Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: xH9DPxONY/JvGfv+UKe+kagkSeG0G1CARYC4/FCRHMo=
Subject key identifier: 87:FD:01:29:A2:96:D9:3D:FF:67:FE:EB:61:BD:2F:FE:02:C2:39:31
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 0196C4CC0D672D78CBB81B16CFABBD76AC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 1134
Signing time: Mon 12 May 2025 14:00:29 +0000
Manifest this update: Mon 12 May 2025 14:00:29 +0000
Manifest next update: Tue 13 May 2025 14:00:29 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: oy8KRFfLh8avL+TNLKuO9DkoRjUtqfyKn0Gn312/fqA=)
2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:0d:67:2d:78:cb:b8:1b:16:cf:ab:bd:76:ac:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: May 12 14:00:29 2025 GMT
Not After : May 13 14:00:29 2025 GMT
Subject: CN=87fd0129a296d93dff67feeb61bd2ffe02c23931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:55:a3:97:56:e4:89:2f:4e:58:4a:34:ee:
b3:77:0a:95:0c:a6:9a:b7:d0:8d:43:15:1a:dc:a7:
39:f4:a3:97:6e:6f:94:93:67:f6:ff:cc:6a:56:a6:
27:7e:db:1d:96:e9:9b:1a:e7:ce:82:c6:2d:63:0d:
35:1a:a8:72:fc:b4:a3:ae:04:53:38:20:9f:1a:5a:
cf:c9:2b:5d:26:3d:ea:c8:6e:bf:f8:8a:9c:6c:7f:
4d:ba:3e:98:0f:71:e3:d0:47:2f:00:6d:b3:70:fa:
7b:57:00:03:c5:0f:63:da:a6:d9:26:2a:94:c7:bc:
6c:f5:58:d3:90:10:f8:73:e3:42:cd:5d:58:18:1c:
7a:10:fe:d3:02:69:32:88:8a:59:4a:00:3b:a8:c3:
1c:08:52:44:4c:9c:36:51:86:a7:9e:a4:86:12:26:
70:44:01:82:2e:5f:ca:8c:d2:c2:c8:f4:48:1a:ae:
be:c4:a6:98:0c:6f:37:f7:ba:cd:4a:c7:8b:45:85:
44:e0:7f:67:76:7b:7b:59:2a:9a:2f:ff:e5:84:6c:
f2:54:7e:a6:a8:61:70:5c:70:81:64:ff:70:c1:77:
b2:c7:44:57:a4:fc:20:76:84:c1:6a:64:9e:a0:0f:
90:cd:d4:0c:23:f8:b3:52:c1:13:9a:33:9d:73:e9:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FD:01:29:A2:96:D9:3D:FF:67:FE:EB:61:BD:2F:FE:02:C2:39:31
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ba:9f:b1:d1:4f:9e:26:31:6b:a0:e3:22:4c:4f:40:9e:9e:
8f:83:74:45:90:73:58:3b:88:84:b9:a5:37:64:b9:0e:19:97:
bf:84:d4:71:08:63:c1:4b:f9:3a:f6:12:a2:28:d5:af:1b:31:
22:e9:5a:e8:f9:96:ba:b6:a2:20:99:1a:db:96:4f:c1:10:91:
33:40:71:36:44:18:7e:98:74:e8:34:d6:c4:f6:09:ca:58:04:
6e:70:cd:b3:3e:1c:16:d5:80:cf:cd:aa:a7:0e:45:44:e5:18:
9a:63:41:2c:0a:b8:05:5f:fd:59:d0:54:ed:17:02:6c:09:34:
62:84:ed:65:6c:a1:cd:8e:fd:0a:e3:dc:7f:c4:be:7e:52:b6:
ca:05:80:aa:09:b8:a2:0d:8b:2e:9d:11:5b:e9:c9:3b:8e:97:
3c:9b:39:e1:1a:67:54:73:51:82:d6:97:38:90:61:40:2f:8d:
89:2d:55:f3:8a:d8:f4:c4:63:d9:b1:25:3c:e4:fb:64:01:26:
46:50:f1:13:d7:69:c6:c0:18:f8:16:26:6c:8d:cc:c7:c3:1b:
cf:dc:27:f2:5d:73:ce:2f:10:39:05:23:e0:54:e0:27:03:06:
03:dc:da:5a:c2:ee:bd:61:19:2a:e2:07:c1:e1:b6:66:97:9c:
11:83:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:29:59 2025 by rpki-client