Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: MOscTY/lDv/2+6Eeuma7NiLEGDxEwWD9X3nKx6txmWg=
Subject key identifier: 10:89:07:92:0A:C0:9F:EF:B6:AE:3C:AE:D2:5E:C0:26:D7:13:7F:21
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 0196A8B078C0E4C04725CE847B516BE288A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 04ED
Signing time: Wed 07 May 2025 03:00:59 +0000
Manifest this update: Wed 07 May 2025 03:00:59 +0000
Manifest next update: Thu 08 May 2025 03:00:59 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: Xj4gwgsU7vR1A3rHGMRocL7/9kx8csL1gL42es2mfDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:78:c0:e4:c0:47:25:ce:84:7b:51:6b:e2:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: May 7 03:00:59 2025 GMT
Not After : May 8 03:00:59 2025 GMT
Subject: CN=108907920ac09fefb6ae3caed25ec026d7137f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:ac:0d:8a:71:1c:f5:a0:12:2d:06:d1:3b:
89:78:70:72:95:1f:43:e2:2d:b4:78:d1:8b:db:24:
6d:ce:84:c1:f8:67:2f:71:1e:97:c6:6c:aa:77:35:
7b:63:28:89:b9:43:b8:23:99:66:1a:64:aa:77:39:
3b:c4:5f:a2:19:1e:c8:53:fa:68:6d:ee:64:52:0e:
d9:2f:ec:66:79:29:30:3e:e6:67:87:a5:7a:8f:4e:
17:99:29:e1:5b:66:bf:02:ba:56:30:cc:d0:2c:09:
42:83:e9:db:9e:6e:33:e9:04:2b:2d:b7:21:99:05:
d0:b5:8e:29:6b:76:6a:97:81:10:25:4b:63:f4:fa:
2a:9a:06:c9:f1:33:a1:e4:5e:e5:9c:82:97:3e:6b:
4f:26:5e:40:b2:68:32:11:23:bd:eb:2f:6b:03:4f:
4e:d7:b2:7b:07:51:68:f8:c2:10:a1:44:28:f2:b3:
00:84:1f:99:39:3d:d8:f5:7b:a5:d2:70:aa:7a:c6:
6f:46:dc:99:d0:cc:e4:60:4e:36:8f:e7:11:59:1a:
09:2a:e0:65:87:58:fe:53:76:6d:27:b2:f9:60:88:
6d:4f:2e:f1:a2:14:f2:17:0e:41:4a:1e:5c:2f:9c:
1f:93:e9:78:cd:9c:4b:57:5d:a8:3d:82:67:1c:5e:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:07:92:0A:C0:9F:EF:B6:AE:3C:AE:D2:5E:C0:26:D7:13:7F:21
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:09:0e:f0:66:b1:a7:2e:7c:db:9d:02:10:f5:c8:8e:de:87:
ea:10:e7:fb:7a:7f:63:c0:76:7c:f9:2e:ae:df:89:d6:b7:cc:
32:05:19:2b:ae:da:24:14:0b:74:54:be:7a:8c:19:2f:4e:ab:
6f:a0:3a:5e:e3:32:d4:1e:59:92:fa:3a:bc:e3:81:a9:a1:3e:
9b:6c:d7:83:f0:0f:d3:32:81:37:48:73:1d:93:3e:57:88:8a:
69:ff:59:e5:ad:74:bf:87:1b:82:11:d0:17:b4:ab:72:47:05:
1f:0f:77:cd:48:09:3e:24:45:ee:31:1f:18:2b:45:51:dd:fc:
53:2a:d3:d2:c3:73:34:77:f2:eb:21:f0:de:8d:27:ea:d4:8f:
eb:0d:f5:d9:79:f1:4b:e5:01:58:8b:af:e7:fd:fb:7f:a7:33:
21:95:6a:b7:5d:21:c7:c2:34:bc:fd:05:ee:36:92:c4:5f:75:
f5:af:06:e0:b2:71:31:05:63:cf:4d:b5:bc:51:ee:bc:3b:e6:
ee:be:28:cb:bd:51:46:59:0f:45:87:08:78:86:42:e3:04:7c:
1f:8b:65:7a:f8:49:81:34:ef:d1:79:33:77:e4:2a:17:0f:88:
78:b0:95:22:76:fe:13:38:81:a8:fa:bb:27:65:11:ff:4f:2c:
ac:c1:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:00:20 2025 by rpki-client