Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier: djeItbwa3TQq24+KqHJ1VPDePTkkb4KL8JDqrPuMz30=
Subject key identifier: A3:D9:9C:4D:32:29:5F:74:FF:91:C1:44:84:85:EC:8A:90:44:D7:51
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 0196B935F027D4074562739A23FA239BD532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number: 0503
Signing time: Sat 10 May 2025 08:00:41 +0000
Manifest this update: Sat 10 May 2025 08:00:41 +0000
Manifest next update: Sun 11 May 2025 08:00:41 +0000
Files and hashes: 1: 1hVW1hVDzUMh4lZ8GR7cUAl7v8M.roa (hash: /ppjOJyvYU9AU0zUdXonk4kTMm986gK2/zEUEbCwwMQ=)
2: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: 7SKuY1y4yME/NadBdfOlU8Xn767aItvfV2Y+Uwjmduw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:f0:27:d4:07:45:62:73:9a:23:fa:23:9b:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: May 10 08:00:41 2025 GMT
Not After : May 11 08:00:41 2025 GMT
Subject: CN=a3d99c4d32295f74ff91c1448485ec8a9044d751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:4b:69:a6:ed:f9:44:88:ba:4e:a0:88:27:
56:98:d7:31:32:d6:f5:e3:44:8f:e3:4f:f2:05:10:
00:d7:22:26:fe:2b:5c:42:b9:ab:71:3c:ea:39:5e:
6a:b2:66:97:5c:0b:88:6c:cc:63:e1:57:9c:c0:f4:
ce:c5:17:21:e4:65:99:6f:60:e1:96:ee:a7:70:46:
ba:32:48:a0:a8:09:c6:0e:fb:9d:21:43:8f:05:4c:
8c:d4:ac:c3:29:fa:95:42:c6:77:79:07:36:39:85:
64:c8:2a:a3:bc:0f:57:94:89:4c:b6:d4:b6:50:21:
b2:57:56:88:13:13:e5:f1:6c:e4:ef:81:03:fa:d6:
ab:31:fc:e7:83:47:7c:e7:a1:06:2b:33:4e:a1:7a:
0c:17:f7:e5:1e:a5:4a:1c:a9:8c:e7:73:6d:92:e7:
95:25:2b:a6:fd:57:27:f8:91:0c:d3:b7:a3:65:db:
46:88:6c:e3:c8:a5:36:61:2a:14:07:0d:da:bb:36:
81:9c:42:a6:23:8a:c5:ac:17:d7:0c:5d:40:f7:bd:
57:d7:51:cd:81:62:87:b1:03:4e:55:9f:0c:c7:04:
de:ac:1e:77:7b:e4:c7:6b:17:35:ef:fb:3d:01:22:
18:63:18:90:ae:1b:46:69:2a:90:dc:a6:df:c4:83:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:9C:4D:32:29:5F:74:FF:91:C1:44:84:85:EC:8A:90:44:D7:51
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:16:2c:29:9c:70:b8:0a:b4:f3:25:74:5d:b0:23:79:55:28:
e3:eb:bb:b2:1e:eb:15:00:dd:c4:24:15:be:97:b7:a5:b2:f9:
d7:96:d2:66:9e:9c:ad:65:29:bd:da:ee:7f:76:66:d9:a6:f2:
b2:4f:cd:ff:76:5f:a0:91:45:bc:73:5f:a2:07:d5:da:ac:05:
57:13:38:8e:06:d6:ef:3c:00:34:01:99:54:9b:c9:52:ce:5b:
17:e5:9b:fd:c3:60:72:0b:1f:af:fc:2a:a1:e6:52:5d:6a:96:
80:dd:04:7a:01:7b:33:31:85:5c:bf:f2:a4:9c:19:34:b7:59:
69:04:c4:68:f4:26:e8:1e:e6:1b:e1:6a:ba:40:dc:06:91:c1:
30:f6:f2:99:fd:00:a0:a2:e6:37:0f:aa:32:21:a7:b5:99:9e:
ae:a6:c4:e7:f6:fd:66:7b:99:87:36:14:83:3d:46:49:4a:0c:
76:1f:a3:0e:f9:92:f0:b6:44:5a:da:16:c4:d5:69:b0:f1:f6:
87:f0:17:6b:15:ad:8d:36:0e:7c:74:73:ef:d7:9e:a2:b0:08:
eb:d4:ea:81:b9:b6:d7:2d:7d:bc:e7:4a:b6:9a:b3:f6:cf:95:
03:8a:73:f9:46:8c:a3:2d:a9:07:40:d1:b6:31:20:ed:77:64:
81:08:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:25:06 2025 by rpki-client