Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: nZSBYzzN6eN2JGgmreJM8I7vVyQEkc5ShrGQKzrDmMU=
Subject key identifier: FB:08:35:13:03:7D:C6:6D:E5:2F:45:4D:80:D3:61:7F:20:27:67:20
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0196BDEE90F24CCE25AFE8FB1E9287F9378F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 06:00:50 +0000
Manifest this update: Sun 11 May 2025 06:00:50 +0000
Manifest next update: Mon 12 May 2025 06:00:50 +0000
Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: 11LDp4G+Kz6pva/n0YHfnnS4qpTLUK2pkNjzN4s2Llg=)
3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:90:f2:4c:ce:25:af:e8:fb:1e:92:87:f9:37:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: May 11 06:00:50 2025 GMT
Not After : May 12 06:00:50 2025 GMT
Subject: CN=fb083513037dc66de52f454d80d3617f20276720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:9d:f2:31:78:bf:1e:ab:ae:7e:af:55:e7:
85:d4:2a:61:de:42:1a:12:15:31:07:1f:8e:06:d0:
c9:e2:99:a5:3b:60:4c:54:a0:e7:4e:1d:77:63:a5:
8c:36:ad:be:e7:6e:44:36:05:b1:2e:2b:e2:d9:68:
6f:8d:85:36:0d:16:0d:52:2b:56:4a:e6:8b:09:dd:
60:f2:90:da:f3:f3:58:f0:45:94:45:da:6b:85:d6:
01:0e:e1:f9:a0:e2:a9:65:b6:d0:da:ce:fc:c5:68:
d1:04:69:24:50:8d:13:23:22:2e:d0:ac:a1:4e:9f:
41:a3:d6:70:1f:0c:d0:52:91:5c:14:75:c3:cf:a5:
d0:81:93:6e:a6:ac:00:b0:8d:25:30:bd:05:f6:62:
bd:65:28:53:24:2c:8e:ad:e4:c7:3a:d0:b9:57:89:
d5:a4:9b:89:6a:94:9f:9d:5e:34:52:80:f8:49:59:
70:1f:90:10:1b:fc:8c:17:11:7d:04:6b:44:0b:a3:
38:c7:da:f4:cf:1d:83:a0:97:f0:33:c2:f9:4d:d9:
7d:5e:34:b4:68:47:0d:ae:13:9a:7b:68:8d:b8:25:
5c:b0:d8:45:b5:ce:93:cf:39:89:b9:cf:3b:25:d3:
35:da:40:c8:12:dc:00:d0:db:de:b9:05:9f:2d:50:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:08:35:13:03:7D:C6:6D:E5:2F:45:4D:80:D3:61:7F:20:27:67:20
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:75:e4:6f:6c:46:7b:2a:c1:ed:cf:cd:69:e6:55:26:4b:58:
05:0d:19:a1:90:40:32:f7:97:2b:70:3f:60:f1:32:a1:29:b2:
10:8e:24:c9:d4:51:73:61:95:57:5d:58:b7:b1:75:3c:12:89:
e9:ac:b0:49:e3:db:c0:f9:fe:7a:49:74:49:ee:0f:67:5b:6f:
ff:16:35:8e:4c:31:95:af:a1:ed:ba:ef:27:cc:74:dd:54:8e:
b6:ab:43:df:97:60:52:2f:35:03:86:e0:a0:8d:d5:50:1a:ff:
60:51:d5:9a:6d:7a:db:21:50:49:25:12:8b:c7:5a:e8:22:c8:
86:38:a3:ba:01:43:62:ce:1c:83:d0:98:af:37:58:62:47:58:
3c:6c:e7:b6:7e:75:e2:cd:e0:bc:61:db:66:59:e7:07:86:a9:
cf:c3:7d:72:9a:b9:97:b2:dc:9e:df:6e:f0:06:f7:b7:b0:b7:
b0:19:92:b0:72:2f:22:d4:7b:58:b5:d9:ee:03:37:e1:67:b9:
e7:39:1d:6a:30:25:55:e0:b7:95:40:70:b4:62:b2:23:4a:cc:
04:c3:5f:b0:9f:4f:85:3e:6f:12:60:86:e5:ce:ef:b1:4f:a3:
2a:b0:e7:c0:55:2e:9d:33:f2:4e:26:ae:2b:e3:6f:f2:e6:d5:
5c:1c:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:00:11 2025 by rpki-client