Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: VtzJuUWUe+yZEFixP+vrbZVq1O5sS7it9D9LgF5CHh8=
Subject key identifier: FA:B0:DA:48:61:80:0E:C4:8E:90:F3:0C:2E:4C:D2:3C:70:A6:E5:E7
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 0196C2023BA4A1CEDD3BA67B7EAE3D3FD88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 04E7
Signing time: Mon 12 May 2025 01:00:48 +0000
Manifest this update: Mon 12 May 2025 01:00:48 +0000
Manifest next update: Tue 13 May 2025 01:00:48 +0000
Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: 3hmZzykDQLMeh5RHateDjc/R/TSIYz07FqY5dPLO2Ww=)
2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:3b:a4:a1:ce:dd:3b:a6:7b:7e:ae:3d:3f:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: May 12 01:00:48 2025 GMT
Not After : May 13 01:00:48 2025 GMT
Subject: CN=fab0da4861800ec48e90f30c2e4cd23c70a6e5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:8d:61:a2:70:9e:75:e1:0a:21:f2:64:a3:
3e:b5:7b:88:7b:b8:4b:34:b7:84:19:42:5b:49:88:
4a:ba:a2:01:70:7e:e2:06:73:c8:e4:13:63:71:e2:
8d:61:18:3e:64:fb:b3:97:4d:12:f2:35:1c:d0:3f:
3b:c2:fb:ee:b4:a3:70:e7:07:61:f9:af:8c:24:19:
9a:f1:bc:f1:8a:16:de:44:5a:3d:46:93:8b:66:5d:
01:71:32:42:29:63:8f:14:e9:b3:7f:6d:06:e9:1b:
7e:09:48:be:d4:7b:ca:be:ca:9a:e1:5f:bf:78:79:
7e:74:e6:ba:3f:fd:62:87:97:ca:b4:9e:5f:30:60:
20:f1:aa:46:49:79:46:92:28:ff:33:a0:ed:09:13:
5e:20:b3:5d:b0:e9:b7:e2:a3:e6:d1:f2:fd:50:35:
76:37:d3:27:f0:b1:da:2f:5e:06:e0:f9:3d:8c:e8:
94:71:d3:75:c2:2c:b8:3b:1a:03:d9:d4:1a:39:45:
48:cf:14:6e:8d:8c:1b:b1:9f:f8:17:3d:ff:53:0a:
17:b0:55:14:75:25:5c:52:8c:ac:ae:e1:c0:f5:a7:
d1:44:34:95:47:bf:cc:30:12:e6:ea:5d:2c:87:93:
1f:1b:97:3a:a9:77:74:49:bc:44:0f:f6:4a:2a:f7:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:DA:48:61:80:0E:C4:8E:90:F3:0C:2E:4C:D2:3C:70:A6:E5:E7
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:dd:44:0f:f5:c5:e2:89:a9:cf:3f:54:1a:ec:61:28:0f:
43:33:87:e0:84:e8:fc:c1:13:2a:28:7f:55:89:9b:62:ab:7d:
bf:0e:db:d3:6a:13:72:aa:d4:9a:17:e7:a3:13:d0:23:01:84:
8c:fc:04:d5:88:81:a1:22:47:14:25:76:b6:c1:aa:04:30:a9:
67:bd:84:bc:9e:cf:96:90:84:dc:90:a1:85:4b:8a:f2:32:11:
72:84:b8:6c:31:de:19:ff:0a:e7:5a:a4:0e:28:5f:c5:46:2e:
4c:cc:4b:c7:8a:f8:38:07:45:3a:74:8d:c5:07:3f:09:66:07:
38:d7:e6:55:6d:9b:8b:4f:48:af:7b:52:08:33:67:aa:07:29:
de:27:a9:94:ad:39:2b:ea:05:6d:bf:66:44:fa:b6:0d:ed:ed:
f1:74:89:ed:45:18:f0:0a:4f:a3:bb:ca:97:38:42:b7:10:97:
67:51:da:82:94:bc:a5:20:82:22:e7:69:0f:85:ba:51:d4:ac:
25:a8:8a:a6:61:d4:48:39:e1:8d:68:dc:04:8d:db:ff:e2:e1:
40:6e:1e:4c:0e:28:43:38:76:a0:37:78:d6:83:4f:13:a3:03:
45:a6:43:21:0d:5c:b8:46:fd:7b:f8:5e:64:86:40:a2:f6:1b:
3d:46:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:22:01 2025 by rpki-client