Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
File: v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json)
Hash identifier: h8y929iohQb36XD47IjXC3aldqFpVyLWJSE+BVowRfY=
Subject key identifier: EE:8B:61:51:E1:2E:5E:F8:33:08:98:01:E2:56:42:36:E5:98:36:E8
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Certificate issuer: /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial: 0196C2A6C6EBC7E5E38D0938E4FD97767CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
Manifest number: 0229
Signing time: Mon 12 May 2025 04:00:31 +0000
Manifest this update: Mon 12 May 2025 04:00:31 +0000
Manifest next update: Tue 13 May 2025 04:00:31 +0000
Files and hashes: 1: cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa (hash: dQNTgxKb8PiIdXk5ccOTcLzQhMEZp5vC8gyDHDhC7Ow=)
2: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: 6oZRQz0zbpswLE4+ecDmi4mnJpq5Z0+qFI7FqEXL0F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:c6:eb:c7:e5:e3:8d:09:38:e4:fd:97:76:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Validity
Not Before: May 12 04:00:31 2025 GMT
Not After : May 13 04:00:31 2025 GMT
Subject: CN=ee8b6151e12e5ef833089801e2564236e59836e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:28:b6:83:f8:d2:48:2d:73:5b:e7:ff:b5:
ac:09:73:47:38:c4:66:92:60:0d:fa:23:bb:c3:13:
65:5e:4a:49:59:01:4b:80:e8:38:d8:66:f9:3d:b4:
e2:1c:46:10:36:14:ea:ec:d5:5c:94:d8:27:22:ce:
50:7d:7f:14:39:cc:c3:10:90:e7:99:77:27:69:1e:
13:b6:41:70:99:cd:8a:c0:67:ec:3d:f2:ec:10:e9:
cf:3f:42:89:ad:da:52:a5:51:f0:88:ad:56:e1:23:
e6:8f:dc:5b:5b:20:80:78:01:e3:d3:c7:18:35:9a:
72:c9:0c:8a:53:00:95:85:98:6d:c1:0a:ac:24:0f:
be:9f:46:8d:55:7f:b3:6e:62:38:0d:1b:d1:2e:b4:
f2:1e:70:f9:ad:8e:6d:14:00:50:ce:68:50:8d:c8:
45:b3:39:c8:7d:e4:1a:72:2e:08:29:30:9b:27:92:
56:ef:3b:c6:d5:20:a4:da:e7:81:3f:20:6e:ad:8b:
a1:1a:89:3e:17:e0:79:54:bb:94:36:70:7c:ba:d5:
70:13:69:63:52:a9:95:02:84:fc:97:da:9d:d2:d3:
92:62:5b:5b:f5:41:a3:30:77:36:23:e2:1f:9c:71:
5e:cc:5a:8a:96:50:dc:14:ee:e6:0c:97:36:54:9c:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8B:61:51:E1:2E:5E:F8:33:08:98:01:E2:56:42:36:E5:98:36:E8
X509v3 Authority Key Identifier:
keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f4:60:33:80:d9:ee:ab:5d:14:40:f5:97:db:f5:10:9b:ab:
9e:d5:5a:ec:12:eb:f5:75:71:92:56:b6:ef:d2:6b:8b:8b:19:
38:14:a3:8e:59:8e:cf:e7:6a:41:29:4c:9b:db:b0:4b:84:79:
09:a5:98:62:06:e0:01:7a:7a:fd:1d:bd:c2:29:d3:16:82:0d:
88:c1:d2:54:27:a6:98:22:77:53:0d:e9:60:d8:24:53:bf:5a:
20:08:e1:dc:3a:78:40:c8:7a:29:53:07:1c:db:b1:fe:bf:ec:
96:cc:8c:05:6f:7a:3e:48:68:77:95:22:7c:67:ba:ba:6e:64:
ec:c4:10:47:98:7d:14:e4:5f:66:1e:92:76:99:57:a1:0d:c5:
cb:83:0a:c4:85:3f:de:9b:27:ac:e8:85:ad:bb:54:6a:cb:bf:
7b:74:86:62:93:57:20:d6:4a:7d:d5:f6:d6:66:a6:a7:f2:02:
95:e8:86:35:b4:c0:f3:f5:90:5d:4b:d7:7b:27:d5:f4:2c:98:
ed:d4:2a:ca:7c:b9:80:7c:7c:48:12:f2:b5:80:99:e5:94:76:
86:71:f6:62:23:97:7f:34:fe:b9:22:fb:f9:b4:99:0e:8a:93:
8d:1c:97:3d:aa:d4:5b:ba:3e:b1:fa:9d:ad:60:ce:31:e0:f0:
cc:4a:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:23:09 2025 by rpki-client