Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: HrL0kRO461igPQPLiAMxcp9/GYq6HHvFVkVf8+QakkA=
Subject key identifier: DE:BA:EE:9D:E3:B1:64:B8:7D:77:C5:58:85:11:71:AF:E1:92:96:EC
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 0196DA0A7A0E74768F5C3D800C48D23CC643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 10CB
Signing time: Fri 16 May 2025 17:00:41 +0000
Manifest this update: Fri 16 May 2025 17:00:41 +0000
Manifest next update: Sat 17 May 2025 17:00:41 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: Hbx4jf2nBmeuk2l/thG1U/G11iaD/akUHdeUSnUgvOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:0a:7a:0e:74:76:8f:5c:3d:80:0c:48:d2:3c:c6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: May 16 17:00:41 2025 GMT
Not After : May 17 17:00:41 2025 GMT
Subject: CN=debaee9de3b164b87d77c558851171afe19296ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:9b:68:ec:48:db:1b:8c:f7:e1:e2:e9:c6:
9b:60:9d:f8:ca:34:67:4e:db:20:ae:6b:e0:ef:52:
2a:f3:72:33:fd:31:8a:c9:d1:30:ef:24:51:e1:70:
51:3c:7b:0b:ee:f3:2c:da:70:02:71:01:3b:73:9c:
3f:39:6b:b0:fe:e2:ca:96:9f:7e:82:fd:66:2f:1f:
14:cd:ba:1a:4a:f2:90:ca:77:bb:2f:25:d4:c1:c5:
4f:ac:b2:84:0e:8d:25:e7:e4:e4:ec:32:02:8f:85:
ef:f7:ef:4f:10:2e:b0:84:2e:c5:ab:5d:5a:08:2e:
05:f2:08:43:df:b1:16:c8:70:13:b0:a9:5f:fc:a0:
22:7e:c0:1c:03:19:23:00:12:f8:29:04:98:1b:52:
7b:58:c0:ba:42:69:f6:be:4b:4f:04:42:3e:ff:5e:
1d:ad:a8:b4:bc:50:8e:1c:e1:91:ac:31:9c:13:b6:
b6:dd:78:1f:52:e2:ac:ef:33:c2:c7:05:8d:79:af:
ed:39:88:d5:0d:cb:eb:2f:41:21:af:78:a4:be:9b:
b5:9e:9d:11:b1:2b:a3:0d:75:f1:88:1e:21:5a:d9:
b7:8d:13:47:c2:7c:51:ad:f1:2e:cf:26:ad:2a:98:
9e:ef:a3:76:9e:cc:92:68:98:ed:37:1f:f2:6d:85:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:EE:9D:E3:B1:64:B8:7D:77:C5:58:85:11:71:AF:E1:92:96:EC
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1a:36:4a:65:9e:e8:3c:0a:57:b5:76:1a:de:ce:11:8b:fb:
8b:6e:39:f3:cf:fb:8e:c3:4b:5a:59:28:56:c3:f2:d4:55:12:
08:cc:1c:a4:1f:6f:21:8d:d0:d4:e6:2b:9f:d9:81:31:2b:83:
f4:3e:77:17:31:e9:f0:fe:e1:d9:11:b9:68:ec:53:9b:54:4f:
47:57:bf:da:67:93:c9:70:81:4a:f5:ee:20:a8:16:36:e7:3f:
33:1d:07:5a:2d:36:49:14:c3:b8:ea:8f:b8:fe:fa:7a:06:1e:
34:a6:81:f7:af:5c:1c:92:c9:64:a2:19:f5:71:30:c9:a5:7a:
3d:44:79:62:47:79:a3:16:e7:d8:32:d4:35:b4:c6:76:29:1b:
54:22:11:de:12:d5:f1:12:a8:8b:61:71:9c:8e:17:cd:1f:1a:
56:a4:c6:2f:b6:d3:e1:81:13:1c:55:3a:8e:15:62:a4:4d:5b:
d1:c4:8b:78:25:38:7b:d9:19:cf:25:ac:2c:8f:a0:10:88:fe:
78:d6:ff:a9:ae:88:dd:f7:0f:81:32:0c:be:e4:14:3b:59:0a:
0d:81:8d:4e:57:cc:bb:88:d8:69:5a:b6:d4:f2:db:83:2d:25:
5f:25:66:00:d7:dd:ee:d5:85:02:83:8f:ca:df:30:c0:e9:06:
13:a0:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 21:40:13 2025 by rpki-client