Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: pZ53hs24Y3uhakhwthFG1G2fZD4gQ7htYkncbMj1WvY=
Subject key identifier: 1C:2B:30:9B:ED:69:B7:8C:17:3E:86:33:0D:C0:85:92:37:40:A6:FA
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 01969C74F0C27C0D8DB9CF2880E9A5051A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0967
Signing time: Sun 04 May 2025 18:00:31 +0000
Manifest this update: Sun 04 May 2025 18:00:31 +0000
Manifest next update: Mon 05 May 2025 18:00:31 +0000
Files and hashes: 1: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (hash: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=)
2: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (hash: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: BA464dBNJichyPFg32XGwAvngz3UzlsgRo78C1uyxoI=)
4: tI9ka3nY65XI0hS6cPovdv7yr60.roa (hash: +06LGDfkS/BJNhqCcOcJbY1vvOjfeeWWAoEc0fhS6DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:74:f0:c2:7c:0d:8d:b9:cf:28:80:e9:a5:05:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: May 4 18:00:31 2025 GMT
Not After : May 5 18:00:31 2025 GMT
Subject: CN=1c2b309bed69b78c173e86330dc085923740a6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:ee:45:21:b3:6c:de:f3:a8:bf:6b:a2:cb:
dc:36:03:fd:bc:7d:f3:01:c0:27:99:d0:fb:2e:cd:
5e:51:30:b1:5c:34:52:a3:bb:43:3b:f2:03:b4:67:
d1:ff:45:a5:35:dc:94:a4:de:60:05:b7:88:ea:40:
96:07:ad:e7:eb:4c:4b:fe:02:f7:f6:2d:9d:80:c0:
1d:40:07:c4:e4:19:78:e7:13:2e:8d:ef:4a:f5:03:
f0:46:5c:c2:fc:34:98:83:be:fa:52:75:6d:54:6a:
9a:19:55:6f:fe:70:1a:a0:d9:e3:43:02:04:f5:80:
06:f2:59:f5:3e:41:b5:9c:f8:c7:c1:86:9d:aa:5d:
a7:a5:a4:79:c9:bb:04:ab:2c:bc:e2:c3:13:2e:f3:
3b:a1:1e:dc:2b:cb:d6:80:bd:4b:9b:87:6e:5b:86:
76:41:2b:d1:4c:00:b6:a5:d1:85:8b:d2:17:a1:aa:
ca:32:67:96:a6:81:bf:8c:f2:14:e4:2f:bf:e6:3c:
df:ca:1e:2f:7b:78:9a:3f:29:24:92:5a:fd:a7:a9:
56:54:79:db:34:2d:76:52:8b:d3:1a:c6:fa:06:72:
be:33:d6:00:9a:8f:f0:f6:34:b3:8d:bb:ae:99:ec:
e1:6c:80:bf:02:40:1e:86:95:7f:10:2c:5b:ed:40:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2B:30:9B:ED:69:B7:8C:17:3E:86:33:0D:C0:85:92:37:40:A6:FA
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:c3:fd:04:e3:bb:f8:4a:94:10:66:83:02:d2:df:ae:2d:
bb:a9:bf:ad:01:6a:25:6f:b0:49:54:c3:ba:32:06:49:8e:b7:
01:40:86:8b:04:fd:c4:b6:2d:86:02:64:b7:2e:38:59:d6:90:
f5:9b:ea:c9:19:e8:f4:52:50:e2:bf:1b:59:0e:9f:ce:97:74:
23:21:4e:d6:82:11:12:35:8d:5a:db:1d:33:f9:ff:3f:4f:9b:
8b:b8:38:d7:d4:b4:60:b9:15:78:68:bb:81:73:3a:ae:c4:a8:
c4:8f:ec:1d:1a:b4:31:4e:b6:44:c5:dd:15:08:c3:82:be:76:
b8:77:fe:6c:db:6b:8d:1c:8a:40:5c:a4:d5:db:95:8c:4c:e3:
95:3a:6f:d4:c2:9f:a4:a6:8e:d0:cb:94:fb:ce:cc:03:58:e8:
08:7c:6c:4a:d3:65:2d:ad:c3:7b:fa:f1:91:aa:e9:e2:fb:90:
9d:3c:f0:ea:2d:20:27:97:66:ac:e4:a9:e9:60:88:0f:90:06:
10:29:b3:c5:07:cf:5f:65:3a:63:93:d2:f8:a2:e6:72:0a:a4:
40:04:09:3d:97:0f:b4:b7:c6:ff:5d:50:45:cc:c5:a2:b1:6a:
02:56:78:df:3a:db:e9:b4:27:b4:6a:12:29:58:33:41:20:ee:
15:74:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:03:34 2025 by rpki-client