Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: LdrdkB+zZ64wgFaL3+rSkHAYC4SrGuOc/WH5DkiCORg=
Subject key identifier: 9B:A9:17:26:D0:BD:9F:BB:31:34:80:B8:4D:B7:36:0B:40:00:8B:5E
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 0196C98453B60010CB798A602B1981E2E8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 03A8
Signing time: Tue 13 May 2025 12:00:14 +0000
Manifest this update: Tue 13 May 2025 12:00:14 +0000
Manifest next update: Wed 14 May 2025 12:00:14 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: tjUdezrhp4buSjA5TouRk35T4xuDpnd4nMDUa0x8zBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:53:b6:00:10:cb:79:8a:60:2b:19:81:e2:e8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: May 13 12:00:14 2025 GMT
Not After : May 14 12:00:14 2025 GMT
Subject: CN=9ba91726d0bd9fbb313480b84db7360b40008b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:84:31:0e:55:8b:13:fd:ec:72:fd:b9:0d:
87:18:9e:ac:e0:93:72:c9:35:58:04:55:68:46:9a:
e7:0a:1d:a6:b2:da:2d:d3:1d:62:cd:1d:0b:f5:89:
06:1a:83:1f:f8:91:64:f4:ab:29:3c:aa:c2:59:d2:
a2:21:ff:c8:24:18:66:d5:12:0f:c7:a0:af:f5:96:
ee:f9:50:a3:8a:d9:72:1f:8f:df:5a:24:a0:ff:a8:
d4:4b:79:f5:07:3c:b9:da:37:d5:f5:4a:59:0a:79:
0e:91:9f:b3:25:22:96:b1:e8:50:93:79:48:49:ea:
4d:9c:e8:8e:68:5b:ab:57:d2:ba:76:6e:9a:94:ef:
4a:9b:43:1c:9d:0f:03:d4:20:ba:0a:1d:26:24:c5:
e0:66:de:11:86:84:cb:53:4e:42:33:d7:8c:ac:ec:
ab:27:57:93:95:b5:0b:dd:8d:08:e8:be:e9:14:d7:
e9:50:57:29:37:c6:26:94:35:f4:57:9b:91:f1:2d:
f4:06:6b:e4:ea:f6:e5:00:27:f2:88:5f:2c:34:ad:
e2:35:82:df:41:fb:8b:73:06:76:2c:82:59:4a:aa:
0e:9b:f1:03:dc:51:c0:6f:4a:dd:e7:44:82:6f:c0:
75:84:3d:78:f1:9b:cb:1e:c9:66:22:e8:29:24:43:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:17:26:D0:BD:9F:BB:31:34:80:B8:4D:B7:36:0B:40:00:8B:5E
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:73:a4:19:01:09:a4:6b:68:ca:0a:e4:ac:67:80:d7:b1:34:
5b:75:d9:89:62:fb:bd:4d:87:50:30:85:d7:d3:88:a8:30:1e:
af:bc:d1:6c:90:a2:e4:6b:4f:2a:c7:bf:e9:53:96:32:15:17:
f4:36:f9:d9:fb:38:64:f6:e4:e4:f0:9b:d9:a5:6f:b5:99:25:
98:ab:6c:57:28:0e:e7:37:d9:7a:f3:8a:f8:52:1b:a3:04:30:
af:6b:b6:e3:2d:ea:b1:34:5d:8c:da:b4:3a:cd:d8:f6:a5:c2:
7a:20:09:9d:fc:e4:14:cd:22:07:5b:d9:36:9a:5f:a4:c9:3d:
70:d6:43:17:3e:71:50:f2:a5:57:a3:49:23:fa:cb:d0:5d:dc:
18:18:cd:d7:34:cc:e1:9c:51:00:64:8e:45:88:6f:23:cc:9a:
bc:e6:53:00:57:a9:6e:4f:f2:12:53:80:cf:f7:3a:02:5c:c2:
c6:61:52:b1:ab:d8:16:dd:2c:c2:0a:c6:45:a3:44:8a:cd:a1:
aa:5a:3a:da:ae:28:a5:f1:f0:48:be:b7:23:c2:ed:87:b7:42:
57:82:81:d4:a2:ba:89:a4:e3:e5:30:43:67:1e:8c:a3:67:03:
08:dc:95:1a:6e:c7:bf:bc:8b:81:ab:a3:fb:63:3c:ae:f8:57:
25:de:b4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:57:20 2025 by rpki-client