Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: SJ9Ck7Zg6m78L3gLCJ4d8iiPuKluAgVWAmthdbQBGiU=
Subject key identifier: 30:1E:FE:2F:71:6A:C5:F1:1A:E2:1E:DB:59:CA:F2:6E:3A:E5:FD:1A
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 0196BCA487546CA647FF44D23D12288A9069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 0469
Signing time: Sun 11 May 2025 00:00:21 +0000
Manifest this update: Sun 11 May 2025 00:00:21 +0000
Manifest next update: Mon 12 May 2025 00:00:21 +0000
Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=)
2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: S3XL9NxQ3E458GwDY5lzoaCajLxqIsoweBZ3x1tLhmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:87:54:6c:a6:47:ff:44:d2:3d:12:28:8a:90:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: May 11 00:00:21 2025 GMT
Not After : May 12 00:00:21 2025 GMT
Subject: CN=301efe2f716ac5f11ae21edb59caf26e3ae5fd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:9d:7a:ce:07:f9:e6:da:3e:49:27:89:e3:
42:7b:82:60:13:9d:2b:95:03:a9:2d:3e:da:2e:4b:
37:27:70:7c:fe:61:3b:b6:f4:9b:fb:19:1d:bf:57:
31:cb:1e:53:64:44:08:ba:e9:19:0c:52:0d:f3:dc:
2a:b4:b1:70:62:e7:21:4d:92:e7:45:2b:c5:79:b1:
10:d9:da:8e:a7:13:f7:66:1c:52:26:7c:db:95:d2:
46:97:59:27:bb:2a:15:c0:16:c7:4f:28:ad:f0:a7:
67:8e:e4:9b:35:5c:a4:08:43:10:ae:58:b8:d7:84:
ed:99:dc:db:66:c2:51:92:b6:e6:84:9e:53:be:26:
42:34:ae:be:24:70:42:45:2b:ff:93:f3:af:02:91:
7d:6c:d5:89:7a:57:e7:07:3e:a1:c3:09:bc:6e:d9:
06:84:92:04:90:4a:cd:60:a3:12:d3:06:71:68:ff:
30:2c:b1:1c:cf:3c:c9:e2:4a:6f:18:d9:b4:db:95:
c7:d5:9e:7d:2b:82:f1:2c:29:df:98:2c:18:a3:be:
23:8c:e1:28:65:08:2b:3d:7a:ad:9a:96:f0:86:99:
f0:04:85:77:8e:7f:e5:37:6b:8a:e8:d6:2f:ef:71:
26:27:b7:b8:ad:b6:d9:12:5c:79:08:2f:8c:ed:68:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:FE:2F:71:6A:C5:F1:1A:E2:1E:DB:59:CA:F2:6E:3A:E5:FD:1A
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:33:5e:5e:6c:66:d7:35:ba:6b:99:3a:71:43:58:d1:c1:f6:
e6:2e:da:1b:27:87:fb:83:ee:78:98:22:62:17:df:d3:11:5d:
1b:61:0e:e7:03:7e:ad:03:1d:e3:70:65:f5:3a:e0:55:b6:fd:
c1:84:47:aa:17:a2:5c:3f:15:1a:08:30:2c:a4:48:84:4f:3c:
9f:5d:2f:49:25:72:17:17:28:f9:bc:e2:3a:a4:7d:b7:0f:a1:
4e:cb:24:04:33:b5:9c:b1:4a:15:d0:7e:63:76:9e:de:60:a7:
68:03:0c:98:04:c8:76:1f:0c:c1:79:e7:87:04:05:0d:12:de:
f8:b8:1a:66:a4:13:e9:ea:16:de:08:00:b5:3f:07:d3:2e:38:
f3:5e:f6:6b:0f:57:b9:b1:4f:66:7d:c5:e9:2c:be:f3:c9:ff:
f2:da:15:a7:a7:17:2e:67:5a:9a:ec:a9:0c:91:da:7f:bd:3c:
5f:c2:80:aa:7d:8c:a3:3a:43:9e:70:2e:7c:0b:2a:87:d9:95:
d5:9b:4b:ef:18:bc:7f:89:14:05:23:89:5d:e0:e4:ba:81:45:
fa:f5:f6:72:01:9b:29:eb:3c:54:aa:0b:be:c2:47:63:ba:b8:
f3:c3:5c:3c:60:ae:8d:fd:87:70:9a:bc:6a:02:0d:c6:17:b3:
5c:f5:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:52:23 2025 by rpki-client