Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: pUXZFetTSHLlvZ2JFvAeMyCMWaF5/PRO8IHkSAGqDFQ=
Subject key identifier: B1:08:2D:FC:FC:23:C3:0C:44:8B:B4:ED:F1:DD:3C:AB:77:BD:5D:97
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0196BF37E92AB90FE2C74481D19774B6087D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 126F
Signing time: Sun 11 May 2025 12:00:34 +0000
Manifest this update: Sun 11 May 2025 12:00:34 +0000
Manifest next update: Mon 12 May 2025 12:00:34 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: XbmUGJG7lTHqtsVS01F6Vtq/INcWhBWJ6JN1/GLzFnY=)
2: jeS6MzGjyajhq1xTKVFYKQisOvE.roa (hash: jH0c3uNXNqP5D5cKBijjnuw+oityQx81s+MFU0/3N0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:e9:2a:b9:0f:e2:c7:44:81:d1:97:74:b6:08:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: May 11 12:00:34 2025 GMT
Not After : May 12 12:00:34 2025 GMT
Subject: CN=b1082dfcfc23c30c448bb4edf1dd3cab77bd5d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:0d:a8:dd:19:bf:88:3a:ff:f6:f2:33:96:
4c:0c:99:80:fe:6a:d0:75:32:97:b6:ca:84:1b:8e:
66:28:a4:c2:70:b1:75:c2:18:35:37:33:45:45:33:
e4:ba:ac:94:d3:63:39:ac:4b:14:b5:3e:bd:1b:ba:
18:d0:36:78:07:08:e2:93:70:11:16:3c:16:0b:c8:
a1:14:2e:9b:86:8f:f7:4b:ac:02:c2:7c:fc:f1:83:
2a:53:86:19:61:f2:70:12:f5:91:35:ab:4e:20:82:
b8:58:8a:c6:e3:3f:9e:f6:cd:e1:e7:bd:61:b4:ac:
bd:27:a3:a7:35:c9:6a:b3:e8:19:a8:2d:c7:65:1f:
79:2a:87:2f:2f:ec:25:91:9d:fe:7a:56:ed:fa:0b:
6a:69:54:a9:70:73:4b:08:2f:2f:62:cc:da:23:8f:
59:2b:f9:3c:47:5a:a3:a8:e8:05:db:c6:a6:95:df:
36:b7:2e:12:43:47:74:d8:89:2f:f2:44:0f:63:00:
44:31:f9:37:e6:34:bf:f3:1e:9a:b0:0a:47:fa:eb:
38:00:ad:72:49:9b:c8:54:fa:87:6c:d3:54:b0:1d:
ca:b5:ce:12:e7:1b:6e:29:37:01:54:72:90:7b:05:
e4:69:ad:ee:11:f3:90:96:14:c7:90:55:86:31:7f:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:2D:FC:FC:23:C3:0C:44:8B:B4:ED:F1:DD:3C:AB:77:BD:5D:97
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:11:46:6a:d0:9f:3d:1a:df:3c:56:3d:90:42:e4:20:41:5f:
54:34:13:65:95:e5:28:78:36:3d:cb:4f:48:9d:08:a0:3e:60:
02:7b:d6:a4:fd:72:f8:35:ac:32:59:8b:92:20:f5:65:5f:19:
bb:b6:c6:b7:91:f5:fd:e5:fb:f1:a8:da:77:30:3d:e2:20:10:
08:28:21:80:70:3c:d7:fb:65:1b:dd:58:95:ba:8f:61:a7:64:
de:0f:2f:00:59:82:2c:7f:43:50:57:89:01:40:57:bb:cb:8c:
4a:91:c6:97:f3:e3:04:05:92:e6:04:2f:80:25:f4:c7:4c:69:
87:9c:2f:6f:1f:f0:6d:9c:8b:31:4a:05:19:09:72:b3:6b:b4:
b5:c4:8e:fb:09:46:d7:67:a3:b4:ce:94:2e:02:dc:c8:2e:07:
d4:7d:1b:cf:b4:e4:f8:c0:e3:ec:63:aa:f4:21:87:ff:a4:9c:
70:5f:fc:79:8e:0b:63:5d:a3:89:8c:be:c9:e9:9f:25:48:76:
9c:f6:b9:c1:ce:e6:1a:0e:07:6c:82:4e:57:cc:db:07:fd:ad:
f1:27:ea:0e:9a:0c:94:1b:4a:e3:27:82:db:09:16:db:ab:d7:
ee:0d:f4:85:d3:49:bb:40:49:41:e7:59:c6:47:3e:d0:0a:93:
52:ff:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:19:41 2025 by rpki-client