Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File: MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier: O8f1ABYGWopuw7DkqoDfYCsp7Y59mL5TFZO63ZucO1Y=
Subject key identifier: 76:77:CD:92:56:7A:CA:CF:4E:60:F0:13:CC:B4:41:95:C2:A6:D4:C5
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 0196BCDBD9B430403771F76E1D8088C1EF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number: 0CF8
Signing time: Sun 11 May 2025 01:00:46 +0000
Manifest this update: Sun 11 May 2025 01:00:46 +0000
Manifest next update: Mon 12 May 2025 01:00:46 +0000
Files and hashes: 1: HqEtipzQowxTqcDrA6YD2PAM22k.roa (hash: +TySDtYTZSAF4An5pdiKoQwn0LwGdYxQZAyZ18GrAFU=)
2: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: Xoo7C2y7iSidV5eCVLWCG1/ZY2qjdgzAyrg8CnBWGAg=)
3: N-IkqmIl8KlWw01vFtAZ-uos0pY.roa (hash: YeMMYzZTCS8ByuvcJi0c6d7AtfKEEZ2nt+xBnMZjmqQ=)
4: SXPqMjJIqIiiKMiICnz-R2huK7A.roa (hash: VBPweWvhbagfxdIj/U/h3DiF8G4gGJiOVx2OPYGVAl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:d9:b4:30:40:37:71:f7:6e:1d:80:88:c1:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: May 11 01:00:46 2025 GMT
Not After : May 12 01:00:46 2025 GMT
Subject: CN=7677cd92567acacf4e60f013ccb44195c2a6d4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:d4:e9:c5:9a:54:7e:d1:bb:3b:75:2b:6d:
a6:85:58:c2:73:77:c8:68:13:81:8c:7f:29:0d:14:
37:a8:df:b2:20:e8:61:58:f4:53:a0:82:aa:ef:9d:
f2:15:aa:9b:01:45:04:5a:73:ab:b8:52:b2:7b:08:
32:1a:53:71:50:c7:3d:cb:06:9c:e5:38:f1:e4:a8:
7c:ea:78:af:2a:a7:95:0f:fe:c6:d5:83:92:ae:4b:
97:1b:74:df:9c:3c:63:05:14:fd:07:3a:3e:5d:6c:
cf:e3:7d:47:31:c9:72:f1:d3:60:5b:b3:ad:62:6f:
2f:da:80:e9:7c:22:a5:85:54:df:89:e0:c8:70:71:
4e:a5:69:9f:1d:94:f3:79:f6:b3:5c:8a:f3:18:e6:
83:fe:55:8f:76:5d:80:0a:28:d4:d6:80:35:92:54:
ee:30:7d:f3:42:20:b1:c7:ba:80:bb:ac:d4:0d:53:
c7:56:09:f2:2a:f0:58:ca:85:cc:d5:09:54:a4:24:
a4:5d:b3:29:4f:67:10:6f:51:e8:36:5d:5c:84:11:
cb:68:1f:29:bb:7c:c1:f7:26:72:10:2a:a6:41:de:
cb:27:e4:e1:9f:39:de:61:c8:5b:a4:c9:f3:fd:e2:
1d:e9:2d:db:5f:d2:29:21:0f:5f:5e:b5:62:79:9b:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:77:CD:92:56:7A:CA:CF:4E:60:F0:13:CC:B4:41:95:C2:A6:D4:C5
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:c5:64:8e:17:a2:2e:c3:86:de:ec:15:61:03:b6:00:33:
01:94:22:97:58:0d:84:85:02:4a:76:59:24:1a:17:7b:c2:00:
f8:c5:bc:db:9a:e9:97:ba:f3:ca:f7:7a:2f:1d:10:36:88:00:
33:80:51:9e:ec:31:b8:95:c6:05:bc:da:a9:f7:09:e5:05:1f:
92:cd:02:05:84:ee:cd:e4:f5:d0:97:31:4b:33:81:41:71:30:
01:81:a6:02:4c:b8:93:0a:93:09:09:68:01:f1:e0:9f:52:a6:
63:e4:97:f4:be:59:7d:2c:47:e5:51:4b:94:89:ad:71:b7:85:
d2:f7:39:41:30:d9:70:97:bb:c8:a7:3d:51:ee:ef:7a:b3:84:
e3:3b:4f:d1:3f:92:cc:96:70:3d:55:a0:c7:81:72:76:14:2b:
60:ec:b3:c3:38:fc:68:a3:9a:c4:b8:15:30:25:73:62:4f:68:
17:5e:82:e1:d0:21:de:2b:1f:3f:9f:4e:a9:0d:d0:c7:d3:06:
df:8b:51:7c:3d:67:a9:0c:2b:eb:55:3b:27:15:b5:a5:37:89:
b9:b9:98:56:0c:04:a1:8f:03:5e:f1:51:3a:77:6e:c0:a7:06:
c2:df:be:1f:2e:5f:9a:c2:76:32:ee:b2:f1:d2:75:e4:e9:96:
bf:e1:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:28:48 2025 by rpki-client