Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: h2MJQWKRGjKRbq6B0nVpLmnt5HHd/I0E3qXSSPyaQpw=
Subject key identifier: C5:D6:BE:11:38:6D:14:A6:1F:48:9D:60:00:B0:BE:FB:48:80:19:30
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 0196C61613117C18B81112AF15026CFB8943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0BD2
Signing time: Mon 12 May 2025 20:00:57 +0000
Manifest this update: Mon 12 May 2025 20:00:57 +0000
Manifest next update: Tue 13 May 2025 20:00:57 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: d1vGzE9MALKakVeXoBhUEVt/+aQwWnsvTVKN1gSYB9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:13:11:7c:18:b8:11:12:af:15:02:6c:fb:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: May 12 20:00:57 2025 GMT
Not After : May 13 20:00:57 2025 GMT
Subject: CN=c5d6be11386d14a61f489d6000b0befb48801930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:42:fd:65:f5:44:d4:ce:55:2f:95:79:f5:
00:d1:87:7a:d4:a3:2a:7d:c2:c6:44:d1:f7:35:65:
e6:f0:b0:6f:54:c2:8b:45:da:21:ab:80:06:3c:b2:
9e:b2:37:cc:fc:8a:11:ae:79:9a:6b:2e:c8:4c:27:
c7:f7:52:ec:c9:f9:2b:cf:87:03:45:b2:c6:d4:5f:
99:67:0e:0a:81:e8:4e:f5:0b:d1:97:c4:12:0b:e0:
e4:53:05:aa:7a:67:76:16:3e:d1:8d:73:8c:e6:76:
13:ca:be:88:9d:ef:19:18:1b:7a:3f:77:9c:31:b4:
fe:e0:0e:ba:f0:01:9e:97:03:1f:4d:0d:2f:4a:ad:
7d:95:84:33:b4:29:6f:54:1b:9a:ae:1d:ce:6d:72:
3f:40:c4:c2:e3:bb:b1:29:cf:80:d1:8d:5c:8e:a8:
d7:c8:59:a4:96:f7:69:d6:a0:08:1b:c6:b2:a1:6e:
2b:ff:49:c6:2e:af:5a:86:31:d7:15:4d:4e:c3:dd:
aa:57:11:70:c5:9b:7d:f5:d8:f4:59:dc:3e:18:9f:
3d:4e:9b:11:8c:e6:84:12:8c:59:3c:18:e2:45:4d:
db:ee:34:bc:13:59:9b:fa:f0:8a:ee:14:96:81:6f:
65:26:bd:ba:11:95:8c:63:a8:24:e9:f8:63:b4:0c:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D6:BE:11:38:6D:14:A6:1F:48:9D:60:00:B0:BE:FB:48:80:19:30
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0f:d9:50:4d:e0:2c:ef:da:57:de:5f:34:89:c7:31:25:6d:
02:f3:39:a9:f7:c7:ab:2e:72:86:cd:ac:8e:3a:89:9e:5c:22:
94:c7:67:02:17:d0:88:c5:bd:43:02:6e:19:a8:13:f8:c6:e5:
b0:24:72:ac:73:1c:6e:80:e1:9f:18:3c:55:ca:b1:15:c3:67:
dc:04:3f:d2:1c:5c:55:fe:1b:7e:83:37:10:a2:0a:7f:42:ac:
24:ab:27:d8:de:23:2a:e2:13:71:12:b1:19:e5:62:06:ee:56:
ff:b3:e1:fb:4f:2a:86:4e:ba:19:73:bf:0b:eb:f6:de:fb:0b:
bb:1e:64:d5:96:69:0a:ff:de:c4:a8:26:95:7f:82:54:de:6f:
9d:4c:e8:0c:62:a1:b9:96:6f:2a:4f:ba:ac:93:4e:b8:d9:0f:
0b:e0:12:4e:a3:c1:ec:19:b7:c6:60:07:73:5e:dd:4c:a0:6a:
81:fc:51:4b:80:3f:91:ba:58:a6:23:1a:a2:b2:ae:78:3b:cc:
fd:08:91:b1:53:98:ef:f8:cd:51:84:a2:3c:b3:1e:69:5d:07:
05:a4:b8:b0:51:33:10:14:99:07:69:a8:c1:06:a8:1d:4c:b6:
03:3a:07:1b:56:6e:ba:df:3c:40:dc:43:70:21:fe:8e:38:10:
08:0e:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:48:55 2025 by rpki-client