Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: 4kKcMqCmKlTkH1rgOUlqPrVu7HHJFNLE5aCROUiGVTc=
Subject key identifier: BA:90:05:6F:34:4E:EA:CE:DC:AF:60:69:D9:1E:B2:1C:E2:7E:81:25
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 0196BDB762E6C03985113ADF5B0E225ED6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 09E3
Signing time: Sun 11 May 2025 05:00:34 +0000
Manifest this update: Sun 11 May 2025 05:00:34 +0000
Manifest next update: Mon 12 May 2025 05:00:34 +0000
Files and hashes: 1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: CfJB+6HCdQisCPZzVuVkSPGe4LVEQB7GDVG1T8Ito58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:62:e6:c0:39:85:11:3a:df:5b:0e:22:5e:d6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: May 11 05:00:34 2025 GMT
Not After : May 12 05:00:34 2025 GMT
Subject: CN=ba90056f344eeacedcaf6069d91eb21ce27e8125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:d7:66:b2:26:42:4d:3c:45:8d:56:a5:1c:
b6:74:7c:43:b1:e3:87:16:ac:60:fd:9c:88:75:3b:
39:6c:4e:f7:b0:49:f2:e1:6c:52:dc:66:61:e7:8b:
fb:06:5a:94:ff:c8:7a:7d:4a:b6:d1:4d:7f:05:1b:
32:20:73:58:d9:ef:a7:c4:3f:3d:a0:1d:bb:74:9f:
ac:6b:88:db:74:d3:f3:80:77:ac:b6:17:4b:27:95:
04:11:82:9c:14:9b:13:a4:be:66:07:b3:46:18:0c:
f9:d9:6b:e5:3c:cc:02:63:05:46:24:96:6c:ca:75:
8a:18:46:2b:b3:36:0b:ab:e0:1a:de:c8:c8:22:79:
6c:2a:4c:be:34:40:f2:16:62:9f:ec:66:39:8c:b6:
fc:18:f4:61:09:41:87:57:88:05:70:65:63:9e:66:
9b:5f:62:da:45:df:a9:77:5b:f9:46:63:a5:f1:6b:
86:9d:4c:0e:f8:fc:44:ac:59:0b:5e:a9:e1:34:e5:
11:27:b7:f4:62:76:44:b0:4a:84:73:04:74:ff:79:
20:37:74:cb:f0:19:e5:58:53:14:af:7d:0a:7a:58:
30:f8:5a:8e:32:16:22:b6:91:d6:44:a0:b5:13:56:
73:57:5d:e5:83:85:72:e2:1d:29:87:88:7b:b0:fc:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:05:6F:34:4E:EA:CE:DC:AF:60:69:D9:1E:B2:1C:E2:7E:81:25
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:fd:64:0b:02:a5:6b:9c:df:d9:88:fd:a9:0b:bd:bd:c4:
db:3e:43:6b:15:f8:9a:e2:54:de:c8:65:19:08:a8:4d:74:11:
7d:f7:a8:54:d2:cf:c3:c8:e0:a7:28:45:16:c1:53:27:f9:c6:
ec:77:e9:1b:fa:d7:08:32:5d:82:46:39:23:c8:45:86:07:72:
16:2b:05:e0:38:36:e7:30:b0:c1:df:1f:5d:c2:93:27:b0:26:
82:49:ff:7f:33:61:e1:cd:c7:3b:11:17:18:4b:30:85:8e:2c:
8f:72:4c:01:26:81:e1:2c:a2:93:40:cd:cc:a4:88:4b:e4:7c:
e9:1c:97:ec:c9:33:9d:39:9d:88:3c:cb:b9:79:93:75:04:e0:
17:20:1f:4b:f1:54:d6:95:c6:32:75:9c:19:e2:52:f9:59:cd:
0a:f5:f2:16:2a:03:5e:77:b4:96:57:93:ab:07:bb:8d:4b:32:
0e:a3:dc:a7:d6:de:95:5f:ba:75:f1:e7:63:ca:92:fd:ce:36:
c9:d3:e7:36:52:a6:52:73:4b:cf:a4:0b:91:cc:82:4a:9e:b0:
04:e5:cd:db:53:34:ed:52:6a:a9:16:89:0d:2d:0a:f3:71:26:
5f:c8:39:f2:6b:a0:61:55:5a:2f:22:ad:9a:e4:7a:5e:31:38:
e3:d9:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:40:59 2025 by rpki-client