Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: nMBDjEZMaYOYDWy/4ZlOhv2Zg1kbQmaM40zp3PC+vLY=
Subject key identifier: B1:CD:6D:09:77:08:E9:8F:3A:AC:B6:E4:FF:0A:82:66:71:9B:02:74
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 0196C081A460BCE579348F3797D881E40B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 03FA
Signing time: Sun 11 May 2025 18:00:43 +0000
Manifest this update: Sun 11 May 2025 18:00:43 +0000
Manifest next update: Mon 12 May 2025 18:00:43 +0000
Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: 0mKf/q447AZBGUhoJRdik5ZuBC/2++czHDy+E+0ug3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:a4:60:bc:e5:79:34:8f:37:97:d8:81:e4:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: May 11 18:00:43 2025 GMT
Not After : May 12 18:00:43 2025 GMT
Subject: CN=b1cd6d097708e98f3aacb6e4ff0a8266719b0274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:0a:21:80:b7:bd:1d:59:4f:a4:e5:56:1c:
60:1e:b1:94:57:40:f7:39:04:6b:b0:14:73:3b:4f:
a4:23:14:eb:95:89:8d:fa:9c:65:25:c7:bd:95:0c:
66:e9:78:f9:85:c2:84:6a:a0:af:e1:4f:03:79:5e:
f4:4a:3c:b0:a2:fc:eb:15:fc:4f:a2:11:ee:79:96:
35:d3:23:38:e7:c6:ca:21:97:cf:d8:7c:f5:6e:93:
99:8b:1c:45:fb:04:ae:8d:a2:51:0d:1a:31:22:af:
bd:dc:aa:77:79:46:cf:9e:f8:d0:0e:ee:15:a7:65:
c0:53:cf:9c:59:f5:ea:b9:15:7b:b4:aa:80:48:76:
4f:c8:80:7d:88:49:1c:12:06:49:3a:aa:09:f4:42:
8c:8a:ac:90:8f:b7:26:f6:5f:44:13:ac:1f:fa:7b:
18:25:50:0f:6d:4c:dd:82:ef:f2:7e:0f:c6:bc:3b:
66:85:b4:bc:a2:5f:92:d4:ae:db:7c:eb:75:da:cc:
05:7d:9c:da:cd:70:cd:58:c5:99:9d:71:4f:d8:c5:
59:8a:a2:8a:d5:f3:dc:4e:d9:56:8b:fc:7e:65:23:
35:fc:7b:17:f1:b7:23:a8:eb:12:a4:48:f7:1c:57:
20:8c:0e:82:85:ab:81:f7:4e:de:5a:87:ef:9c:1f:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CD:6D:09:77:08:E9:8F:3A:AC:B6:E4:FF:0A:82:66:71:9B:02:74
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d4:5f:ef:9f:93:72:f3:2c:c7:fe:75:df:97:ef:46:82:48:
13:44:44:07:f2:2a:ee:3b:17:0f:bf:93:7d:38:b4:a7:0e:4c:
69:49:8e:37:6e:3a:eb:29:d3:04:fc:0a:c8:39:af:30:b6:c4:
ad:1f:48:f5:19:17:66:f2:06:3b:dc:ab:39:76:86:41:c3:3f:
55:d5:16:c6:cf:92:0a:9e:e9:d5:f8:df:77:66:59:25:4f:53:
37:51:cb:d7:27:36:7a:03:5e:6f:aa:ca:7a:ed:05:bf:be:9f:
08:2a:11:3a:43:34:4a:a9:6d:79:37:11:f9:14:66:0b:3b:6e:
34:c9:0b:06:ea:72:ba:03:83:d2:ab:90:ec:56:4a:1b:19:98:
8a:30:61:6e:05:93:d8:fa:c6:b1:69:0f:7b:af:95:af:2d:5c:
b4:c2:c8:ca:a7:0a:79:fc:37:ad:1e:a1:28:62:5e:8d:7e:a3:
5f:a7:82:f3:11:31:12:3e:96:4f:e3:1a:fb:ff:15:42:15:21:
1b:99:34:03:81:c5:bd:ef:39:fc:3e:2f:b3:fe:71:e4:4b:bd:
d0:68:e6:5b:2c:58:80:61:99:e8:f5:ef:70:41:00:ed:cd:d3:
91:1b:5f:5b:d4:6c:90:5f:17:a8:73:14:6e:46:12:48:ea:38:
62:30:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:11:48 2025 by rpki-client