Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: stXQkOQM56r8SNSjkGL/YIy+hDdk+UUJWmRoyHokRtg=
Subject key identifier: FD:B4:A5:F6:98:6B:38:46:AB:A7:2B:54:34:11:D7:6E:BA:9D:32:B2
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 0196BA48EC3E0549F736838DF320FA8BDDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 1538
Signing time: Sat 10 May 2025 13:01:03 +0000
Manifest this update: Sat 10 May 2025 13:01:03 +0000
Manifest next update: Sun 11 May 2025 13:01:03 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: twrtMXfZ+9aAGz3SmhytsqLtQevuUhle7HBdRl7Jp08=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:ec:3e:05:49:f7:36:83:8d:f3:20:fa:8b:dd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: May 10 13:01:03 2025 GMT
Not After : May 11 13:01:03 2025 GMT
Subject: CN=fdb4a5f6986b3846aba72b543411d76eba9d32b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:4c:4a:1f:b6:d8:d8:5c:b1:45:43:19:42:
45:1b:ab:2e:72:d7:a6:3a:db:72:64:d2:0b:a2:9b:
39:b6:fa:96:b7:2f:58:a0:23:7f:9a:f8:bc:bb:04:
3d:12:d1:5d:49:7d:5b:36:36:b2:5c:29:65:f3:44:
08:90:e2:2f:db:9d:82:7c:57:2d:44:86:e8:e5:de:
4c:5a:c3:fa:6d:9e:03:98:66:75:8d:4b:b1:57:8d:
c4:2b:50:e5:08:ad:87:42:98:a2:1d:0b:14:ec:b4:
c4:4a:65:91:27:92:98:dc:34:42:d2:12:3d:19:0c:
69:74:9c:39:f0:01:cf:73:00:2f:51:52:99:16:bb:
2d:93:32:c0:ae:e6:d4:80:f1:7a:a9:b6:bf:1e:08:
dc:38:46:53:1a:70:d5:bb:b8:76:68:d3:28:b2:a6:
34:e6:db:00:3d:0f:48:9c:a0:18:8f:cd:32:6b:7d:
f8:69:a0:21:11:69:55:d4:fd:35:98:e2:08:9f:24:
ee:f9:d6:76:29:3d:43:76:ea:bc:b1:c1:64:be:73:
be:e5:c8:b3:a8:46:b4:8c:13:96:6e:05:1d:5d:31:
9e:7e:c1:11:04:94:73:c9:6c:63:37:18:51:9e:07:
45:57:10:ca:18:d1:1f:3f:ce:11:b2:3e:05:16:d7:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B4:A5:F6:98:6B:38:46:AB:A7:2B:54:34:11:D7:6E:BA:9D:32:B2
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c6:0a:38:0b:c9:7a:ee:c2:39:a4:74:e3:6a:44:5b:2a:9d:
4a:89:6a:9c:9f:0d:49:1c:f4:ee:4a:8a:42:e5:e1:61:f1:10:
de:18:69:b5:e0:08:fb:cb:db:4a:29:58:d9:0c:4b:7d:5d:89:
f9:81:29:59:07:ef:c2:e3:25:51:bd:49:81:b2:a2:0a:aa:ad:
ac:eb:27:48:fe:b1:95:1b:75:11:2a:5a:76:ab:0c:3f:7d:28:
68:80:fc:1e:ee:c7:d7:62:22:2b:aa:93:e7:a6:3f:91:d4:21:
ed:ef:cf:4b:7e:5b:68:14:07:4a:b5:e8:71:35:c0:8a:7b:d3:
ef:25:03:d0:a3:06:7f:7a:a4:2c:1e:87:bc:c4:d1:70:88:10:
3a:eb:f6:d4:4b:d2:dd:0b:2c:ce:56:aa:d3:2a:56:43:07:31:
5e:18:fc:ca:b9:52:5b:de:a1:94:a1:fb:ec:f3:af:19:59:9d:
17:4e:d5:6a:cc:4b:47:49:2b:2e:1b:a5:43:65:47:20:bb:fa:
51:45:dd:dd:14:9f:6e:ac:9a:bb:62:45:f5:c3:49:96:1b:81:
e5:71:f4:c7:c9:3a:d3:93:96:3d:90:cb:90:a0:dd:98:1a:aa:
4b:0c:66:87:91:32:67:71:c0:a5:1b:8e:42:b4:f8:98:d0:8c:
02:70:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:56:25 2025 by rpki-client