Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json)
Hash identifier: xOgHp51s4yA76wmaokVR9QuF+8tDm2I3INtsL4v1YyM=
Subject key identifier: EB:29:20:E3:22:EE:A6:DA:5F:8D:63:D5:76:33:D0:DA:43:1C:E7:39
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial: 0196BBC8E86DDFCABD7E86A64D55BDE3BBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
Manifest number: 0A8B
Signing time: Sat 10 May 2025 20:00:28 +0000
Manifest this update: Sat 10 May 2025 20:00:28 +0000
Manifest next update: Sun 11 May 2025 20:00:28 +0000
Files and hashes: 1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=)
2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: lu9nhMXzKNSLvNreWjw7MPTat7RwtF/GIJs8j31Kb3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:e8:6d:df:ca:bd:7e:86:a6:4d:55:bd:e3:bb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Validity
Not Before: May 10 20:00:28 2025 GMT
Not After : May 11 20:00:28 2025 GMT
Subject: CN=eb2920e322eea6da5f8d63d57633d0da431ce739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:5b:ea:c0:c5:de:12:53:eb:65:53:ce:fc:
e1:bb:c6:eb:86:53:ca:60:e3:6a:0a:dd:39:17:61:
0d:4a:44:8f:c3:02:d1:61:ab:1f:a4:03:6e:cb:2d:
c1:81:19:fc:b5:62:2d:59:e5:56:60:a2:26:f8:cb:
11:12:41:23:c7:a4:c3:f5:05:04:a5:8d:29:25:46:
0b:c4:6b:c2:a4:77:a0:a1:fb:10:53:c8:a9:e3:a2:
47:45:90:57:31:87:9a:eb:2d:9a:66:5a:d6:32:78:
44:00:e0:18:c9:08:da:ae:16:8c:4b:ff:3d:02:bc:
59:e5:24:f5:f8:58:d9:35:bf:19:6d:97:be:bd:9f:
d0:42:86:ac:f9:45:7f:22:d7:ed:02:2e:4f:bb:21:
99:6b:8b:d6:b5:cc:1a:03:d2:b0:cb:2a:97:f6:27:
55:d8:1c:22:21:13:73:62:8a:69:3d:4c:0b:c4:99:
38:ab:a0:3a:4a:cf:17:5f:14:d4:f5:e5:c6:a5:3b:
c2:4d:d4:1b:05:30:22:4b:75:aa:26:45:13:98:a6:
d0:69:94:6c:41:f3:2d:ef:a0:85:5d:5d:fc:a5:12:
0f:ef:87:16:24:c2:51:d7:7c:0e:69:06:8a:89:80:
ea:8a:a8:10:af:f3:62:fe:52:3e:aa:18:28:d2:95:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:29:20:E3:22:EE:A6:DA:5F:8D:63:D5:76:33:D0:DA:43:1C:E7:39
X509v3 Authority Key Identifier:
keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:0d:ee:b5:70:c0:1f:ac:39:a9:de:9b:f7:b5:84:a3:85:
09:6e:46:ad:a8:48:11:00:c4:66:3a:44:b0:36:db:eb:1f:e3:
a1:5e:24:ef:f4:8d:26:0a:9b:e4:23:6c:da:d8:7d:53:bf:1e:
a8:4e:5f:c0:8b:85:0d:11:09:2b:87:1a:0c:54:97:e0:23:2c:
8e:ce:7f:bd:dd:61:d6:bd:0e:35:cf:b5:71:35:74:af:ae:92:
96:78:06:f9:31:da:7c:e0:71:64:00:e4:65:d7:d8:19:d7:74:
4c:48:de:91:e5:56:5c:75:3a:46:cb:a7:6f:b1:80:d0:29:5a:
db:8e:18:0a:bc:f8:a2:b5:5d:ea:17:c2:df:86:fd:3c:b2:3e:
3b:aa:bd:9f:6e:45:1f:39:c6:9c:c9:ec:9e:84:31:ce:a8:48:
d7:17:3e:02:9d:7a:9b:eb:a1:fc:cb:46:ce:45:cc:ee:a9:ea:
d7:99:b2:f4:9b:6e:bf:62:58:0e:4c:d7:1e:76:00:9d:fa:a3:
f1:0a:d7:6b:12:af:eb:df:bc:a4:62:9e:03:d3:44:9c:0e:e4:
eb:e4:a4:5f:cf:de:d7:e6:ee:18:b0:21:63:b6:0a:e5:ba:b2:
0c:c4:23:f9:79:d8:5e:28:80:44:2c:63:dd:8b:d5:7f:40:af:
af:6c:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:43:30 2025 by rpki-client