Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
File: mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft (raw, json)
Hash identifier: r8nmULW7pKQTLmufGSeop0e6EBqGMAUd8kEcpfj64kw=
Subject key identifier: 02:FD:5B:DB:F7:B1:09:28:50:54:2C:85:71:7A:3B:9C:DF:91:99:4A
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 0196C916A85B69D5B14B797D721B2B346547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
Manifest number: 042E
Signing time: Tue 13 May 2025 10:00:27 +0000
Manifest this update: Tue 13 May 2025 10:00:27 +0000
Manifest next update: Wed 14 May 2025 10:00:27 +0000
Files and hashes: 1: VANQMbS9wJfHpjxNeVPpV7NpFIQ.roa (hash: UNFy8NT1hW32lKijy2cCpAEH6HPMdcOUxJumaoALuL8=)
2: mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl (hash: +KEZo/jOqVhSDAQIqsOJN/0FsSzcNtvlCGJ2g6yrPnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:a8:5b:69:d5:b1:4b:79:7d:72:1b:2b:34:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: May 13 10:00:27 2025 GMT
Not After : May 14 10:00:27 2025 GMT
Subject: CN=02fd5bdbf7b1092850542c85717a3b9cdf91994a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:51:a0:ca:1e:68:a2:3e:6f:a8:a2:05:26:e0:
53:c0:05:c6:77:bd:43:c4:8f:f6:22:d4:07:95:3e:
ba:1e:71:a7:6d:68:db:12:71:d8:44:f7:4a:9e:f8:
3f:b2:44:a7:82:aa:3a:08:66:91:cb:88:a1:e5:3e:
1c:4e:24:88:50:a8:0e:a1:8a:e8:43:57:c1:4d:48:
90:aa:4c:b0:5c:52:3e:58:ab:08:4c:03:9a:a2:c0:
af:c6:77:91:72:03:b7:7f:00:a8:7e:e6:33:64:05:
b1:5c:84:14:f3:e5:61:06:49:7f:51:52:45:52:8a:
a9:d2:b3:80:d8:ce:5f:9d:b4:bf:2e:95:31:8f:9a:
89:21:f5:26:f4:dd:8e:f6:d9:6e:a0:7f:05:40:dd:
29:71:46:ab:1d:ef:20:d3:a9:95:64:d8:f9:94:4b:
28:d3:f3:30:d9:59:04:b2:08:2c:13:34:c8:0b:f1:
bb:19:08:52:01:ab:7d:1a:d7:e0:77:93:ee:60:a3:
ab:b9:2a:6b:32:ef:cd:8d:7d:8a:5c:58:0a:93:4a:
92:f6:b7:8d:a5:66:ba:18:f5:a9:a8:da:30:4f:99:
dd:ff:e2:52:d6:39:54:3d:6f:7e:8c:75:cc:e0:91:
c8:59:cf:31:fe:a4:fa:f8:bb:49:cf:e9:da:22:0f:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:5B:DB:F7:B1:09:28:50:54:2C:85:71:7A:3B:9C:DF:91:99:4A
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9c:9e:c6:ab:c5:80:d0:91:57:67:24:cf:8f:ef:d3:5a:3c:
d4:d4:94:94:d7:a2:06:0f:68:db:1d:1e:6f:6a:50:95:50:1f:
1e:c0:ae:e0:e8:a7:17:59:06:7c:eb:ce:6f:1e:af:95:d5:ba:
dc:09:b2:dc:c9:ae:e7:c7:10:d3:f5:2f:c7:17:60:ef:da:67:
67:5f:e0:7c:73:28:74:cd:b3:51:73:11:f6:0d:bc:45:0b:48:
f1:3e:dc:01:3c:65:b7:29:d8:68:ad:39:8a:02:55:9a:df:46:
3f:fe:d6:e4:71:84:4e:96:88:13:77:60:a8:f3:68:f2:a5:ee:
95:96:87:89:a6:2e:d9:33:86:37:79:7d:c1:f9:d7:d5:ff:cc:
24:6c:1e:a4:4e:22:be:fd:f8:4d:b3:e6:54:d6:77:de:06:c6:
fc:bd:34:ac:34:8d:db:b6:45:76:55:ce:27:c6:c2:f0:f6:3f:
cd:cf:44:cc:b3:93:42:bb:19:3b:9a:ac:88:db:24:1a:84:e1:
03:13:65:85:85:c6:c3:d6:b8:e2:c5:4c:f6:4e:c2:18:69:77:
ad:14:be:2a:a3:44:38:b0:b5:fb:21:f2:59:23:7a:d6:49:bc:
ae:b6:72:27:b0:23:a3:f8:70:de:db:64:1a:34:64:02:30:16:
de:ec:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:25:59 2025 by rpki-client