Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: NtmFNjDbQxKFEMbryprrY1gHdhvwgRru6pxw15SUDkA=
Subject key identifier: 86:EB:B3:23:E7:E7:9B:5B:AB:52:C2:17:4C:04:08:8C:AE:9B:C0:AF
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 0196C68389B44DA1B591EFD28419AF47C2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0B40
Signing time: Mon 12 May 2025 22:00:31 +0000
Manifest this update: Mon 12 May 2025 22:00:31 +0000
Manifest next update: Tue 13 May 2025 22:00:31 +0000
Files and hashes: 1: 9XB5L2BKr8qvjKYU2Uioly6fY1U.roa (hash: tKzpvJI6ftqAt+HOqzK+2PC1tLhzH4FaMM6p7/zTUWE=)
2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: f+vWosfwOaDMd4pso0mAirytQW4Zgo1GkEfCDhUm6bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:89:b4:4d:a1:b5:91:ef:d2:84:19:af:47:c2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: May 12 22:00:31 2025 GMT
Not After : May 13 22:00:31 2025 GMT
Subject: CN=86ebb323e7e79b5bab52c2174c04088cae9bc0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:6c:7e:b6:bc:34:96:4a:82:a7:28:b4:24:
70:e7:1c:05:58:61:64:32:3f:7d:e4:f1:6a:b9:5d:
93:2c:78:93:17:f2:ad:86:aa:63:0c:fd:c2:92:51:
a3:bd:85:05:12:4a:8b:50:e9:90:b7:34:1a:3c:4a:
a0:ba:c4:eb:4e:ca:85:b3:d4:e3:4c:89:35:26:fd:
d2:f4:28:fc:a0:86:e1:49:a2:24:27:50:e7:97:b9:
af:65:68:f8:33:97:c8:f8:5d:73:3d:72:e7:01:de:
21:1e:5a:60:2d:bd:60:c1:8c:81:c2:86:6b:a3:3d:
6e:3b:7a:be:10:f1:eb:42:68:ef:52:45:8e:1d:31:
bf:27:1f:11:92:1f:0a:f4:62:7d:fe:a7:c3:1a:83:
ac:51:74:02:a7:de:c8:a5:5b:e5:95:78:9e:55:31:
b8:65:12:9f:3e:7c:b6:db:8b:ce:2d:a3:16:0c:35:
74:2c:e8:77:d0:ac:2e:fa:6e:ce:d7:05:c5:e6:b1:
a9:7a:5b:39:67:29:02:c6:a5:72:e4:44:62:5d:93:
0c:94:14:db:8b:09:f8:9d:bf:27:5e:18:02:b4:d4:
62:17:c3:b1:69:04:99:3f:f9:cc:48:88:48:d3:36:
68:78:97:a3:be:02:b3:7a:50:ca:7b:f7:d9:52:41:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:B3:23:E7:E7:9B:5B:AB:52:C2:17:4C:04:08:8C:AE:9B:C0:AF
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c5:76:74:a2:9e:f6:17:55:b9:99:70:94:20:d1:d6:67:bb:
76:57:94:68:ff:e1:c6:b5:2b:4e:f5:59:53:e6:6f:48:b9:28:
1a:1f:23:08:36:09:4f:a7:92:60:66:23:31:f8:e8:35:ea:61:
70:d5:5e:f3:50:0b:93:57:0a:07:5a:8b:7a:3c:f4:7b:24:8e:
da:af:3d:15:54:89:e7:03:3e:0f:23:0a:c2:e6:d4:2f:0c:9d:
fd:fd:30:af:be:a6:82:d2:ce:50:a4:8b:2c:fc:32:8c:b4:ce:
f7:e0:84:bb:ba:3c:bc:a1:0e:63:08:a3:59:cc:cb:15:da:07:
b0:0e:c9:df:71:19:9b:f2:64:4e:84:b8:21:c2:fb:8e:0d:8d:
32:20:e0:a7:ea:4e:92:f4:42:12:4d:80:88:90:1c:5f:14:94:
ed:ae:01:eb:23:54:7d:4f:97:df:38:50:a9:23:93:18:f6:8c:
dc:03:bc:9e:da:67:40:94:0f:f5:1f:3e:2d:85:4c:26:d5:0d:
a9:b6:ac:16:8b:cf:3c:ce:99:e4:c0:b5:ad:38:0d:b4:9d:6d:
de:9e:32:44:bd:f1:da:02:80:e9:c8:bc:31:bd:d1:4a:a8:b0:
5b:12:72:b9:45:ae:cc:2b:7d:54:93:07:01:4e:9d:aa:c8:12:
43:f6:bb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:44:48 2025 by rpki-client