Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
File: b13p-du9RhiFe1gQXGdDcgoRvG4.mft (raw, json)
Hash identifier: oFFsXX3mPyk5DLw/hMXkLL66JLddh78tLGwfrCURVGI=
Subject key identifier: 28:AB:4C:73:21:F6:C1:45:03:6A:FC:DB:57:07:76:AB:17:F9:18:A0
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 01969F0802B2B95CB1D4FA70D1C41DF422F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 06:00:24 +0000
Manifest this update: Mon 05 May 2025 06:00:24 +0000
Manifest next update: Tue 06 May 2025 06:00:24 +0000
Files and hashes: 1: 8DoxxFomKD_zymJ7maQao4Dgi38.roa (hash: AGu4l/EpDaIWVAApJov5+PsDhMXLA5NiuSkK6swCSP4=)
2: GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa (hash: pE2Dj5yrvDRhlXyXHQIl24tLKcXekRo8xAVslPDVPZ0=)
3: b13p-du9RhiFe1gQXGdDcgoRvG4.crl (hash: bKwQk5noq/D72ePPZup+uaOhB/evRgj3m/ChaL/e47o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:02:b2:b9:5c:b1:d4:fa:70:d1:c4:1d:f4:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: May 5 06:00:24 2025 GMT
Not After : May 6 06:00:24 2025 GMT
Subject: CN=28ab4c7321f6c145036afcdb570776ab17f918a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:b5:e6:ec:ff:81:e1:af:a9:7e:08:14:f0:
ea:1f:66:e7:1a:14:4d:1c:28:44:b6:a1:4d:d8:48:
07:ee:7f:09:a8:be:72:ec:6b:cb:bd:19:ee:79:19:
04:c5:b4:16:ab:2c:79:e9:4c:be:1e:43:e6:08:2a:
d4:05:5c:92:d6:a8:45:85:87:c9:f3:dc:d0:62:2b:
65:5c:c6:db:57:79:b3:bd:8e:b5:d1:45:18:2b:82:
dd:18:18:4e:6f:ef:00:bd:07:a0:ce:29:41:ef:74:
54:bc:c6:96:9e:15:66:ac:13:28:fe:40:91:70:47:
13:41:f3:f6:0d:68:0e:2b:de:25:52:f7:16:02:53:
02:d5:c9:08:6f:8e:df:b9:80:fa:cb:da:f7:3d:be:
a1:5d:3a:e2:22:e1:2a:8f:77:60:7e:37:07:a4:9d:
50:1d:bb:15:a3:fa:52:16:d4:85:ed:85:eb:9e:33:
f7:e3:7c:0f:61:83:5d:b1:67:c2:59:d8:6c:ff:de:
c2:f1:e7:6e:fd:a6:f5:e9:71:e5:78:c7:c3:61:65:
a4:83:1c:c9:aa:c8:2f:8c:cc:1b:c6:e7:34:0c:e0:
7c:01:63:d3:61:19:ea:78:08:06:c6:59:50:af:f2:
f1:32:70:0f:6b:cc:eb:7c:8c:83:44:17:a0:f7:7c:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:4C:73:21:F6:C1:45:03:6A:FC:DB:57:07:76:AB:17:F9:18:A0
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:90:fc:fa:39:86:91:16:e4:27:83:9e:9e:90:17:b2:37:b1:
e8:dd:dc:92:5f:08:7b:9d:5f:67:3e:25:29:48:29:85:55:25:
19:0d:cf:ab:14:0f:98:7a:66:2d:dd:eb:5f:6a:ec:81:a8:f6:
46:31:0a:4f:56:b7:7e:c9:13:ec:5f:b1:67:21:f2:5b:63:68:
9b:03:50:71:cf:8a:93:58:3d:40:a3:57:73:72:c1:30:ab:de:
6c:ed:9e:4d:58:ca:c3:18:0c:f1:a7:4d:76:8b:29:23:33:93:
56:b4:22:b5:ea:be:89:61:27:03:42:94:3e:75:b6:e0:32:19:
06:28:ba:cc:69:bd:4f:0d:3e:f9:b9:21:f8:08:8a:f5:1d:46:
08:30:d5:42:cb:e4:d1:f9:c7:1b:11:0a:56:09:0b:3d:53:27:
ff:88:97:eb:12:63:e0:04:ac:4e:1e:10:15:a4:31:25:0e:3a:
4a:20:c9:e4:e8:14:f2:23:22:17:27:75:ec:2c:f5:f6:8b:5d:
0d:f6:77:12:1c:48:e4:ec:30:fe:8b:5e:84:e5:17:9b:de:87:
de:50:5a:ed:82:ae:45:ac:89:e5:0c:da:19:42:77:ae:37:07:
fc:14:18:bd:32:09:93:b6:86:25:20:60:d4:07:63:b3:12:6b:
af:17:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:21:34 2025 by rpki-client