Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier: rEbH5ngArXbET3+M4WszcHsuSGBQYyz/sGtrfTu8U7s=
Subject key identifier: 02:CF:D7:73:9C:39:56:01:04:68:63:5B:E8:39:56:34:83:E2:11:9A
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 0196CD9852CBDC323CB29317887D01641073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 07:00:34 +0000
Manifest this update: Wed 14 May 2025 07:00:34 +0000
Manifest next update: Thu 15 May 2025 07:00:34 +0000
Files and hashes: 1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=)
2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=)
3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=)
4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: dKefHPT+rBC/3OLwMG9wOsXTinx/3ptPcfCAq4G0NCk=)
5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:52:cb:dc:32:3c:b2:93:17:88:7d:01:64:10:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: May 14 07:00:34 2025 GMT
Not After : May 15 07:00:34 2025 GMT
Subject: CN=02cfd7739c3956010468635be839563483e2119a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:f4:a6:19:7e:39:7c:6a:73:10:3e:26:3d:
56:7a:2b:d8:94:f2:b6:d4:98:bc:3f:33:fd:35:54:
ef:69:cd:8f:3d:fc:24:5b:fe:41:d2:9a:12:4c:47:
08:c7:c5:33:71:18:01:0d:3b:b7:7d:79:bd:5a:57:
7c:e3:ee:27:63:1c:11:a0:c3:94:75:11:db:96:38:
20:36:37:29:99:d1:f5:0f:72:dc:8f:91:39:0b:73:
d2:4e:eb:f7:29:a1:66:d0:0d:9d:33:f1:e6:69:bb:
61:44:33:5c:fc:08:47:95:07:eb:62:18:13:01:15:
c1:d7:43:2f:74:96:dc:b8:a1:96:67:76:c1:86:38:
29:45:9b:b8:1d:e3:8e:2e:3f:62:ef:db:13:b6:74:
a1:fb:72:0b:af:24:97:d8:9c:80:c6:a4:2b:76:9b:
fd:ba:3c:90:4c:25:3e:57:f3:4b:36:83:06:e3:a7:
be:85:96:d6:f9:48:d5:b0:34:a4:53:75:18:87:ff:
af:1a:70:05:e9:5d:2f:db:bb:20:e8:81:44:92:ce:
6a:04:14:e3:59:74:8a:fc:94:a8:f9:a4:b4:dd:ef:
9f:ef:83:40:6f:5e:23:16:6c:66:9c:0e:c4:19:a1:
eb:58:52:5b:27:7d:ac:74:d8:09:c1:5e:c1:26:bb:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:D7:73:9C:39:56:01:04:68:63:5B:E8:39:56:34:83:E2:11:9A
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:bf:91:1a:53:97:a2:be:ce:b7:27:fd:fa:d7:12:ba:71:
a6:34:1e:2f:8d:7f:13:25:05:59:78:6a:03:23:1c:0c:40:99:
6a:33:4b:92:54:93:bc:af:48:30:d2:d1:f7:cb:7d:ea:84:1c:
88:43:79:72:6c:50:c4:e3:f6:8a:3a:77:ee:cf:95:ba:11:83:
72:77:38:f9:a4:d8:3e:80:cb:25:2d:77:35:75:cc:69:4d:fc:
12:5d:69:fb:a7:86:b8:83:a1:1d:ba:ea:68:b8:91:b1:11:d9:
cc:2f:a1:8b:57:c9:ed:43:9c:59:4e:3d:d9:f8:f2:6e:f3:eb:
25:dd:1b:5c:53:28:7e:e5:64:cd:87:b3:0f:50:2f:67:0e:31:
25:26:07:b0:bf:40:40:b8:69:c0:a8:92:de:07:8b:30:64:41:
bc:20:2c:b2:bb:5f:c2:fd:58:6f:b7:44:b2:2f:b5:2c:0d:f2:
ce:04:5d:89:78:9e:b6:5b:da:95:b6:3b:5c:f1:61:a9:a5:83:
06:1f:53:8d:50:b4:84:29:1e:21:0f:bf:ca:97:f3:c6:95:fc:
63:b6:dc:5d:30:d9:ba:55:fb:fa:82:01:91:d8:b7:0b:d3:bf:
1e:b3:d5:1f:62:dd:bc:70:e7:8c:8d:a8:0b:bd:25:91:75:4e:
67:8a:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:04:58 2025 by rpki-client