Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: e3xpaQvDAIJYzVh9RWaa+TW3QcnGjnZGJphhXCGhc38=
Subject key identifier: 1B:91:E5:FB:6C:BE:EF:D2:FD:85:B0:23:C2:D1:9F:4D:CF:D6:73:72
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 0196C45E04066F9E3960194AB32C867A669A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 135A
Signing time: Mon 12 May 2025 12:00:17 +0000
Manifest this update: Mon 12 May 2025 12:00:17 +0000
Manifest next update: Tue 13 May 2025 12:00:17 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: zJg0fMcF2pkbwaRb0bbntG/Kv+9tM8+6G7ltCkb30EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:04:06:6f:9e:39:60:19:4a:b3:2c:86:7a:66:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: May 12 12:00:17 2025 GMT
Not After : May 13 12:00:17 2025 GMT
Subject: CN=1b91e5fb6cbeefd2fd85b023c2d19f4dcfd67372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:08:60:0b:96:25:ec:73:c3:a0:01:aa:b4:
ca:0e:fc:ea:43:a3:74:a1:bc:19:6a:b6:10:a2:c4:
aa:19:45:6c:f7:8a:2a:b2:dc:ba:f3:46:a0:cb:94:
34:08:db:b0:ce:7d:6b:4d:1c:5d:27:d3:a8:8c:1e:
5c:54:9d:41:50:28:be:78:2c:36:31:6e:8e:a7:e5:
2c:18:99:af:a2:06:3e:78:57:3a:c9:08:b8:a7:ec:
46:fb:14:ca:74:b1:44:db:0b:d2:92:79:80:fa:67:
f7:22:29:bd:b3:e9:e3:d1:84:c6:0a:e9:dc:2b:cd:
b4:d1:6b:7e:69:bd:20:21:37:88:8f:41:ea:9a:f4:
80:ed:a4:64:48:00:df:50:a7:71:8d:21:26:75:71:
57:c1:56:df:cc:1a:5d:9f:29:54:af:2c:ca:34:8a:
eb:bc:92:b6:6d:58:4e:87:7c:80:51:72:ad:26:1e:
00:22:2c:5c:96:dc:29:42:da:30:8d:52:d5:61:e8:
70:e7:cd:34:db:79:72:4f:60:36:e8:be:c3:a8:41:
1f:cc:71:7c:89:bc:32:5b:14:d7:6f:46:a2:a8:e0:
b6:ad:12:d1:ac:6a:47:fb:2a:fc:a6:d1:91:dd:ed:
e1:68:b6:0e:86:53:cb:f6:07:41:75:8d:09:f0:9b:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:E5:FB:6C:BE:EF:D2:FD:85:B0:23:C2:D1:9F:4D:CF:D6:73:72
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9f:24:ca:c9:86:5d:fb:d3:e9:49:23:44:3c:48:ab:0c:08:
1b:e5:cc:b1:29:28:fa:5c:17:c3:af:ad:89:fd:2f:96:8f:40:
25:46:46:5a:33:67:d3:22:48:76:93:ab:a2:45:0a:93:8e:85:
6d:07:81:3c:b3:10:94:3c:6d:35:bb:9e:40:e3:af:94:36:2d:
5d:5d:b5:54:2a:da:ac:b6:99:dc:97:3e:48:b7:d3:6f:62:a3:
89:58:f8:a1:eb:47:13:0d:b0:ee:4f:77:30:26:bc:d4:e8:4a:
bf:e8:37:06:bb:17:fe:61:05:c8:ba:33:11:f9:82:0d:56:48:
81:c4:d3:9a:60:5a:41:75:f2:0c:5e:c0:49:ae:d2:a9:8d:69:
28:a8:bf:6d:c5:33:13:6f:32:07:43:09:ac:22:91:67:22:60:
a0:d3:87:f8:fe:8e:ab:2a:51:e0:bf:b7:02:35:ae:52:21:3e:
2a:85:aa:63:b3:75:9b:4f:7c:54:15:bb:70:a8:6c:32:bb:6a:
2a:64:47:0a:fe:6f:ca:d8:ad:f7:0b:b8:21:ec:f7:5a:22:a6:
41:15:20:82:93:c4:d9:82:33:54:b9:c6:ed:65:e6:b4:fd:d1:
72:9a:c6:25:32:2c:c7:f6:f5:0b:69:22:fb:86:5e:99:6f:86:
40:bb:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:11:02 2025 by rpki-client