a0:31:74:cb:
bb:c6:be:37:93:9f:c1:64:9f:dc:d5:72:84:2b:97:
65:1c:38:df:69:ef:76:57:5c:68:77:52:a8:f1:16:
67:f6:73:bb:e3:c5:77:c1:e8:5c:1e:87:7a:45:de:
1e:73:e3:41:47:db:a9:6c:8a:7d:70:73:09:90:e6:
9a:f1:07:b5:2d:46:cc:e1:43:06:7f:31:5d:19:7c:
68:53:c5:0a:a5:93:d9:24:46:4e:eb:ea:9d:3a:99:
f9:cf:96:f9:f7:96:99:e4:e1:f0:36:1d:84:95:73:
5a:b4:a2:42:76:bb:9b:23:43:80:03:b3:69:c6:a2:
91:6b:6d:89:b5:f3:0d:a3:9d:ac:86:ab:7a:74:fb:
e8:2d:ca:0d:0a:75:9a:18:cd:a4:53:29:81:e8:af:
53:e7:14:b4:ab:3f:a7:b6:58:cf:2f:b0:7e:7d:95:
23:86:07:aa:16:b2:de:bd:95:db:71:ca:aa:9b:fa:
6b:76:83:79:70:46:00:dd:d8:09:d0:1e:28:2d:c4:
71:d9:43:33:70:8c:d3:b4:c8:a6:e4:5a:92:47:aa:
44:0f:cb:05:60:57:1f:09:37:4f:88:33:2d:cb:2d:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:59:9F:47:D7:C9:49:E1:3F:D5:85:99:D3:DA:B5:52:1C:2B:66
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:13:48:10:98:a8:c6:ab:a7:60:e0:6f:54:4c:f0:70:74:28:
45:26:0c:9f:5a:b9:76:a2:8d:f6:e7:03:1e:7f:5a:ff:ee:a6:
21:0c:08:8f:e2:b9:a2:07:2d:e6:a3:04:9b:5e:8e:d5:85:a9:
d9:bc:25:b6:3d:5f:08:aa:0a:9f:0c:87:11:80:fb:76:24:95:
2f:a2:e4:a4:e8:51:d2:ec:84:48:0e:10:e7:3a:6b:e1:ec:b4:
e7:ad:37:98:bc:11:9e:9f:de:a7:62:25:d8:63:6d:93:e7:0d:
5f:c2:a6:93:26:9c:7b:d1:4a:a6:a7:5a:a1:49:e5:4f:d2:54:
c1:92:f5:16:d2:ee:8d:fd:7c:a9:6f:34:24:3f:90:4a:2a:75:
07:ec:38:b0:44:1f:c5:12:e2:40:c4:2d:b9:40:2a:7c:8a:15:
d4:8e:48:d5:e8:ff:ca:b7:ab:b4:a4:43:00:14:bf:de:ca:da:
d5:f8:84:3b:32:77:dc:b7:59:96:2a:0d:53:18:02:2b:61:77:
6f:59:6d:f4:67:3f:f4:b8:ef:95:49:70:5b:f6:19:67:2b:7f:
9b:26:38:e1:61:0c:7f:37:07:04:3d:10:8f:81:da:cc:c5:7d:
1f:37:c2:ac:21:5a:28:57:ec:ff:5c:8f:e0:ae:5a:32:86:d2:
3b:b9:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:29:32 2025 by rpki-client