Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: 1H8oIAvbCb3VwEXUnSkbKJwqxqjnqGBGAH45jMWenEs=
Subject key identifier: 13:25:F0:1D:CB:23:7C:43:E2:13:F8:47:60:D8:5A:B0:DF:20:96:69
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 0196AC1FFFB60A8D34AA55CD5DA262543576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 0FEC
Signing time: Wed 07 May 2025 19:01:40 +0000
Manifest this update: Wed 07 May 2025 19:01:40 +0000
Manifest next update: Thu 08 May 2025 19:01:40 +0000
Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: 2aomKoXMN1N2Cl20cT2p4tUTBO9ItPn/uEDwFCyD948=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:ff:b6:0a:8d:34:aa:55:cd:5d:a2:62:54:35:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: May 7 19:01:40 2025 GMT
Not After : May 8 19:01:40 2025 GMT
Subject: CN=1325f01dcb237c43e213f84760d85ab0df209669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:a3:93:d8:a8:23:da:8a:ba:5e:12:ad:a5:
4d:b1:df:e8:83:ce:8e:c4:06:5a:d5:11:57:51:8f:
29:3c:08:0e:4b:f1:bf:f8:0b:ec:a2:c7:8c:05:cd:
29:b4:de:44:d2:17:9e:fd:e6:80:d0:7b:98:fb:ba:
f5:d1:87:1a:0b:1e:94:ed:a8:c5:eb:31:73:69:5e:
72:57:0b:29:75:be:23:66:8d:77:c0:02:9b:6a:c6:
e4:c3:72:cb:49:83:c3:12:5b:35:56:7e:6a:65:28:
bd:e0:0e:03:a0:bc:9f:fd:18:b0:d2:2d:ba:cc:95:
98:7e:65:a0:d4:2b:12:e3:9f:92:e5:04:c0:3a:6c:
04:72:df:fa:57:20:73:e0:34:4d:05:71:58:7d:67:
3d:cf:df:12:4e:ae:d1:c6:35:2d:9a:58:e0:73:1b:
98:10:22:49:1c:18:5f:fc:9a:e9:b3:ab:12:94:07:
51:5a:79:5f:44:35:85:77:8e:db:4a:36:94:c8:d3:
ea:fc:dc:9d:28:53:68:05:04:be:cc:34:92:bd:7d:
fd:7e:90:3f:77:4e:00:d5:fd:45:25:d8:68:aa:eb:
61:45:1c:70:92:ff:3d:72:a4:cf:0e:f6:14:99:ec:
b8:9f:4d:8d:b9:ea:49:b0:35:ee:60:d5:db:29:18:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:F0:1D:CB:23:7C:43:E2:13:F8:47:60:D8:5A:B0:DF:20:96:69
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5a:76:fb:dc:c6:fd:bc:be:9a:f1:f1:0d:37:cb:7e:82:30:
f7:cc:08:0e:a0:55:8b:20:6a:d1:3c:4c:00:fb:a9:0a:c0:c1:
88:5e:f6:85:43:7b:ab:0a:8d:4d:f8:55:1a:ad:59:28:ac:a0:
82:fa:9b:43:7f:d1:af:ec:49:f9:bc:fd:4a:bf:b4:b1:f8:e2:
72:ed:77:09:74:2f:b3:34:1e:cc:bc:f9:03:32:3e:fd:1b:bb:
b0:60:17:28:48:b9:fa:ad:de:00:7c:f5:88:fd:7c:b0:19:4c:
d2:6d:6d:fa:51:42:06:77:d4:f0:70:62:74:b6:98:31:14:db:
e6:0e:2f:ae:5e:b0:da:e2:08:26:82:4e:e9:5d:11:60:29:7b:
86:b8:f4:a0:9e:11:a1:f3:50:83:00:e4:65:c8:40:20:ea:0e:
11:36:26:3b:1e:ea:09:ce:6f:8c:6c:69:e4:4d:e7:77:23:2f:
09:6d:29:f4:77:00:2e:b8:08:d1:4b:f6:54:dc:c5:2e:5f:ca:
cc:f0:df:ae:0b:5a:41:89:e6:4b:5e:cd:b3:51:c1:8a:95:23:
dd:52:68:60:d9:5e:d7:4a:68:88:d2:25:42:c0:ad:54:52:7f:
84:77:05:f2:cc:64:bd:55:a6:b3:23:78:3a:c0:39:44:4f:02:
e7:9e:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:06:29 2025 by rpki-client