Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: rZCX1egW5pRGkW/Bv17uhkkHSWbta1SJagR3ea6yEFU=
Subject key identifier: 68:56:4B:B2:0A:59:63:AA:26:9E:78:5A:5E:C7:1F:18:41:AA:CA:5D
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 0196B8C7AC82D3381605241338DCB8DFCEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 05A5
Signing time: Sat 10 May 2025 06:00:15 +0000
Manifest this update: Sat 10 May 2025 06:00:15 +0000
Manifest next update: Sun 11 May 2025 06:00:15 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: 3KkRQPDfS+/+VTGfjvgfkuyWfCp1k1r/vgCJMm37vHs=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:ac:82:d3:38:16:05:24:13:38:dc:b8:df:ce:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: May 10 06:00:15 2025 GMT
Not After : May 11 06:00:15 2025 GMT
Subject: CN=68564bb20a5963aa269e785a5ec71f1841aaca5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:6a:50:3c:5c:a3:29:fc:f1:cf:80:58:5d:
83:02:dd:2c:68:de:f7:aa:ce:6d:26:f0:6f:e0:72:
60:54:22:b6:a2:a1:70:10:03:56:e6:79:3c:90:cc:
22:3e:08:3c:e3:7b:12:10:5a:3a:33:82:90:66:5d:
c8:fe:01:c7:5e:6c:f8:eb:c4:6c:a1:b8:bb:76:a8:
53:b0:95:8f:f6:62:f5:3c:ed:39:e9:56:1e:2f:82:
68:02:d1:4d:38:bb:4b:22:aa:5e:89:48:57:6b:18:
bc:bd:57:fd:5b:87:ba:ca:ea:63:d8:fd:ce:f2:33:
5b:8a:70:32:28:98:96:e6:1a:61:ae:18:65:5e:66:
71:25:6d:2a:d5:0e:c9:83:e8:a6:11:27:d0:30:14:
83:95:12:8c:74:f0:3b:d3:38:88:d0:5c:fb:af:5a:
0f:0b:7b:d7:c4:f9:03:a2:90:4f:81:04:bc:b3:fb:
5c:bd:8a:af:34:85:9e:dc:82:45:98:e3:42:43:e2:
d7:5b:e0:3d:6a:6e:7d:9b:bd:a0:65:3f:8c:d7:59:
a7:c5:50:e8:1b:8c:86:f6:52:4e:f2:7a:a7:a0:b3:
66:d0:83:4a:45:e0:45:48:1e:26:ba:bc:ac:53:a6:
5f:d5:d8:ea:e2:c7:0f:65:16:f6:d9:c1:25:f6:51:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:56:4B:B2:0A:59:63:AA:26:9E:78:5A:5E:C7:1F:18:41:AA:CA:5D
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:82:a9:25:09:ea:a0:ca:b9:12:9e:f6:d3:10:c2:56:b1:c8:
34:7a:bd:84:5c:b3:6d:fc:4c:94:34:22:41:7c:37:be:0e:b0:
a4:ac:52:cb:e4:4c:01:35:57:a1:12:1a:9e:9f:4e:45:b2:a3:
4d:f3:09:b1:61:b7:6f:2b:7c:7c:c0:1f:fe:fc:5b:7e:85:65:
8d:cf:c2:56:3e:9b:56:ed:cf:1c:c0:61:c8:5f:9b:ab:b0:48:
2e:16:3f:c4:35:db:72:59:b7:be:43:96:60:46:63:12:27:9e:
cc:6a:39:54:fa:c2:f8:a3:31:01:92:6a:36:81:9b:e0:ac:b8:
8c:8f:67:4d:3d:e9:8d:27:ba:28:63:d8:49:5d:5a:5a:a2:f5:
47:3f:21:57:33:4a:69:60:a1:40:5b:cc:f8:01:07:67:95:f4:
0f:c5:d4:0a:24:56:e3:99:68:7a:62:a1:0a:f0:01:9e:8d:39:
20:c7:8c:54:e3:ad:31:76:6f:60:5e:26:b1:f0:42:6e:40:b2:
99:76:96:d2:79:5a:73:e1:71:f4:59:1b:73:f5:3c:2b:9c:a2:
96:57:8d:53:3b:b8:f9:f6:71:c0:75:7a:fa:ce:85:22:24:14:
28:2a:ad:c8:f4:e1:51:e1:1a:37:4d:d9:c0:9b:55:4d:4b:cb:
f1:5e:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:55 2025 by rpki-client