Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: T4Woj10NCfNTPRPBDk1ASD4tjFxLEPVbgGbjXKtUMjA=
Subject key identifier: BF:19:2A:D4:1B:CE:C4:43:DB:04:83:6F:FE:0F:B5:3C:BF:C0:1A:E1
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 0196B6351AEAE245A06289E6FFC06B20B42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 11E4
Signing time: Fri 09 May 2025 18:00:55 +0000
Manifest this update: Fri 09 May 2025 18:00:55 +0000
Manifest next update: Sat 10 May 2025 18:00:55 +0000
Files and hashes: 1: LKbJBE8NWEbtvlmwjvUv8EH6lzg.roa (hash: OvzM1ONuWDYGL3UTKmOuYTSxh3U96Ifed1WChkSuccI=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: aNXVR5LKr5S/n/FXBAEGD6DRwFHolSmCHi5PAnB4piQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:1a:ea:e2:45:a0:62:89:e6:ff:c0:6b:20:b4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: May 9 18:00:55 2025 GMT
Not After : May 10 18:00:55 2025 GMT
Subject: CN=bf192ad41bcec443db04836ffe0fb53cbfc01ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:0a:51:e9:97:2c:21:c6:84:1b:87:9d:54:
05:92:47:5a:49:63:db:63:32:b4:f9:2d:9b:51:fc:
33:66:b9:0c:08:81:e4:6b:d5:79:96:92:ee:3a:f9:
3f:28:ae:da:2b:fa:bb:17:a5:cb:fd:60:ae:05:55:
39:5c:09:08:29:5c:df:c8:fc:c5:fc:52:f1:66:1a:
21:f7:67:81:62:a3:f7:ed:2a:b1:79:d0:37:9c:94:
ed:b4:de:93:a2:07:75:a9:91:5d:64:57:fa:fe:0f:
c5:02:7e:60:21:e7:ea:f6:d9:8a:94:fb:ec:4c:a0:
e2:5e:06:68:94:95:9a:49:5d:8c:80:ba:a9:e4:6d:
c4:a9:65:37:af:a5:b5:ae:29:6a:44:a6:45:be:d8:
77:1a:f8:e0:9a:f1:00:0f:91:da:2f:d2:e7:07:2d:
65:77:38:f5:ac:da:0b:d0:ba:3b:31:41:a9:95:f8:
2c:b1:9c:2c:cc:58:d5:b6:b2:a6:e2:e4:aa:df:44:
4b:0b:49:c2:28:a5:92:da:0e:8e:30:76:e3:0b:ed:
ea:4a:d8:e2:48:d4:98:09:79:19:eb:9a:13:de:70:
86:f9:f2:bc:7d:f4:6a:b8:02:ec:86:dc:79:01:02:
32:c8:45:91:b5:08:23:5b:32:59:d9:f8:c4:29:1f:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:2A:D4:1B:CE:C4:43:DB:04:83:6F:FE:0F:B5:3C:BF:C0:1A:E1
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:a0:c9:4e:6e:0c:c3:48:bc:0e:c8:bb:96:49:4a:25:a2:
d4:33:05:4b:75:99:03:68:aa:47:0b:21:60:13:63:17:ec:60:
4a:1a:9f:73:5f:69:08:5d:16:d2:b5:98:08:af:7e:4b:56:13:
60:e0:38:dc:0d:ac:fe:a2:3f:f4:73:95:ff:a6:14:aa:e7:c1:
c1:bb:96:2f:a5:d1:aa:77:50:09:85:0a:ec:41:14:22:a6:35:
e3:f0:35:05:13:f5:8b:34:ca:27:74:e2:b2:2a:5e:e6:33:e1:
57:27:9f:e2:00:d0:51:31:14:f9:3a:02:12:bd:ec:72:e5:b6:
40:49:3f:57:98:99:bb:31:a4:88:27:c3:1f:fd:4c:c2:57:5b:
85:c6:e8:03:2b:f8:6e:8d:be:73:30:e6:93:fd:9a:21:a8:0f:
7c:8a:c6:22:ad:c2:47:b3:60:60:0a:dc:19:ba:18:10:79:1f:
7d:8c:fb:80:bc:be:0f:2f:98:98:16:92:e0:b1:fc:79:0c:af:
26:ff:46:9d:0a:a3:20:72:2a:5d:ea:be:3c:c5:98:93:cb:c8:
36:f0:0c:9f:39:98:49:83:7c:b9:be:14:f7:43:60:25:74:cd:
07:69:b7:92:ec:a4:72:38:7e:d9:f1:22:be:b6:f3:04:6a:30:
38:da:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:50:52 2025 by rpki-client