Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: +ydzXXUNUDso8zA2DVTVygGpf9IA1Dnk/JA2SmxXVuU=
Subject key identifier: DC:6A:B4:58:31:67:A4:78:56:30:D8:B0:4D:0D:49:4C:40:50:73:69
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 01969ED0FCC6B42BBC706292C7FAA401BE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 07B7
Signing time: Mon 05 May 2025 05:00:18 +0000
Manifest this update: Mon 05 May 2025 05:00:18 +0000
Manifest next update: Tue 06 May 2025 05:00:18 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: tKNH45WMgWji+8t60qRnU9VeRO12OsB8nnTpG5sMATA=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:fc:c6:b4:2b:bc:70:62:92:c7:fa:a4:01:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: May 5 05:00:18 2025 GMT
Not After : May 6 05:00:18 2025 GMT
Subject: CN=dc6ab4583167a4785630d8b04d0d494c40507369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:0d:bd:42:4a:c8:11:de:49:33:02:8f:e0:
e3:73:61:84:87:0e:1f:0e:e2:23:10:4b:7d:ed:27:
ac:0f:4d:57:1e:55:bb:6b:fa:9a:8f:8d:91:e4:50:
aa:87:60:77:dd:70:c9:30:a0:ad:17:48:18:fc:a2:
d7:0a:ed:25:7c:f4:74:64:6e:e7:de:b7:81:a9:11:
da:0f:90:53:8d:a1:bd:36:39:72:ae:31:e7:75:62:
c7:a3:51:fa:00:2f:cb:48:5a:5c:41:96:20:37:9c:
32:d9:f5:bd:f9:64:87:5d:a2:c0:83:a6:cb:2e:6d:
66:71:38:40:ab:ac:2d:30:b1:1a:f4:b5:a5:75:68:
a1:cb:a1:11:59:10:7a:44:1b:0c:ce:17:15:b3:4e:
65:c5:0e:a5:ab:8c:e7:4b:53:5a:d8:42:75:ee:b2:
bc:4e:3d:7f:08:5a:bb:3b:26:28:28:80:d5:c3:69:
54:ff:15:fd:2e:2a:ab:f9:0c:62:54:79:f9:9b:dc:
c2:c8:7c:80:a0:db:67:9a:18:ef:77:66:4b:a2:77:
10:6a:f0:03:0d:3a:4f:16:ab:bc:d4:aa:bb:38:c2:
7a:15:ea:db:f6:43:37:14:88:81:aa:cb:af:9e:e1:
1c:43:2c:3c:75:11:c8:c6:f8:2b:91:e8:75:92:0d:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:B4:58:31:67:A4:78:56:30:D8:B0:4D:0D:49:4C:40:50:73:69
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:12:84:3e:ee:c9:88:56:a7:36:62:0b:0d:23:cd:1c:c3:5f:
46:58:80:ea:b4:0c:01:96:ef:f8:b9:62:59:59:30:d3:4a:83:
a6:74:e4:4f:40:07:7c:4b:cc:d2:95:d1:c6:18:7c:b3:7e:ac:
43:3b:9a:52:e7:5f:09:24:b6:63:16:b6:9a:10:b2:d6:46:64:
98:8d:6a:59:cb:08:24:b5:58:5e:1d:b0:94:31:50:3a:c7:16:
17:41:cc:10:c7:c0:18:f2:6d:42:71:af:57:4b:05:b8:7d:4d:
c6:aa:0a:6b:2e:d8:9a:b7:ac:b7:0a:02:aa:31:bc:4b:6b:7c:
ba:66:a5:e2:e1:13:52:ce:ac:ed:89:a4:9e:1f:74:ac:d3:64:
5a:a1:32:5e:81:1f:4a:19:83:15:c9:ad:db:1d:79:d9:96:1c:
5c:68:83:5d:dd:29:98:68:a6:b5:dc:fc:ed:1d:88:3e:ff:a2:
2b:c8:5a:fe:83:de:77:31:57:64:53:7f:39:b9:3b:63:89:04:
d9:0d:95:a8:84:28:7e:36:80:b9:d7:19:bf:29:d1:5c:54:60:
e5:7b:19:f1:5e:01:59:71:fb:7a:09:98:04:7f:f9:17:c3:9c:
4b:2a:ce:ab:c5:fb:7c:ee:35:4d:62:54:c6:cc:c2:c7:10:d6:
8a:ef:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:33:04 2025 by rpki-client