Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: XKR2FDsBbTb664ZA6xrSP8Zj/Ysk7MJALyKxHe5ohJU=
Subject key identifier: C9:F5:B5:64:F1:EE:6E:15:A6:89:F7:C8:D6:5B:89:73:7D:E3:D1:E7
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 0196B4EB6D88383606E604A5196BF2F02684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 07B5
Signing time: Fri 09 May 2025 12:00:49 +0000
Manifest this update: Fri 09 May 2025 12:00:49 +0000
Manifest next update: Sat 10 May 2025 12:00:49 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: xO28F9s+M/DPOaaanevXf3K7DZ/GStceRcqgjZIQi08=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:6d:88:38:36:06:e6:04:a5:19:6b:f2:f0:26:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: May 9 12:00:49 2025 GMT
Not After : May 10 12:00:49 2025 GMT
Subject: CN=c9f5b564f1ee6e15a689f7c8d65b89737de3d1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:33:07:72:87:d7:02:40:c5:cf:e0:bf:2c:
b0:2f:18:f2:ac:2a:cb:f5:e4:39:f7:00:5e:25:19:
6b:8d:3c:a8:05:5a:0c:9c:cd:e9:b8:55:d6:6e:cf:
44:e8:c1:c9:6f:c5:c5:67:27:a1:fd:e3:bd:d1:34:
d2:ba:50:d8:ac:ca:0f:d9:c2:02:f8:5c:77:76:34:
72:ea:f0:d3:00:eb:31:2c:c2:6d:77:52:db:0e:83:
06:c2:d9:c7:36:87:42:7e:54:33:3d:f1:38:04:4f:
59:dd:b1:a2:d6:72:d8:e0:19:1e:31:b1:4d:6e:4a:
9f:8b:8a:21:0b:7b:e5:9c:c9:32:f1:6d:a9:51:c7:
1b:51:c4:f0:b8:43:71:ef:8a:dc:37:d7:33:38:69:
75:e1:8c:52:b6:25:17:f0:fb:11:8d:eb:d6:57:a6:
78:b8:45:86:af:ce:d4:b9:89:c0:0d:f7:85:72:03:
94:7a:4c:f8:9f:7a:28:3e:c3:78:35:13:e1:d7:66:
b3:05:27:f5:f2:96:56:e7:71:6f:40:1f:96:8a:bc:
5a:48:ac:f8:5d:ba:0b:80:dd:ef:c1:a3:57:45:7f:
fd:6a:76:64:39:e9:26:cb:ed:a5:f2:f2:d8:11:48:
22:36:ec:f5:91:04:28:1c:64:28:7f:4a:4c:18:91:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:B5:64:F1:EE:6E:15:A6:89:F7:C8:D6:5B:89:73:7D:E3:D1:E7
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:66:3b:78:2b:12:55:79:6b:75:93:71:f1:3b:30:de:1d:9d:
58:2f:8f:d5:ac:22:e9:2a:5f:b5:e8:c8:95:3a:ef:93:8c:e3:
38:13:7c:db:fa:ae:72:ac:28:56:01:e9:8e:c4:e2:3b:5c:f0:
3c:30:13:0f:8c:7a:ba:97:2d:87:81:bb:57:6e:c2:b1:b9:2b:
ba:7c:2e:58:bd:aa:42:95:68:c9:32:f7:b8:87:ba:45:bb:d6:
08:80:aa:d1:92:f7:2b:fb:28:ae:ef:ae:66:91:4b:2d:ef:f5:
8f:73:fc:3a:b7:f5:7f:44:bd:7d:d1:1c:b5:2b:7e:f2:f5:02:
e0:4c:60:e7:00:43:53:29:c5:d0:5b:95:b1:77:09:3d:57:f0:
4f:51:8e:1a:3e:76:05:88:74:01:ad:34:0a:d0:9b:46:7e:27:
22:79:4f:e5:a4:69:0c:45:5d:b4:31:4b:2c:3f:ea:08:d2:d6:
ea:2e:7d:62:26:e4:00:2d:98:1b:f0:56:68:3b:35:60:79:4e:
56:76:9e:42:30:e9:fa:02:49:60:94:8e:45:0b:51:8a:d2:9c:
22:a8:84:c4:a5:28:db:f0:51:7c:bf:fd:2e:15:b7:eb:11:94:
2a:0a:b6:73:3c:e4:4c:c9:a6:62:e0:d6:9e:92:c9:4d:14:d5:
ff:bb:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:08:17 2025 by rpki-client