Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: KNHvVu8fJUMYEyN2Hvq60TT1sG9O9mnXBM6+OPX88tk=
Subject key identifier: B3:DB:2E:E5:A4:C7:4E:EB:AC:1D:38:BF:E4:48:A3:B5:EB:2C:AE:D5
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 0196C7CCF5346596CA392E8787747B279B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 1330
Signing time: Tue 13 May 2025 04:00:20 +0000
Manifest this update: Tue 13 May 2025 04:00:20 +0000
Manifest next update: Wed 14 May 2025 04:00:20 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: C+UcJ2cNXhhOQpIzmAN+/GAW9oAm6fZXOocjBbM0kbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cc:f5:34:65:96:ca:39:2e:87:87:74:7b:27:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: May 13 04:00:20 2025 GMT
Not After : May 14 04:00:20 2025 GMT
Subject: CN=b3db2ee5a4c74eebac1d38bfe448a3b5eb2caed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:b3:f4:28:da:4f:cc:e2:e4:b7:bc:ad:bc:
9b:4d:ea:cc:c2:51:64:e0:e2:7c:4a:dd:1f:72:01:
d0:eb:06:f9:c0:bc:64:e4:1b:20:c6:a2:96:e4:ae:
2d:c6:ca:df:d2:0a:ca:75:ce:04:22:c5:29:3d:39:
f8:6f:b2:15:9c:51:02:46:40:f3:02:da:a5:3e:05:
f8:05:2a:98:ee:a1:91:28:94:9d:9a:1b:b6:f2:1f:
2c:77:11:7e:a6:1e:61:11:3f:88:10:c1:d7:e5:66:
b5:c2:fa:1d:db:30:5e:75:85:97:71:d7:68:09:94:
d8:0a:a3:94:0f:a8:8e:c7:21:99:fc:89:4b:b5:52:
54:65:20:84:62:bc:c6:65:22:7f:b4:0c:57:d8:3a:
23:23:40:58:73:1d:6e:1c:3e:82:14:92:59:63:d8:
08:f9:c3:ea:ff:8c:8b:04:df:fe:24:f4:22:46:9d:
f3:fc:31:3d:13:a0:df:af:d3:ff:89:1b:61:0b:8e:
0c:07:57:44:64:ae:b3:72:45:25:a3:e4:56:82:df:
a9:9c:c6:be:7c:6f:65:c0:0e:40:3c:8c:f1:67:d1:
26:17:db:d6:c0:af:08:c1:19:a3:aa:70:75:7c:3b:
c0:ed:8d:39:93:c7:41:71:88:f4:7b:81:a4:9a:fb:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DB:2E:E5:A4:C7:4E:EB:AC:1D:38:BF:E4:48:A3:B5:EB:2C:AE:D5
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:63:00:1d:05:02:d4:cc:9e:7f:07:8b:0c:58:fb:e1:14:40:
42:5f:30:98:e3:9d:7b:8a:62:90:4e:d9:e9:7f:13:86:b4:24:
63:98:e9:9a:a2:51:05:5c:cc:e7:f6:0a:3d:91:c6:13:41:f8:
dd:85:b7:81:8b:85:d7:35:53:70:f2:27:d0:fe:3c:66:96:db:
d3:22:e3:cf:24:8e:44:b7:55:7b:03:54:c2:16:af:8d:ed:ca:
eb:a3:91:24:87:a8:fb:9c:cc:a4:c8:a9:a5:4b:3a:33:8a:b2:
a7:e1:92:ed:9c:86:3b:9d:c5:fc:64:76:64:52:25:be:96:4f:
9b:fb:53:b0:cc:ef:76:d4:21:94:f1:fc:35:60:b8:64:fe:33:
8c:c3:d3:68:df:6e:cf:34:71:2f:88:3d:42:f9:03:ba:d7:28:
bb:c2:61:82:d4:6e:64:54:db:36:cb:d8:af:ba:fd:1f:7e:1b:
4a:ca:12:71:2d:de:a7:b4:8d:de:19:60:c0:31:27:52:52:7b:
20:f4:ac:0b:da:1d:ef:72:61:7e:9a:a6:2e:e7:74:b9:9a:0f:
3d:85:20:03:1f:a7:2d:73:34:af:8d:39:16:c8:dd:33:92:1b:
a2:41:e2:77:86:f0:d8:3f:ac:29:03:c0:82:4e:82:3b:ce:53:
60:38:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:47:44 2025 by rpki-client