Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier: zP81CBtVAELv/eio5/nwy77n9pUHeM46ycUNYSNJN08=
Subject key identifier: 80:28:A1:C3:A2:E3:90:30:D5:39:17:53:28:0E:4D:38:FC:1A:67:4C
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 0196CA60503C8FA888EBB70A9E6470B9D21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number: 0FDF
Signing time: Tue 13 May 2025 16:00:31 +0000
Manifest this update: Tue 13 May 2025 16:00:31 +0000
Manifest next update: Wed 14 May 2025 16:00:31 +0000
Files and hashes: 1: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
2: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: cv5ap/DZ9D+tD258nqNzjF+d1QaQIsusgliQ7g+m6nU=)
3: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
4: hP4RlSdcYGNnTpuPiY_-lw9F7k8.roa (hash: C3TpjMqyfvy/eCoQ7B0XWPy+vgrcOa/QV9L4/p4cn7c=)
5: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:50:3c:8f:a8:88:eb:b7:0a:9e:64:70:b9:d2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: May 13 16:00:31 2025 GMT
Not After : May 14 16:00:31 2025 GMT
Subject: CN=8028a1c3a2e39030d5391753280e4d38fc1a674c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:63:58:ea:66:11:7b:dd:43:37:71:7a:96:
74:25:d7:1f:68:4b:a3:06:34:b1:b8:a8:cb:be:57:
9f:fc:04:91:ec:de:95:dd:c4:bb:94:5a:d5:4d:99:
bd:23:14:a0:71:59:18:4c:81:c2:98:a5:c0:71:fc:
2e:52:9a:cd:de:5b:02:06:89:78:88:03:b1:f7:d5:
ac:7a:f5:4a:5c:03:1a:4b:84:23:d8:7d:f2:bf:ca:
5e:33:c7:aa:2a:88:96:da:4a:9a:bd:b2:2b:7a:b1:
1e:94:c9:02:d7:a2:15:0f:9d:59:8d:ae:6c:eb:8b:
89:e1:8b:ae:17:9a:a7:e1:6e:21:3b:45:a6:07:ba:
41:3e:11:c2:8b:c5:04:d4:ce:80:82:eb:61:c3:c3:
06:ae:b3:e0:d9:6c:1b:78:03:76:4b:49:9a:3b:a0:
c4:a7:13:d0:fb:a6:79:6d:76:da:ea:1b:8d:ed:89:
ba:39:39:b6:cb:63:85:4a:d3:36:58:52:8d:f8:89:
d6:12:9a:4f:29:94:7f:c5:54:fa:ab:f8:4a:83:19:
8b:c7:92:ff:5c:02:cb:eb:d2:e8:d0:3e:69:9c:8b:
9d:28:77:e3:9c:10:c5:68:a5:0d:ac:2e:06:a2:a6:
fa:7e:fa:20:66:42:95:76:bb:9e:33:44:fb:1e:be:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:28:A1:C3:A2:E3:90:30:D5:39:17:53:28:0E:4D:38:FC:1A:67:4C
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ec:e6:54:e2:05:b0:a3:ac:ad:fa:8f:02:fd:07:80:f2:62:
49:86:62:7d:89:85:b8:f9:ac:dd:d8:b5:63:7f:fb:8b:7f:bc:
92:cb:21:65:bf:a5:40:2a:81:ed:18:40:ec:8d:1a:b8:00:9e:
07:55:d9:8f:1d:32:d0:08:31:dd:8e:83:be:b1:ff:37:fe:71:
41:64:ba:cc:7c:76:cd:f9:ed:9f:c7:60:31:dd:6f:e4:0e:bd:
12:0a:f7:bd:49:4c:f3:c8:57:eb:83:76:8b:3b:5d:f1:c3:e4:
77:c1:f9:1b:52:bb:47:24:84:1c:79:fd:ea:86:b2:ff:4e:91:
f1:6d:8c:cc:b1:ac:57:3b:bb:14:01:06:bf:67:82:f4:d3:05:
bb:3a:30:15:96:64:ab:f5:46:ef:15:00:bc:35:b9:4d:83:56:
03:34:85:9a:5a:ac:c1:c8:11:89:10:30:6a:c1:7e:cd:1f:67:
93:bf:d3:2c:97:a5:85:83:17:c1:71:26:0a:f3:d9:65:d9:5c:
50:9e:04:f7:d9:ef:25:b7:45:b4:ea:e9:06:d9:81:34:ee:7a:
09:58:d1:54:25:93:d3:02:0c:6b:60:6f:e6:77:2b:7b:a2:9b:
79:2e:9c:10:3d:ac:e1:7a:e2:94:47:11:98:ad:22:a4:4f:7c:
9c:5f:a0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:34:33 2025 by rpki-client