
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: OVEEhRXpTm5jNdkDmP4AqHVGSz6CRwcAHalPwMDgzDM=
Subject key identifier: 14:F8:EF:0B:6B:C5:46:D5:A1:74:8A:46:6F:C3:7D:67:1F:A8:1F:37
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 0196BD492B966369032EB08E9AC25584336F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 07B4
Signing time: Sun 11 May 2025 03:00:11 +0000
Manifest this update: Sun 11 May 2025 03:00:11 +0000
Manifest next update: Mon 12 May 2025 03:00:11 +0000
Files and hashes: 1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: JyNo2RTR3BqNj2OXd3cvMwk0MLgUuo8l1+5lHRigwhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:2b:96:63:69:03:2e:b0:8e:9a:c2:55:84:33:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: May 11 03:00:11 2025 GMT
Not After : May 12 03:00:11 2025 GMT
Subject: CN=14f8ef0b6bc546d5a1748a466fc37d671fa81f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:6d:d3:17:04:41:a5:bc:fa:b4:6f:a9:6d:
68:62:12:30:d5:75:24:c8:24:02:97:1a:86:6a:0f:
bc:12:0b:07:4b:d8:eb:9f:9c:b9:f3:63:be:1c:26:
10:dc:d0:1b:f7:c3:05:d3:89:61:5a:64:91:be:d1:
f7:11:fe:02:ad:a3:48:cd:f4:f5:55:65:2d:eb:08:
c8:a5:d3:0e:f5:b0:37:49:0c:6e:56:94:de:2f:e8:
b8:94:2a:1c:12:3d:2d:dd:03:97:3e:45:69:bf:98:
a0:0b:eb:f7:62:e9:cf:8b:d3:71:89:a9:72:10:c1:
28:64:20:93:d0:db:00:fe:01:10:0f:a1:fc:0f:52:
5b:52:19:5f:3a:96:9e:31:cc:11:ca:95:01:84:32:
e2:78:61:c2:b8:f2:af:cb:84:97:a3:0e:d0:b9:9d:
aa:10:f3:d0:e1:c4:9e:bb:b7:28:85:6a:06:68:bc:
52:30:3f:7c:95:82:6c:9c:03:c0:10:e5:08:de:37:
ff:9a:81:5f:9f:a4:ba:7a:8a:4c:00:3b:9b:d6:9a:
ef:f7:e1:90:a1:60:7b:86:64:5d:a3:09:cb:c1:f1:
cf:6d:0a:dc:3e:d6:f5:27:57:ca:e5:8c:47:33:99:
a3:15:1b:e8:bf:4e:03:b4:69:d2:88:79:44:b9:a5:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:EF:0B:6B:C5:46:D5:A1:74:8A:46:6F:C3:7D:67:1F:A8:1F:37
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:0c:2c:9c:45:05:a1:e2:d9:36:37:14:df:28:28:6e:4a:
ee:3d:50:f0:61:e3:5d:36:92:c6:4b:2d:ac:e9:14:a2:43:87:
f1:6f:74:c0:ea:09:46:82:7f:5e:40:a0:ef:97:af:47:b5:e8:
12:aa:33:fc:3b:78:e9:44:c6:5d:67:18:07:96:05:8a:59:9c:
e5:d2:72:d1:e0:f6:19:86:23:f2:6c:e4:4f:57:78:43:19:7c:
a5:73:20:44:39:81:d1:a1:60:3b:3f:bf:f0:7a:f0:64:84:99:
d2:2a:35:bb:f4:9c:24:b2:c3:4b:92:0c:33:2f:c8:66:8a:16:
54:a3:3e:ff:b1:95:7d:44:4d:f8:f3:4e:ee:fa:11:2c:a3:83:
fc:3f:81:2b:f4:ef:35:41:48:cf:17:3c:35:ef:19:12:58:3a:
ac:1b:40:06:7a:c1:cb:70:84:6c:f8:93:c9:89:ac:e3:fc:90:
c9:26:a8:b2:1b:3c:70:5c:d5:e4:d9:f8:97:dd:b5:5a:bf:e7:
c5:a5:0e:9f:6e:d2:77:50:23:44:f1:cc:94:32:87:05:02:eb:
de:1b:26:d9:5c:bb:49:c7:dd:79:3f:f7:0c:0c:2f:31:eb:f2:
1a:5e:21:84:1c:16:ab:28:e8:9f:e1:12:81:cb:9a:be:77:c7:
93:1e:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:38:20 2025 by rpki-client