Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
File: 4gjsufNMH7w_NYlxCrPjSfxilcw.mft (raw, json)
Hash identifier: M6gA7duRIWRk6JmkOPb+FGzYu5Xn59Err2eG3tgiIB4=
Subject key identifier: 7D:36:EE:C7:3F:F4:46:F2:58:1C:82:C8:6B:B8:3D:F4:93:BF:F1:FF
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 0196BE5C8163DB18BB711E20289CD568FB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
Manifest number: 10C8
Signing time: Sun 11 May 2025 08:00:55 +0000
Manifest this update: Sun 11 May 2025 08:00:55 +0000
Manifest next update: Mon 12 May 2025 08:00:55 +0000
Files and hashes: 1: 39GioKK3WEGVHUJnnBWLgIR7aNY.roa (hash: 3gqoQOG5P9GOvXCGTNdrghx/0+bSTD9OjFYFlfXtSYU=)
2: 4gjsufNMH7w_NYlxCrPjSfxilcw.crl (hash: RMVUIf/GKjXQgTm0UuT9xL0eEfpcq8UJSSxfQP8v/ZM=)
3: TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa (hash: Xr3qy5kR4VkDonVYgHy7lT3Fh2h3GWbp6XrLzLyjUKY=)
4: kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa (hash: t4mIO0DzkdS2UrnCzo5GKYBcHXxNS07JIm04JWEYKII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:81:63:db:18:bb:71:1e:20:28:9c:d5:68:fb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: May 11 08:00:55 2025 GMT
Not After : May 12 08:00:55 2025 GMT
Subject: CN=7d36eec73ff446f2581c82c86bb83df493bff1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:6f:71:3b:7a:0d:57:60:77:82:54:8b:73:
8a:03:7a:e0:e5:c9:d7:33:57:25:b1:97:7d:83:de:
cf:f7:a7:c9:cf:85:5a:71:59:0f:40:e4:24:66:e9:
25:23:de:82:02:94:aa:1f:70:3c:89:f0:1d:08:70:
90:9c:14:8b:95:11:0b:df:1b:7d:80:7d:92:8c:d3:
f5:74:02:07:1d:01:cf:5f:c8:1a:18:cc:d7:e4:73:
fd:53:cc:80:b8:cc:53:5b:b2:b8:85:d2:8b:a5:31:
8a:5b:fb:ec:d2:e7:d0:7e:5a:64:40:33:d8:02:ea:
cb:f4:c6:07:81:3f:3d:fd:8e:97:61:6d:f0:30:32:
a3:19:63:ac:d8:62:da:44:fe:9a:5c:99:9b:ca:f3:
5a:eb:f3:3a:23:2b:af:dd:19:8a:c1:17:46:8d:49:
d1:7f:cc:af:70:cd:87:75:c7:1c:a8:36:8b:62:91:
ab:b6:a2:da:ed:af:dd:bc:be:6f:aa:c0:46:19:f4:
d0:de:71:f1:ab:f3:88:bb:52:fb:e7:4c:fa:6b:4c:
6b:c8:4d:7e:7d:85:c9:56:6b:f4:ab:84:34:1e:e0:
b6:37:54:3f:44:83:6a:32:85:7c:37:85:0b:c3:82:
05:a6:2f:38:de:f7:b0:57:0e:46:66:dc:1c:2f:9c:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:EE:C7:3F:F4:46:F2:58:1C:82:C8:6B:B8:3D:F4:93:BF:F1:FF
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:12:6a:93:d9:1a:13:2b:5e:85:d0:5e:fb:89:a8:63:6b:6b:
8f:99:ff:8c:cf:a2:c2:5f:95:3d:c0:94:d7:75:d3:cd:f3:3f:
42:f7:ba:72:4b:38:80:8b:c5:2b:b1:30:aa:93:6e:62:77:e9:
5c:33:e2:d2:7e:99:51:db:ac:00:55:6e:ba:d2:5a:4a:fb:0f:
76:bb:42:66:63:0b:87:b8:a1:8c:33:99:48:2a:04:11:e1:0b:
c2:33:c8:4d:be:13:3e:2f:05:0a:71:2f:81:35:15:50:ef:78:
07:46:80:99:a8:93:7f:8a:80:e2:49:2a:43:aa:4f:3c:61:02:
b9:28:c5:fd:95:39:52:95:e7:6f:34:c9:90:0e:4c:61:85:43:
73:c0:50:50:94:9f:f3:66:17:a7:20:dc:b1:77:ad:29:49:80:
b1:91:9b:41:d4:d0:1d:d8:a9:c6:30:43:ba:5b:46:5f:ba:b2:
cb:f2:e0:75:2f:b3:a1:e3:8e:22:77:d3:b0:75:c6:5d:82:e3:
37:96:d1:7d:ae:ae:0d:79:8a:38:6c:12:86:a2:67:6e:03:24:
9f:69:bf:10:a5:6b:ee:dd:b1:0b:f2:ba:09:9d:b5:d3:02:06:
f5:79:32:98:df:64:50:5a:fa:dc:c4:5b:c8:59:72:67:58:6f:
7a:b8:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:50:48 2025 by rpki-client