Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: q97Khra7zO4+q+k5vyzp/iqAys5JntT1MKY5rWgc5ZI=
Subject key identifier: FD:30:5B:A0:E1:DA:B1:DE:06:11:E9:2A:82:08:12:73:8A:ED:33:42
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 0196BCDBC62B69637B4002F20EA6514A0CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 129F
Signing time: Sun 11 May 2025 01:00:41 +0000
Manifest this update: Sun 11 May 2025 01:00:41 +0000
Manifest next update: Mon 12 May 2025 01:00:41 +0000
Files and hashes: 1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=)
2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: C05SAotnwx7zLIeLVRLBOuYsA/w3sWvgiMpW/TTRmc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:c6:2b:69:63:7b:40:02:f2:0e:a6:51:4a:0c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: May 11 01:00:41 2025 GMT
Not After : May 12 01:00:41 2025 GMT
Subject: CN=fd305ba0e1dab1de0611e92a820812738aed3342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:a6:78:78:3e:27:fb:98:20:c2:a3:53:c4:
b1:71:77:27:4e:11:f0:d1:0b:c9:b7:c8:67:9c:38:
c3:2d:fc:23:03:f2:81:a1:9c:b8:7c:fb:35:a1:6e:
ad:52:de:f3:10:ef:ed:22:7f:c8:e9:97:f5:07:60:
b1:22:3a:b0:65:de:f2:eb:af:c8:dd:43:86:53:af:
9b:b9:10:33:15:71:8e:50:f9:ab:25:b3:69:f7:00:
7b:32:a5:e0:d1:9f:d6:14:93:b9:4e:3e:90:ba:42:
7f:32:0f:a1:e2:60:5e:73:43:8a:50:75:be:5d:43:
1b:f8:8f:e4:de:33:72:17:b8:83:6d:fb:b0:54:72:
9d:7a:92:94:73:47:8a:c8:4f:57:15:a1:8c:87:72:
c9:2b:fb:97:60:9b:e8:a5:ed:d4:13:d4:2d:1a:29:
82:b3:fe:83:50:fe:fe:9d:9a:b8:0c:de:df:09:c5:
54:b5:c4:20:0f:38:1b:2d:9c:fe:37:6a:7a:8d:40:
d2:8d:79:05:2b:b4:b1:62:3f:80:08:f4:94:a8:6a:
26:11:60:ae:d1:a6:e6:fc:9e:16:8e:c4:d6:7e:f0:
e6:e9:13:70:d6:15:95:42:00:51:ff:55:76:9f:fb:
9b:f3:48:91:46:02:90:be:48:f9:5a:de:a0:23:af:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:30:5B:A0:E1:DA:B1:DE:06:11:E9:2A:82:08:12:73:8A:ED:33:42
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:ba:27:e2:e1:da:cc:11:74:31:41:dc:d1:98:05:63:3d:
54:da:4c:ff:e3:2d:79:b8:c2:52:09:f4:31:03:08:d1:9b:e9:
74:63:b6:9c:cb:41:67:47:14:49:d5:da:54:00:66:aa:d9:cc:
a9:90:ed:4c:99:cd:fb:79:c2:fb:e4:e3:06:dc:c7:ee:69:76:
61:7d:c4:7e:91:23:5b:1f:66:19:0c:83:b7:c6:3d:5e:95:64:
a3:e4:58:ef:c2:b3:c3:f6:3e:7d:13:22:eb:c2:92:f9:0a:10:
fa:ac:26:0e:89:8a:51:5e:34:17:ab:3b:c6:2a:5a:1c:bd:b9:
3b:10:00:45:97:66:a8:4b:d8:95:c5:70:a2:cc:20:de:ad:46:
b9:33:90:fc:47:03:92:cb:1d:eb:f3:14:59:de:ca:0e:dd:e7:
c1:3f:f0:e8:6a:ef:21:6e:a5:0c:54:c7:9f:4b:6f:94:02:96:
18:84:c4:8c:79:41:bd:18:08:05:49:2a:0d:68:59:05:df:20:
22:5c:d3:71:57:86:3b:71:2b:3a:9a:82:3b:c6:6c:48:fb:f2:
89:99:75:f8:2e:59:17:db:22:b5:bf:f4:a7:7e:ac:10:24:b4:
02:dc:e5:b2:ab:fd:d2:9d:9d:13:fb:b9:30:ca:25:bf:aa:82:
b0:35:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:36:30 2025 by rpki-client