Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: oqu6aCiF968tkj2GI/VfT9i5e+7s6AoY8Y+5iGroDbs=
Subject key identifier: 34:EE:99:34:98:41:40:71:EA:87:A0:32:2F:9A:04:73:B5:3A:49:5D
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 0196C04AF15AC7FC38089F38D19E045FF283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 17:00:58 +0000
Manifest this update: Sun 11 May 2025 17:00:58 +0000
Manifest next update: Mon 12 May 2025 17:00:58 +0000
Files and hashes: 1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=)
2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: sWZ0OJTZByPkjYEwgd+DINGoJQZMonrM6EeyQLUxBto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:f1:5a:c7:fc:38:08:9f:38:d1:9e:04:5f:f2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: May 11 17:00:58 2025 GMT
Not After : May 12 17:00:58 2025 GMT
Subject: CN=34ee993498414071ea87a0322f9a0473b53a495d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c5:6a:3b:71:69:64:18:3b:90:5d:50:4c:97:
dc:2f:36:1a:1d:e8:b8:5c:a9:30:aa:df:cf:08:ba:
b8:ad:e3:8b:c6:56:b6:f9:9c:c8:4a:1c:25:e6:4f:
21:6d:9f:e6:9e:25:96:44:7a:fa:2e:cf:60:7d:a6:
2e:ac:6d:cf:06:3d:17:5a:e6:c7:c5:3e:37:0b:3a:
cf:c1:a8:02:86:ce:20:d0:73:e0:a6:ab:73:b6:e0:
2c:de:bc:e4:da:cd:3f:78:fe:be:43:5b:44:b5:75:
2e:f8:db:6f:74:d1:a9:8e:25:75:63:6a:5e:df:87:
5b:1c:97:ff:08:58:92:8e:d6:76:41:77:00:6e:21:
03:ba:80:2b:67:b8:af:96:f7:83:05:14:08:ae:79:
02:e4:e2:e9:0a:62:71:bf:a2:d2:de:a1:f4:72:dd:
0b:22:28:b5:0d:1a:46:47:75:09:b6:1a:92:8b:e1:
d3:89:3d:ef:fc:be:23:e8:ad:5d:d3:e4:58:54:72:
53:83:33:7a:cb:78:55:99:e0:36:35:06:79:bf:48:
12:66:e6:cf:17:70:e3:99:3b:30:c2:30:56:2e:e1:
70:fa:69:36:ee:aa:fe:8c:79:97:72:93:e7:02:5f:
80:25:6b:b3:71:d9:51:43:57:7b:fe:86:af:a6:ee:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EE:99:34:98:41:40:71:EA:87:A0:32:2F:9A:04:73:B5:3A:49:5D
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6c:ef:5e:0d:b1:b6:44:e7:66:3a:50:28:9a:bf:ce:9b:7f:
64:ca:71:a0:12:b2:5f:ce:60:b6:f4:50:f1:14:54:92:66:fa:
46:57:74:3c:ec:ed:a9:3a:4e:10:e9:6f:d8:57:d6:94:0a:84:
07:dd:56:f2:ab:23:d3:0c:f5:47:ef:21:a3:23:91:64:04:69:
e7:43:bd:ff:18:12:3e:31:ad:56:8d:dd:ff:c0:56:6a:9a:e6:
b2:06:23:32:4f:6d:f6:be:a2:8f:55:92:39:5c:30:65:7b:b3:
cf:a7:0f:ca:57:0d:af:67:27:02:73:b8:f0:56:3f:8b:ee:72:
aa:93:64:8e:d6:66:e9:20:18:eb:08:f6:a0:1b:a9:0f:a5:9a:
b2:81:55:1f:e2:a6:45:e8:a0:47:67:df:28:fd:0d:8f:6d:26:
9e:1d:60:6c:c9:c3:db:b8:a7:8f:19:91:9f:73:42:96:bc:cd:
0f:93:55:f0:6f:47:48:6f:80:ea:5f:bf:05:7a:61:e9:f2:6c:
30:5d:24:81:68:82:9b:c2:47:bf:2c:15:40:bb:e4:19:d8:85:
07:0c:13:4e:71:f4:b6:94:41:36:b2:a3:88:f5:7b:37:eb:37:
4e:82:cd:43:d4:4d:23:76:d1:58:19:c6:59:3a:e4:b5:7a:7a:
bf:19:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:51:30 2025 by rpki-client