Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: zGZf8pDEeRiqdeXyF5cJ76u9fDOKJFt7D5kvreBOoMU=
Subject key identifier: D3:9F:38:33:CC:11:F3:A1:E5:DB:6E:DD:DD:DF:C8:D3:9B:7D:C3:B5
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 0196BD123FAD87E47156092106D426288121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 02:00:11 +0000
Manifest this update: Sun 11 May 2025 02:00:11 +0000
Manifest next update: Mon 12 May 2025 02:00:11 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: gSprEPYLhw5uZnPsuPubqzCG+ZiWWhKdbhaqnP7vdo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:3f:ad:87:e4:71:56:09:21:06:d4:26:28:81:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: May 11 02:00:11 2025 GMT
Not After : May 12 02:00:11 2025 GMT
Subject: CN=d39f3833cc11f3a1e5db6edddddfc8d39b7dc3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:8d:19:8b:09:b2:97:79:55:b5:35:d7:45:
49:38:92:25:da:bf:c3:3e:a7:cf:da:d2:ac:07:79:
50:b2:f8:0a:39:ab:e9:df:de:73:61:be:fc:df:1a:
eb:21:ba:49:40:3c:2e:53:e7:76:05:0d:1d:63:7a:
c3:cb:28:2f:fa:81:c4:db:67:a7:10:34:02:63:5a:
73:42:9a:d5:82:6c:45:a7:21:54:bf:e0:cc:5b:bf:
ba:93:ec:e1:2a:f7:92:f5:04:ed:94:cb:2d:36:df:
b4:24:73:23:ad:96:07:ce:5b:97:99:b2:09:45:0d:
56:06:7a:34:9e:d0:bf:7d:eb:a5:3e:1c:7a:db:2d:
95:4a:34:6e:15:29:b7:a9:74:72:b2:5b:48:c7:1c:
88:53:b5:13:48:4e:c5:1f:ed:2e:fd:cb:f2:da:42:
9f:ba:77:e4:76:b7:fe:c0:ce:0f:fd:2e:2b:8e:95:
ac:23:9d:8e:6a:30:14:c8:ca:7f:fb:9d:d6:0b:e2:
c0:5e:79:ed:bd:47:2d:29:bc:1a:4e:f8:79:25:ff:
aa:6f:d5:77:eb:7d:d3:2d:fb:e4:09:2a:ee:06:de:
56:e8:a3:80:5a:31:09:e0:91:4d:a6:97:4d:85:86:
06:7e:10:9e:c8:eb:b3:a6:cc:24:52:8d:52:44:10:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:38:33:CC:11:F3:A1:E5:DB:6E:DD:DD:DF:C8:D3:9B:7D:C3:B5
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:50:ab:b2:42:d4:13:b8:6f:a0:66:9d:4f:40:5a:39:d4:e4:
9e:d1:e4:a9:52:d2:e8:0e:4e:a0:78:6f:ee:cf:ab:0a:31:32:
f3:43:a6:99:9a:94:d6:d8:0f:c2:bd:61:0e:c1:8a:af:1a:97:
50:6f:a7:cb:c0:e6:37:a7:a5:d1:f5:e3:a8:33:01:9d:76:f5:
50:02:6e:7a:e3:04:fd:0e:fd:1a:11:2b:d1:19:e8:cc:69:34:
09:54:a0:b9:1c:40:8b:46:04:0a:17:2e:8f:97:af:88:93:57:
52:f4:93:a6:dc:5e:74:32:25:35:15:7e:c8:4a:14:c8:eb:8f:
e1:8a:1c:8d:99:78:05:e0:3d:f1:c0:67:9b:5c:ae:a1:f6:24:
ab:f5:5f:a1:b6:a4:be:e8:82:c6:0d:59:e4:d5:1d:00:a7:1c:
37:8c:79:a7:0c:f6:42:b8:2f:18:31:9a:d7:08:e4:42:3c:3c:
a9:df:07:07:ed:a9:53:c9:d8:10:16:eb:8c:71:9e:a5:a7:c6:
01:77:b4:a9:6d:9b:65:66:de:79:af:f8:ca:e7:5e:26:92:44:
07:ee:8a:3b:be:84:29:94:57:65:8f:4e:94:19:9e:7a:fb:f4:
f0:12:29:f6:f6:dd:a6:30:98:27:14:62:22:e7:81:50:38:d0:
e3:00:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:56:31 2025 by rpki-client