Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: yVys6k6Emo9p4NTUXntn3ezOfJccpMgmQQCm93o2Bzc=
Subject key identifier: EF:77:8C:47:10:C8:AF:58:F3:76:AD:C3:1C:AB:C2:B4:F0:C9:C5:59
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 0196BA48D02E76008EFAD62BC5AD55DE41DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 13:00:55 +0000
Manifest this update: Sat 10 May 2025 13:00:55 +0000
Manifest next update: Sun 11 May 2025 13:00:55 +0000
Files and hashes: 1: OgYJc9A280CynujJhuzMa0BI-4Q.roa (hash: MiNQpI1WP7M4DChXTEl99hg+v/DrVYZq8o6Yc8vjTOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: u7vx59d5eKl6Vo+Gz2WdGZUIYSRkM6WEJPm73VyaK60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:d0:2e:76:00:8e:fa:d6:2b:c5:ad:55:de:41:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: May 10 13:00:55 2025 GMT
Not After : May 11 13:00:55 2025 GMT
Subject: CN=ef778c4710c8af58f376adc31cabc2b4f0c9c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:c3:56:63:88:55:68:a1:6e:f0:3e:32:ce:
ba:9a:dc:e5:63:36:6f:4d:11:af:2f:fa:a9:c4:5b:
e9:8a:03:13:4e:27:d7:e4:e6:3a:3f:35:32:d6:2f:
96:b5:f3:5b:57:54:44:c8:68:6d:2b:9a:d3:0a:ab:
27:b2:ba:4e:50:a3:48:66:ba:a1:22:df:ac:ea:c5:
38:9f:26:fd:0a:8e:1a:a4:bb:01:4e:ee:06:0d:e9:
03:88:68:32:23:a1:0f:39:09:3f:1a:5f:4f:89:9d:
b0:15:d0:43:15:1b:94:3b:e0:c8:a4:42:3a:d0:5e:
00:66:c2:4b:4a:7e:9c:b4:83:02:60:a9:34:e4:41:
d2:a2:78:96:14:92:71:77:55:0b:35:f6:c9:95:05:
68:15:71:67:d7:45:80:c8:d1:53:9d:56:4e:06:a5:
29:d6:8a:2c:8b:e4:0a:77:d5:07:44:0b:42:a9:44:
ef:7b:aa:18:a6:aa:bc:be:e4:61:43:c1:3c:c9:85:
db:1d:c0:f8:85:e0:7b:9b:fc:ce:32:f6:45:db:7b:
0a:fe:60:33:50:9d:08:15:3c:7b:d0:4d:b8:01:ec:
03:90:79:bb:0c:2b:d2:7e:48:4d:8c:07:fd:6a:e5:
a0:4d:ea:88:3e:33:5e:99:f1:35:02:d7:b9:79:3c:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:8C:47:10:C8:AF:58:F3:76:AD:C3:1C:AB:C2:B4:F0:C9:C5:59
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cb:0f:26:91:dd:23:42:72:3e:0d:42:96:91:80:8c:a8:06:
b3:31:6b:53:f9:70:eb:3e:ca:11:60:a8:be:7d:c0:d1:4f:64:
16:bf:8d:84:ca:7e:84:d3:4c:a7:78:00:07:d0:97:95:7c:13:
fa:03:53:8f:ed:7f:fa:a8:8d:d1:0d:03:ad:9d:ff:1b:0f:05:
34:48:6c:39:fc:2d:4a:21:95:be:31:8b:f8:9f:34:ad:43:ba:
95:19:b7:c9:f0:1b:ad:f5:d3:66:2c:11:7d:61:0f:90:16:14:
ba:85:04:4d:47:24:d8:74:f8:8c:45:e9:f7:cb:7a:f5:ca:fb:
5e:9b:7b:ed:58:2a:37:f1:5a:22:f0:32:21:3c:ee:57:78:0e:
85:7e:ac:47:8b:26:2c:3d:10:65:77:9f:ea:21:d8:de:f4:d9:
7f:aa:d6:ca:d6:8b:ac:b5:e9:29:75:ac:92:19:c7:1c:ce:30:
b4:9b:5a:cb:95:6c:00:16:25:9e:0b:ce:d6:9b:c9:ae:c2:94:
c9:60:6c:e0:fd:a5:ce:dc:31:1d:07:2f:75:f0:2f:60:9b:41:
7f:2e:e5:79:c9:e6:67:02:ef:ef:f1:29:d8:cb:39:59:a7:5b:
95:d3:e1:b8:80:61:70:a2:36:0e:d0:db:60:dd:15:5e:c7:d2:
1d:1d:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:23:36 2025 by rpki-client