Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: yXiziYTYUsavalhu9kgBDwXz9W/rZO4+QZg/DrPOohU=
Subject key identifier: C8:94:56:D7:A0:49:8E:B4:FC:E6:5D:40:94:F5:2B:E1:B4:9D:FA:6B
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 0196C502DA3C3AA2C1F6D2FF3E80E3935C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 0ED8
Signing time: Mon 12 May 2025 15:00:20 +0000
Manifest this update: Mon 12 May 2025 15:00:20 +0000
Manifest next update: Tue 13 May 2025 15:00:20 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: MwRi1U6/MhjkZjVr1wDeQ+EkMckNMHYBlFNugu5dw/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:da:3c:3a:a2:c1:f6:d2:ff:3e:80:e3:93:5c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: May 12 15:00:20 2025 GMT
Not After : May 13 15:00:20 2025 GMT
Subject: CN=c89456d7a0498eb4fce65d4094f52be1b49dfa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:96:d9:a0:e0:14:3f:ef:bc:4f:be:fa:81:8d:
14:08:78:c5:25:a7:c8:e5:09:5a:fa:e4:b8:1f:97:
f6:1a:0a:be:81:13:50:7e:dd:97:95:b8:31:7d:eb:
86:c6:4f:53:30:db:b4:4a:c1:55:76:c9:37:0e:a3:
93:56:25:0d:e9:93:ec:9f:1f:89:b7:04:7b:71:b9:
50:b6:d5:be:5e:f5:bc:2e:ab:30:b2:d1:01:10:96:
2c:a6:82:b4:5a:01:b1:68:e7:e0:74:32:bf:d9:63:
d8:fc:99:57:f2:18:fd:84:87:9c:3e:a7:84:f7:de:
c5:e9:2f:e7:cb:d3:32:20:4a:b7:bc:13:0b:54:d8:
33:b8:ed:5d:d3:76:f3:ac:47:c2:03:22:9c:cd:3f:
7d:c5:9f:81:7f:c2:b1:3f:22:b9:ba:ad:ad:f5:f2:
75:b6:43:6c:14:54:e8:df:ea:60:bc:b2:bd:b9:3b:
66:7f:c3:13:85:93:d2:e5:6e:b9:f5:9e:a2:f8:77:
72:4c:64:1a:a8:04:7a:cf:a2:0b:6c:ba:e7:d0:e8:
1e:c1:f9:63:9c:90:f3:70:c4:3a:8f:2d:76:a8:00:
ab:04:0d:50:04:8c:14:33:1c:8f:22:a6:0e:0b:e3:
ef:6a:6e:76:15:43:51:a9:c7:a3:4a:f8:cb:d7:a0:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:56:D7:A0:49:8E:B4:FC:E6:5D:40:94:F5:2B:E1:B4:9D:FA:6B
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:94:4a:3f:1d:df:26:3d:63:92:01:3c:b5:b4:43:93:70:
f8:ab:2d:6d:40:cd:eb:d8:96:7d:ad:32:5f:7f:11:6a:61:79:
24:38:33:db:2b:45:0b:d6:d2:e3:ca:12:86:67:e4:c0:46:b7:
46:4c:be:c9:3a:09:bf:9b:03:1e:be:7b:f8:97:bd:bf:2f:ea:
71:06:49:f7:c4:e5:61:ae:c7:1f:dc:04:4c:66:89:42:e1:8b:
f7:b0:ba:19:d0:c7:90:f7:9c:48:63:b3:19:1a:64:ee:77:98:
69:15:9e:30:25:75:43:68:dc:d1:ad:56:6a:8d:1e:72:5e:64:
aa:e2:4c:6d:d5:d2:ba:f5:dd:be:6c:fd:96:77:ca:fb:57:f6:
86:a0:47:82:83:e5:ba:c2:bf:40:ef:9a:a2:3e:86:12:27:dc:
41:0c:4f:34:61:6a:97:d5:1b:8a:96:f4:11:7d:79:95:64:9f:
d4:6b:8b:40:70:bb:e7:04:bc:9b:ce:75:e4:97:56:2c:d2:10:
a3:1b:d3:d0:86:85:57:f6:ea:07:e6:91:f6:9d:fd:bc:0f:bf:
18:64:f6:d0:5c:43:64:c5:7b:ca:6f:90:d4:83:ca:73:1f:fa:
5d:9c:8a:ac:67:bd:3e:7a:8d:89:ff:0a:31:02:2f:96:21:20:
97:f9:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:51:32 2025 by rpki-client