Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json)
Hash identifier: Pj5w6b3xwhKEZH/MPNjdHcSWxH2C3/ZLHfdpk1oUuxw=
Subject key identifier: 99:0E:E1:7F:BB:D9:19:CD:3D:F2:0D:78:C8:A9:AC:CD:4B:42:8E:E6
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial: 0196C49508A34D896633C9CFDD8507D28C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
Manifest number: 06D3
Signing time: Mon 12 May 2025 13:00:23 +0000
Manifest this update: Mon 12 May 2025 13:00:23 +0000
Manifest next update: Tue 13 May 2025 13:00:23 +0000
Files and hashes: 1: Ox_5wctFyZuvInmQs0hviVdHYTY.roa (hash: g8iHju69S1V2EgutTovP9pVMh3pNWKkzCgYSyMGlRgE=)
2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: qO7pMUHvBYv0npq56cGVPT3UpvU1PQIm1Wg7W59AGz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:08:a3:4d:89:66:33:c9:cf:dd:85:07:d2:8c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Validity
Not Before: May 12 13:00:23 2025 GMT
Not After : May 13 13:00:23 2025 GMT
Subject: CN=990ee17fbbd919cd3df20d78c8a9accd4b428ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:e1:56:f3:ec:95:69:bb:ff:0c:c1:80:f4:
a3:0f:6e:f8:dc:ff:b1:34:b4:f6:ba:ff:e6:da:95:
3c:b5:c2:8c:3e:6c:ea:b3:de:de:6a:a5:e5:06:43:
05:24:2a:b7:6e:d1:92:de:c4:96:63:15:7d:b9:e1:
62:30:16:ba:d6:29:49:2f:1d:a6:91:a5:2e:ca:18:
3c:ab:34:bc:b2:94:65:7a:cc:95:cb:8f:a7:f1:fa:
15:80:5c:97:3a:3b:94:de:38:2c:04:6f:3d:32:ae:
0d:7a:29:79:cb:27:3a:68:c5:05:62:e7:94:7e:00:
cd:a5:93:40:30:4c:5f:9d:9b:d2:26:69:9c:08:3b:
7a:f3:8d:a1:f4:98:e3:a7:da:da:85:46:7a:00:af:
05:28:59:70:68:28:96:c8:9f:d9:cd:36:24:e2:ab:
e2:20:4d:aa:27:9f:5a:11:3a:39:2b:99:bf:df:bf:
9f:22:34:56:f8:63:68:82:08:f0:ad:56:19:fb:0e:
6a:ef:63:b0:0a:2e:50:9a:67:38:08:cd:29:1c:5c:
7c:7e:d2:07:e6:cb:4b:38:2f:9f:9b:d3:c9:71:d7:
5e:1e:bb:35:0e:0c:3c:1f:f2:47:3a:a3:c0:5b:d0:
a2:ee:3a:6b:7a:b9:89:55:6a:4c:f7:c3:49:36:b3:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:E1:7F:BB:D9:19:CD:3D:F2:0D:78:C8:A9:AC:CD:4B:42:8E:E6
X509v3 Authority Key Identifier:
keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2a:bc:a5:6f:e0:3b:09:b4:83:d4:d4:78:25:2d:8e:19:20:
55:e1:c4:32:c8:d7:47:9c:be:24:d6:2f:58:91:c3:f3:13:55:
b4:92:fd:7d:88:5f:d9:2f:56:54:54:4d:49:9c:bc:95:3b:e6:
03:e1:d4:36:c0:62:9c:aa:12:1a:35:5e:be:4a:75:c6:a1:34:
58:26:34:80:a4:c5:35:7c:c8:85:cb:ed:3f:ba:07:9b:2c:a5:
41:09:c9:13:33:d2:d6:0e:a3:90:1c:3a:cf:3c:84:8e:d6:0e:
44:c4:aa:82:5c:c8:34:16:b0:45:02:e7:d0:6e:dc:ae:07:6f:
de:5b:66:78:b9:31:ef:11:26:36:9a:ab:41:62:69:67:1e:0f:
d1:12:1a:fd:d4:cc:1a:cf:97:eb:ea:cf:bc:bc:f4:e8:02:75:
f9:51:ed:fd:b9:34:7a:73:85:dc:0d:10:be:14:e9:83:e8:ae:
10:ff:96:9b:46:15:70:bd:05:57:99:a8:e4:bb:3b:34:19:43:
60:e6:4f:23:87:e2:cc:4c:53:7b:e4:be:a7:8a:1c:b3:45:11:
89:d1:d6:e1:a5:1b:0b:8b:73:b7:96:7a:d9:35:f8:39:f5:98:
ca:aa:d3:3c:d9:74:2a:7e:c6:4f:03:5b:c0:7e:68:af:0f:8f:
a1:d6:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:31:25 2025 by rpki-client