Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: xlagUijaJhyiO+/CYtArWL/2/eMVnmextJL73rASaGE=
Subject key identifier: 0A:90:19:2F:02:65:F6:4A:A1:E4:AA:A4:5F:84:1D:EE:97:93:43:88
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 0196C013A78481DC5AD379D5E882D1C2BB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 16:00:35 +0000
Manifest this update: Sun 11 May 2025 16:00:35 +0000
Manifest next update: Mon 12 May 2025 16:00:35 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: tZyGwUeg9XO2i2bBFJgasr/BUICZmp5eN8zlHnwWhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:a7:84:81:dc:5a:d3:79:d5:e8:82:d1:c2:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: May 11 16:00:35 2025 GMT
Not After : May 12 16:00:35 2025 GMT
Subject: CN=0a90192f0265f64aa1e4aaa45f841dee97934388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:46:47:de:d9:f0:e2:91:cf:ad:2f:72:f8:
41:99:e8:07:e6:dc:05:a7:c2:d9:9a:36:ef:42:5e:
3e:78:a2:3a:9b:d7:21:6a:27:c2:b1:0f:75:a7:3b:
bb:4a:0a:a1:b0:3e:bf:7f:16:f3:38:75:0f:c4:56:
3b:33:93:44:28:f1:b9:4c:2f:c2:a5:1a:de:b6:14:
a9:e1:99:5b:15:f1:d2:6d:b3:53:9e:35:7e:69:c8:
53:46:22:27:fc:93:83:50:3a:d8:e4:73:5d:d6:62:
b8:6c:b7:1d:c8:2e:2c:38:1e:a8:07:dc:4e:8d:53:
af:e4:ff:56:c7:ee:e1:78:73:45:97:8e:34:58:4c:
49:6f:1b:5e:d0:ed:9e:3b:50:41:1e:0f:b9:77:f8:
29:bf:80:c2:e3:2c:9a:ef:bf:e6:8d:e4:82:28:91:
e4:c8:f3:63:87:f9:97:b9:d5:96:1a:de:f5:b7:ce:
35:f3:bc:2d:39:69:71:c1:ed:60:e6:eb:dd:65:0f:
bc:c7:f6:c6:5c:ee:30:e9:a2:c1:1b:d6:5b:8d:6c:
78:bf:c0:01:f1:2b:16:74:85:f1:91:8b:eb:b8:9c:
73:b1:44:ac:67:ae:21:1c:80:b0:9b:cc:82:e3:24:
10:a5:4d:4c:7e:36:0e:33:91:f0:a9:25:56:3e:7a:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:90:19:2F:02:65:F6:4A:A1:E4:AA:A4:5F:84:1D:EE:97:93:43:88
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:47:d2:c7:f3:89:ed:63:07:6d:fc:92:98:c0:c2:60:fb:e6:
71:ad:69:51:39:e7:ab:cc:78:79:61:60:97:db:26:8e:99:05:
fb:38:1b:b1:ce:85:e0:0e:e2:96:8e:a2:a1:47:6f:28:13:83:
f3:8c:fe:c4:0c:6c:8e:7f:d3:90:4e:17:0b:e0:38:c0:5f:58:
36:46:18:0f:11:09:31:fd:b9:b1:ab:63:a4:02:13:ef:a8:b5:
be:51:8f:45:48:fa:5a:e9:ec:32:d1:2a:fc:d9:48:59:b6:1c:
8a:af:48:94:09:f5:c0:c8:77:64:bb:99:8a:dd:a8:7f:06:99:
f9:69:f8:38:ab:78:cf:b4:de:8a:4f:20:a6:72:17:51:2b:10:
16:85:29:50:0d:70:b6:7b:2c:66:be:8f:a0:c0:23:45:48:b3:
71:8b:b6:19:14:1f:45:bc:d4:8a:e9:1e:a1:c3:b8:a0:da:f1:
76:cb:eb:db:d1:02:65:47:5b:f6:af:5a:1e:65:fe:3e:14:84:
5c:9c:f7:71:15:bb:fa:ca:df:97:da:79:ed:ef:1c:9b:13:ee:
ea:cd:6b:34:e1:cd:34:39:df:8c:11:87:5c:ab:7b:64:4b:da:
16:2f:f8:36:7c:d9:fd:ea:09:99:fc:e7:5d:ad:9f:7a:42:85:
83:15:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:22:24 2025 by rpki-client