Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: +j9XJJzD0pRUyVuVr3+E1Ux4+mW8JvBfjX4HWMDLUi0=
Subject key identifier: A9:FD:C3:B2:65:A8:76:24:3C:7F:3E:AA:D2:FA:A5:97:99:98:A6:BE
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 0196A23FD78CF3310684F32CA9FF81423928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 21:00:15 +0000
Manifest this update: Mon 05 May 2025 21:00:15 +0000
Manifest next update: Tue 06 May 2025 21:00:15 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: UPLVC1tOnKBH1YDwKz9pUwR2gWUUbTbzJOVKDKTDxfg=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:3f:d7:8c:f3:31:06:84:f3:2c:a9:ff:81:42:39:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: May 5 21:00:15 2025 GMT
Not After : May 6 21:00:15 2025 GMT
Subject: CN=a9fdc3b265a876243c7f3eaad2faa5979998a6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:8c:02:10:a7:84:bf:b1:07:05:90:da:0f:
37:75:57:8c:96:e2:ed:da:22:4a:cb:fc:cd:c9:0d:
9b:1d:3b:87:9c:e6:74:29:87:de:5c:96:93:5f:63:
a1:8d:b5:4e:5f:41:94:5f:96:28:81:1d:21:83:ac:
0c:6c:a5:86:87:e0:23:84:6f:98:ad:4a:44:ca:69:
06:2a:16:4a:0c:d6:06:4b:97:4f:b2:20:ce:24:3a:
08:61:c1:db:0a:48:55:bb:df:70:21:9d:f8:1f:3e:
09:43:58:4a:ad:8c:48:2d:e5:aa:6b:42:cd:fc:8f:
54:86:bf:3a:d0:d3:35:55:70:55:cb:e3:56:0a:e6:
e1:0e:04:48:6f:2d:5f:38:cb:36:fe:0a:6e:71:46:
7d:68:4c:c2:84:18:6b:e1:30:3b:30:b1:94:a3:15:
3c:da:6a:fc:21:97:74:26:76:a5:29:c8:ce:44:75:
e7:3b:5d:d1:93:9d:bd:f8:43:dc:91:af:8b:5d:3f:
5d:8a:d7:ce:a8:c4:85:9a:ee:35:6f:d6:82:22:7f:
4b:57:55:59:9b:f4:e8:2d:59:76:33:e7:a1:27:70:
db:91:f9:68:ce:18:8b:a7:d2:6a:6a:68:90:14:17:
67:d8:13:97:fe:70:7a:bf:80:bd:b1:54:24:68:53:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:C3:B2:65:A8:76:24:3C:7F:3E:AA:D2:FA:A5:97:99:98:A6:BE
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f7:ed:65:26:a6:bd:ca:f1:10:ad:4e:18:2a:ef:61:5d:49:
3b:49:24:3e:29:f4:34:49:86:2c:14:30:e5:e4:24:96:1d:b4:
4f:2e:de:92:a9:77:59:36:76:aa:2f:ae:aa:63:a9:ed:e7:0a:
75:3f:61:4a:18:d7:6c:e3:fc:48:e0:d4:18:ab:89:c5:5a:03:
dc:35:ba:ed:05:21:f2:6d:9c:bd:c2:c8:9d:6c:17:2c:95:bb:
5a:43:28:35:e0:56:96:f3:c7:0c:77:aa:16:45:d0:09:6f:f4:
c8:38:42:13:24:f4:fc:8e:b7:a2:de:12:a6:c6:0d:aa:c6:cd:
7c:6e:c4:38:01:e3:6b:f8:ff:9a:a7:d3:65:96:e0:ca:de:47:
95:b7:02:9c:1d:a4:1e:f6:43:b2:85:65:b6:59:69:48:38:9b:
06:0f:d9:a8:ef:e0:8d:da:81:40:ee:aa:76:b7:4f:d3:dd:d5:
ef:a9:a6:1a:51:d0:ce:f5:63:70:2a:fb:82:17:b8:c9:1c:e3:
9c:6b:a1:b0:3e:22:a6:ae:20:7e:1d:88:65:88:fc:3a:b1:2d:
37:7f:f9:34:aa:65:ac:0e:1e:b9:66:e7:08:1a:4f:cc:84:69:
95:58:5e:fb:3a:4c:b4:e8:d2:ec:1a:a0:a6:0d:d3:98:8b:1b:
9b:42:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:21:53 2025 by rpki-client