Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: n0rY5PBUYjKaoxqsEi3t2HSAXCxdzD2gvqmjz+s2nDM=
Subject key identifier: BA:1F:FF:AD:22:50:8E:05:EE:F6:3B:99:30:D7:43:BF:57:A6:6D:9F
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 0196C427169B0A7D2B2DF99478B512B54761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0AE9
Signing time: Mon 12 May 2025 11:00:17 +0000
Manifest this update: Mon 12 May 2025 11:00:17 +0000
Manifest next update: Tue 13 May 2025 11:00:17 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: 7KWm8OIU2rargq6gYiZV01xA9Ioj17CzPYe1m83abik=)
2: 8bvtISuekSRpBrLsSpaV6rAQww8.roa (hash: aP0bCcp5CUzuOtRFBu3Cv7XlqsZIi2ySA9u8hp6h1oU=)
3: HbFrbBDigmkbyhupjsQvR2G2rcg.roa (hash: DeaPvaz1CarpC6mp6iOUrw4n3hX9gcQTUiHE5Oraa94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:16:9b:0a:7d:2b:2d:f9:94:78:b5:12:b5:47:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: May 12 11:00:17 2025 GMT
Not After : May 13 11:00:17 2025 GMT
Subject: CN=ba1fffad22508e05eef63b9930d743bf57a66d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:5a:fb:16:83:38:62:59:dc:dc:49:16:81:
df:7e:f7:ed:a6:67:e9:e3:18:2c:25:8e:00:c5:df:
a7:f3:5d:65:37:04:59:a0:9b:95:0a:c7:9c:89:da:
05:3b:94:17:b7:48:c2:bf:20:a4:9c:88:5f:b3:17:
a1:2f:52:bb:28:f9:65:d7:91:88:9a:2e:d5:29:6d:
9a:f1:59:3a:40:47:a6:05:d2:52:71:77:13:81:79:
7b:d9:a0:96:e7:e4:d4:04:e1:a7:21:be:24:23:6a:
16:26:68:ea:13:d4:7e:5e:9f:13:ea:d0:ba:f7:b2:
ad:c1:ac:2d:cd:47:a1:a5:37:71:6c:e4:96:2f:10:
69:84:a1:24:76:e1:5b:3f:d8:24:26:f1:43:6e:c2:
d9:a9:a4:ea:77:c6:84:e6:f3:4a:c6:79:7f:0c:74:
79:e0:00:70:87:38:7a:1a:2d:39:48:b9:e5:f5:e6:
f6:67:25:25:06:30:59:59:9d:bf:81:50:15:b3:b0:
20:eb:37:db:ad:59:d0:64:d4:de:ef:0f:13:01:c6:
cb:99:e0:62:87:8d:9c:91:c9:02:31:30:74:53:21:
11:3e:80:75:cf:b6:a1:e2:e2:48:c0:0c:83:15:a6:
7e:80:2f:e0:1e:40:96:6e:57:e9:be:ac:5d:eb:c9:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1F:FF:AD:22:50:8E:05:EE:F6:3B:99:30:D7:43:BF:57:A6:6D:9F
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d6:b9:48:23:bc:6e:89:2f:6c:b9:57:be:eb:6b:1e:f6:5b:
aa:17:cb:2d:ba:5b:dd:bb:dc:90:5b:f2:7d:6d:87:56:fb:74:
dc:1b:9f:1f:aa:fb:3a:16:fb:02:77:93:65:3b:5c:eb:f1:8a:
6d:6f:33:f9:79:bc:14:90:8f:0b:c5:30:dd:db:87:d5:bb:20:
2c:a8:95:cc:3c:3c:52:72:9e:2f:1e:6b:32:c9:be:d1:de:ff:
a7:52:30:64:25:fa:b5:de:6f:26:e8:5a:da:6a:c7:9b:f0:1c:
8d:61:10:b2:73:14:db:31:0a:13:30:51:6d:2f:8e:4a:8d:77:
3f:07:c0:32:03:74:be:38:34:2a:5f:be:6c:16:54:a2:fd:fe:
87:13:5b:15:bd:c7:f2:1a:45:36:03:aa:88:27:6e:0a:37:a2:
d2:70:11:8c:41:3f:56:cd:10:46:d8:a8:dc:2b:ff:a8:1a:d3:
54:af:c2:44:c8:4f:04:00:de:4c:2e:5a:86:bf:b8:a4:41:55:
33:37:f4:f3:c3:ae:87:28:71:ca:38:dc:60:74:f8:f4:31:98:
33:d1:34:cb:f4:6f:78:2e:39:f2:7b:87:29:41:d0:39:a0:da:
a2:5a:d4:10:68:c0:57:da:86:ba:98:bd:9f:63:09:b7:73:20:
f2:f2:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:58:08 2025 by rpki-client