Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: tIMke+1dv3jbaOtgLTI6bLRYv9oIxRkG5E17nNMq1dE=
Subject key identifier: FA:3B:DD:16:1E:B1:2F:88:F1:42:4B:0B:F9:C7:A5:7F:A7:79:80:1B
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 0196B89134C79EC3A2759F9ACCED7BAD41F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 05:00:46 +0000
Manifest this update: Sat 10 May 2025 05:00:46 +0000
Manifest next update: Sun 11 May 2025 05:00:46 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: jSCFpKcoZE1Qf/n+3VdvJc2DZFPjjKdPOuLmLUKWPRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:34:c7:9e:c3:a2:75:9f:9a:cc:ed:7b:ad:41:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: May 10 05:00:46 2025 GMT
Not After : May 11 05:00:46 2025 GMT
Subject: CN=fa3bdd161eb12f88f1424b0bf9c7a57fa779801b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:e4:8a:af:31:fd:e8:7c:6b:47:2f:f5:5a:
a6:35:e8:0f:e3:7b:a0:97:6d:b7:db:50:4d:2c:97:
66:bf:5c:28:e7:e2:f9:2e:07:b0:33:40:1d:11:18:
01:4f:c3:7b:2f:7d:8b:14:d0:56:a2:b9:26:9c:6b:
63:d4:c1:b6:de:5d:fa:76:fd:ea:ed:9f:a3:73:cd:
8a:85:b8:69:21:83:6a:53:94:00:f1:a2:29:45:1d:
f7:dd:ce:21:bd:1e:01:6a:57:45:d4:58:f4:45:88:
6d:6f:e4:cd:f7:73:f3:c0:3a:f3:e2:9c:9f:39:47:
c1:c0:49:2c:22:b6:9c:4f:cd:f6:de:f8:3a:43:b0:
52:d6:80:aa:b2:a1:f7:40:91:27:cc:6b:ea:f5:7c:
3a:96:d5:31:58:b7:45:a6:e3:bc:b3:a0:90:ed:c3:
25:b2:97:ea:24:89:88:a0:45:9f:f8:88:35:af:a7:
34:df:33:10:8d:ff:a0:82:96:14:c4:9d:39:16:d2:
9d:57:fd:c5:86:91:b2:1b:f2:a0:67:61:24:0e:cf:
22:e4:ef:43:45:da:b9:ce:a9:5d:0f:ca:cf:97:85:
7c:e8:79:45:68:28:76:13:bc:2d:ce:3f:c5:a8:cf:
94:a2:54:e0:e1:a9:72:87:72:e5:82:ea:67:80:aa:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:DD:16:1E:B1:2F:88:F1:42:4B:0B:F9:C7:A5:7F:A7:79:80:1B
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:21:48:c0:58:2e:00:e6:75:b9:94:45:f4:e0:68:fc:45:1e:
7f:2d:55:71:18:07:37:dd:c1:a9:ce:89:e2:c1:f5:4e:6c:ed:
3c:fc:1f:d8:c7:0f:e7:59:d7:ad:c4:97:eb:e9:b3:70:25:9e:
5e:d4:77:af:7e:57:96:95:c9:16:93:a6:f4:bd:7f:e1:56:09:
1a:0e:3b:fd:2e:67:d1:16:9d:7f:5c:0c:73:5e:89:7e:98:d9:
5e:92:51:44:8b:b8:90:80:cd:f1:10:d9:67:44:79:73:d5:0d:
39:ae:18:65:5b:70:80:61:45:4f:b7:d8:37:19:10:cc:01:4f:
c3:4c:bd:5f:4c:90:9a:6c:4d:31:de:23:ec:23:49:a5:51:89:
3c:b3:34:82:6c:bb:b9:da:5a:57:4c:1d:d8:fb:39:e1:35:b4:
84:a8:dc:46:1b:a2:b2:b5:45:87:6f:de:ad:98:0d:59:8a:d6:
84:2c:04:a6:a1:79:d2:78:71:21:0f:e5:91:9b:e5:ec:df:3c:
45:7a:33:b6:9e:fd:93:16:79:ce:d7:dc:fc:60:af:2c:28:3c:
da:2a:db:6b:23:8e:83:39:31:22:4e:a5:64:83:54:5f:b2:35:
93:2c:5f:68:80:a8:61:9a:21:78:f6:e5:dc:95:da:ee:4b:ef:
52:81:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:36:24 2025 by rpki-client