Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: slUwLCOjcrOUIeXYHzmbREK3Ee2iAjNKZOXDmWqQygo=
Subject key identifier: BE:03:EB:45:EC:0F:97:56:22:D1:1E:64:24:AE:91:D7:2F:94:71:36
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 0196B6D97BB7EDB1733FCCC206A925829531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0ADB
Signing time: Fri 09 May 2025 21:00:28 +0000
Manifest this update: Fri 09 May 2025 21:00:28 +0000
Manifest next update: Sat 10 May 2025 21:00:28 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: iVCBe6bQKtdFnS45LkRb5eh+5/gAQfgiNadm8nAOnVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:7b:b7:ed:b1:73:3f:cc:c2:06:a9:25:82:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: May 9 21:00:28 2025 GMT
Not After : May 10 21:00:28 2025 GMT
Subject: CN=be03eb45ec0f975622d11e6424ae91d72f947136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:d0:fb:70:b0:96:f2:77:52:7d:54:9b:88:
6c:b2:ec:a2:9a:b7:bb:b0:c0:1c:4d:9c:3c:64:57:
6a:25:d9:a8:09:79:d2:a2:76:fa:f8:e5:87:30:40:
1e:c1:10:de:25:88:4d:a1:56:5f:e3:1e:a6:5d:cb:
4a:8f:92:aa:51:ed:e4:b3:00:c3:4e:af:1a:32:77:
58:a1:51:f6:5d:8d:2f:a8:49:07:53:2e:c6:8d:20:
a1:71:c1:9d:ae:90:32:98:9e:c8:e2:7d:a9:f6:8c:
fd:71:bc:3c:25:a4:c4:92:b8:1d:6a:00:ca:c8:63:
b2:57:d3:c6:dd:a0:ad:e0:65:98:e5:31:ba:12:39:
f2:55:e9:e7:46:82:64:4b:1f:c0:fb:07:c1:aa:8d:
5e:14:72:9d:c8:23:14:c9:a9:f8:30:65:37:94:d6:
f5:13:a0:91:bd:c8:03:00:37:b3:bf:3f:ab:76:bb:
48:c6:77:83:52:1a:ea:4b:df:98:a1:15:51:6a:53:
7f:96:d1:4b:25:e4:b6:7b:5e:1d:16:c6:58:92:38:
40:4d:b2:37:90:9d:9b:57:ff:5a:93:1f:0a:85:f6:
c0:88:4b:01:c4:a2:5e:47:a7:aa:33:e1:7b:28:fd:
a0:23:5f:ac:0a:8a:a3:73:74:f3:cc:ea:7f:c1:d3:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:EB:45:EC:0F:97:56:22:D1:1E:64:24:AE:91:D7:2F:94:71:36
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ab:a9:d8:cd:10:96:30:5a:3a:76:5f:0e:ef:0d:78:2a:55:
06:0c:3d:f5:cb:4e:7b:a7:5c:9c:f8:6c:3d:4d:43:67:5c:1c:
8f:a4:8a:78:ae:c7:2f:ae:d8:99:06:e7:d5:a6:9c:66:ef:30:
6b:d9:36:cf:ea:47:66:d4:54:79:d0:63:af:a0:d0:4b:ec:32:
59:57:66:4c:7e:1b:e7:d4:3f:e3:11:3c:e0:ff:8d:af:ea:59:
52:8a:bd:cd:54:78:9c:9a:82:ae:21:8e:90:1d:ef:36:54:b9:
02:d6:49:ff:a5:b2:44:68:6a:53:ed:3f:88:cb:1d:6a:fc:6a:
a5:9f:76:06:5e:a7:f9:f1:91:d6:f1:b8:4c:f4:03:b1:9e:9c:
3b:66:17:e8:20:f2:1d:f1:dd:1a:e8:5f:8b:49:68:b8:7b:5e:
a4:1c:e0:21:01:84:9e:70:92:f8:53:0d:0e:1f:c4:b8:95:95:
f9:18:11:e0:bf:59:f0:af:8c:d1:0e:db:9e:98:63:c0:74:0c:
f5:24:60:47:ae:37:40:06:cf:b4:e0:33:74:c7:be:72:04:61:
c0:bf:d4:1c:11:5a:f0:9d:09:20:0d:db:71:de:24:f1:26:c1:
04:b8:62:b4:a1:d9:80:0c:4d:2c:cf:af:66:e3:3d:04:60:57:
79:ac:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:20:26 2025 by rpki-client