Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File: m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier: 21mfGuw7rdbiXP2sPcq5m7h0sueCCjPhX2wNUmjd54Y=
Subject key identifier: 41:C3:E6:99:5E:A3:B9:53:55:A0:00:3F:88:3D:30:F9:85:DA:79:DE
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 01969CACDE66C19ED4D0E2EDF5FA8C7EA3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number: 0D0D
Signing time: Sun 04 May 2025 19:01:36 +0000
Manifest this update: Sun 04 May 2025 19:01:36 +0000
Manifest next update: Mon 05 May 2025 19:01:36 +0000
Files and hashes: 1: 126M92i4yvgJWpcn8XcIW24xKRw.roa (hash: gvLu6/32Bhn0SToW2HYoFaVXP2rKf3ibNrus5LTj59I=)
2: 2Y-BQWwW7_ggvBXNnc8W9Hw_ByE.roa (hash: JhmK62xSjdy0MLOq5+Y9bNPh5TyhHzNoMKSxAmlyqP4=)
3: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: ZxGsA7g6r6hHEuGmIls1aP7eE9KuABWWoLTFjsK+iIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:de:66:c1:9e:d4:d0:e2:ed:f5:fa:8c:7e:a3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: May 4 19:01:36 2025 GMT
Not After : May 5 19:01:36 2025 GMT
Subject: CN=41c3e6995ea3b95355a0003f883d30f985da79de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3a:a1:4b:63:07:6b:83:b1:86:53:0d:04:79:
94:88:26:2a:47:57:41:c7:a5:1e:a5:fc:ea:ab:9e:
c7:ac:94:68:a7:bb:ad:55:4d:60:1f:8a:f5:3b:89:
6f:f5:28:0d:d7:fb:3e:6f:b2:58:58:4c:c1:55:60:
83:65:0d:b2:6f:25:8f:3f:36:b4:cf:1f:91:cd:f9:
48:3c:0c:17:ae:f8:69:dd:3c:6e:2a:c9:f2:57:f3:
f1:b1:cb:08:e8:e9:e7:c8:4e:f1:91:68:5a:44:01:
fd:8e:6b:df:e7:9b:07:e8:cb:b3:1a:bd:57:64:41:
ee:15:38:6d:95:87:3c:de:fb:7f:5d:11:f5:56:1f:
5a:6b:7a:06:be:3a:f6:c6:86:92:fc:c1:2a:37:68:
f9:fc:e6:9a:a3:35:01:77:bc:76:6c:f6:e4:97:6f:
e0:23:de:1c:47:56:a6:4f:f9:c9:5c:a7:23:86:66:
75:35:ac:19:ff:2e:e6:cd:33:92:6f:b1:d2:bf:87:
05:4b:1e:ab:a9:f9:8c:b7:b2:48:01:6f:84:e8:38:
64:8e:a2:bd:80:10:1d:ce:da:47:59:9f:6e:4c:3d:
83:2b:4b:79:78:4c:b5:b0:c8:0d:44:0a:15:c4:0e:
ca:2d:1a:80:2d:5d:d4:9a:9f:5c:ad:34:ad:16:ac:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:E6:99:5E:A3:B9:53:55:A0:00:3F:88:3D:30:F9:85:DA:79:DE
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d3:ba:9a:1b:49:ac:67:51:b1:66:90:21:8a:87:da:3b:66:
62:fe:c5:b1:db:f8:43:49:dd:ec:72:51:c3:8b:95:be:8d:1c:
1b:23:71:4b:54:8d:a8:0d:f0:86:81:de:fe:41:2b:67:75:1a:
a4:42:65:7c:d9:a7:2a:65:0c:6f:d5:fa:62:db:5e:0a:6f:cd:
93:03:2d:ba:0c:ea:2a:c4:01:7f:de:30:20:0c:b8:3d:fe:88:
af:84:1c:cd:9e:cb:7e:e7:84:19:33:7a:f0:76:4c:40:74:b8:
e3:78:bc:bb:13:83:10:c5:43:00:ec:49:cb:b2:25:65:b2:bd:
42:59:4d:13:47:bd:c2:84:bd:f5:18:18:04:24:ad:dc:4b:1f:
0a:fe:37:97:aa:84:33:35:f7:6e:49:fc:38:26:10:28:4e:1d:
10:a3:87:c4:84:98:ab:10:85:73:27:9b:fd:a2:31:6e:40:f5:
4c:a3:51:97:9f:cb:99:d9:5c:e1:3f:ab:fb:57:bd:02:47:da:
be:97:2d:ce:b7:f0:6e:f8:61:17:03:fa:8e:7f:54:f6:e6:17:
fb:bb:fa:82:ca:28:b6:04:a9:6d:0a:f3:c7:a4:88:84:6a:2e:
43:b1:e6:fe:50:9f:21:23:bc:28:98:9a:8b:8e:17:7a:50:44:
d3:d8:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:24:04 2025 by rpki-client