Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: uctNYcAN+8QRtVFX07n0X1hn6JR0rkmb9vJ9eIBw8iA=
Subject key identifier: 37:D2:F0:F7:C2:6C:01:AC:72:B1:DF:D7:DE:88:09:DD:E9:31:4F:B3
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 0196C1265812C991ED563E73F9D911D5E921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 21:00:37 +0000
Manifest this update: Sun 11 May 2025 21:00:37 +0000
Manifest next update: Mon 12 May 2025 21:00:37 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: eyIPSwD6bA/Ixhp7hxlyClkovoXJp5lqRhjbe1qNDuA=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:58:12:c9:91:ed:56:3e:73:f9:d9:11:d5:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: May 11 21:00:37 2025 GMT
Not After : May 12 21:00:37 2025 GMT
Subject: CN=37d2f0f7c26c01ac72b1dfd7de8809dde9314fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:b4:83:e6:0c:dc:b7:e3:03:8b:fa:84:b6:
34:4f:7d:32:1b:56:a3:a7:cb:af:73:1b:bd:e7:87:
e5:ec:d5:c0:17:f4:d5:34:4b:8a:72:74:13:55:f5:
8a:7d:22:40:f5:ac:69:79:20:1c:0a:b8:3e:dd:7f:
42:a4:28:76:d4:ec:70:29:83:e1:47:fe:ec:7d:93:
8a:79:db:07:3f:38:dd:30:32:5c:9c:1d:4d:a4:e2:
88:7c:d6:52:f2:dd:02:01:f0:fb:3c:2b:52:79:ed:
fe:8f:46:bd:b9:e5:ec:0d:53:49:fd:d5:70:2e:e4:
8c:2d:78:ad:c3:63:06:42:ce:28:8b:9d:a6:77:2a:
9d:f1:b1:ae:26:73:29:8a:a9:f5:d9:3e:bf:76:38:
58:af:d0:5e:e4:6a:5e:ab:24:63:5d:df:90:30:d9:
1f:f8:75:2d:0d:73:fe:4f:64:93:73:18:84:ba:ff:
f4:07:fa:99:16:82:df:f6:73:25:51:ed:a9:22:b5:
4a:ac:d9:00:10:ca:76:da:94:9d:a5:43:97:c1:7a:
2a:9d:cd:60:41:a8:f8:25:c8:27:8f:f7:2e:5b:e1:
e4:c0:f2:81:ab:a2:7c:09:e3:6d:ee:75:c0:c6:df:
7e:4e:e0:8a:6b:27:8f:7d:da:d7:a4:d3:0f:f3:75:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D2:F0:F7:C2:6C:01:AC:72:B1:DF:D7:DE:88:09:DD:E9:31:4F:B3
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:85:1c:77:2e:78:09:ff:f1:d7:5c:bd:c8:45:f2:59:e7:6b:
50:42:b1:00:a3:1b:9d:05:dc:67:b4:be:78:69:ac:83:56:ff:
d3:c8:75:2e:93:72:12:96:68:94:7a:18:ad:1c:27:22:44:1c:
07:30:b0:e6:dc:ba:29:4b:b0:d0:ef:2c:b8:8b:00:ff:f0:5b:
7f:3f:74:e1:7a:b0:ce:c5:cc:57:14:67:9c:97:31:80:e2:d4:
a4:72:36:da:3e:a0:56:49:ee:93:61:71:39:7f:22:d1:55:43:
1c:23:03:cb:40:f1:a4:90:e4:80:90:0c:57:a3:99:1d:ab:79:
a4:10:f1:27:4b:8f:d8:a0:68:50:3a:4e:8c:b5:85:f7:0b:e3:
74:b0:55:32:5d:32:52:68:a3:57:cf:23:95:c2:fe:0d:10:37:
35:33:58:f6:39:ce:ed:2c:5a:16:45:69:5d:d2:68:8f:70:fb:
8a:0e:dc:d9:aa:17:9a:01:79:a9:5c:44:64:80:62:13:58:e8:
0d:6a:2f:67:9d:09:9c:7a:33:6d:87:af:6e:c8:54:07:e2:8b:
ec:52:5a:fd:5f:3e:36:d1:59:16:55:5c:9c:d7:f3:bf:d4:03:
a4:0b:72:67:54:ad:21:86:4e:56:f9:2e:2b:ad:38:66:8b:10:
1d:07:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:28:35 2025 by rpki-client