Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: nhWCB0TnUQ4VrfJmV36/OzW+OhOjBPSnp5265XNTcYg=
Subject key identifier: A5:49:8F:43:7B:FB:60:3C:80:1A:64:78:3D:B1:2A:C1:BF:5A:DD:AD
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 01969FE3F00C26DD2C2BB11F29E4AD27FBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 10:00:37 +0000
Manifest this update: Mon 05 May 2025 10:00:37 +0000
Manifest next update: Tue 06 May 2025 10:00:37 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: zIgf1vulGkESMeeTBzXrh3Tw5Kb/PIu2pI4UCTRoPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:f0:0c:26:dd:2c:2b:b1:1f:29:e4:ad:27:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: May 5 10:00:37 2025 GMT
Not After : May 6 10:00:37 2025 GMT
Subject: CN=a5498f437bfb603c801a64783db12ac1bf5addad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:50:5f:11:8d:a4:b3:c2:c6:eb:3b:59:c8:
39:66:25:89:7c:1d:6b:27:86:bd:b5:5a:12:8a:2a:
3a:b4:fe:8a:fb:64:a9:c4:6b:92:96:32:ea:1c:e4:
c6:7d:0b:2f:79:25:80:7f:6f:5b:3f:5b:56:26:81:
0b:7c:66:3c:67:5a:96:f1:c3:8e:0b:72:b4:d0:42:
ed:94:0f:72:cf:e2:fd:56:60:2a:05:e0:93:c9:f3:
11:4b:b7:eb:12:b2:5f:37:fa:4e:56:02:92:b8:8e:
37:14:8d:55:b8:03:4c:54:9d:23:96:0f:e9:07:6b:
95:2a:5f:a7:33:41:ab:72:e2:0d:ee:d1:0b:d5:14:
27:71:c9:ff:b1:48:35:87:b5:e7:98:58:14:98:44:
1b:a0:84:8f:ab:8b:5f:bd:86:82:32:03:90:07:24:
23:14:b1:db:b3:a6:30:50:92:6f:57:3d:07:e5:8b:
7e:04:ec:b6:eb:7c:fb:d1:58:1c:ef:8b:4c:e8:35:
07:c1:63:6b:c7:00:82:db:36:ce:88:90:83:ac:6e:
d1:19:3c:20:32:c1:39:fc:e8:ef:a5:ba:bb:a7:0c:
4c:4e:1f:3a:1a:e1:2e:0f:a6:42:f4:f7:5c:f1:a1:
3a:bf:8a:e9:c4:e8:4a:94:3c:c3:b3:78:46:4b:ea:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:49:8F:43:7B:FB:60:3C:80:1A:64:78:3D:B1:2A:C1:BF:5A:DD:AD
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b7:ef:a8:1c:d3:63:33:e1:db:8d:59:d2:b3:45:49:05:9f:
92:32:7f:c7:2c:0d:35:9e:0e:91:df:80:b5:dd:f2:9a:3d:6f:
a7:4e:96:6e:93:5f:8f:ac:13:f6:4b:8a:aa:17:ea:a6:61:73:
ad:06:5d:da:16:53:cf:b8:f6:c2:bf:91:42:81:e0:ee:5b:f7:
fd:61:19:ab:26:0e:7d:36:b7:09:08:a2:9b:c3:67:8d:9b:b8:
78:49:4a:4f:ae:44:1c:f4:94:71:5d:df:47:5a:e3:dd:e8:91:
cd:9c:36:97:56:f8:03:7f:96:53:4a:cb:a0:ac:05:68:48:26:
60:ff:81:20:5f:f0:76:c6:5c:41:4d:25:8f:d0:b2:81:88:e1:
8f:fb:23:9e:bb:c3:41:8b:b3:e7:61:fa:e9:08:74:93:9b:31:
91:6a:fb:56:d0:00:9a:b6:09:fa:eb:f0:e9:31:97:44:f2:b0:
a2:74:3b:f3:2b:d6:99:49:ff:65:f7:c8:42:a2:76:c9:9f:9d:
9d:7d:1e:f4:37:89:ff:78:04:cd:67:fb:04:fb:50:32:19:32:
ac:4b:f6:c7:b9:3e:64:65:eb:cd:5c:31:7b:f7:36:15:4e:8b:
10:46:37:9e:7f:dc:a7:0c:36:7f:e8:e8:0b:b8:08:e9:e3:64:
ca:5c:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:03:42 2025 by rpki-client