Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: 9WetjwpEqsz3pfzvenllJea5FaDaMVMGLcfCXUMfqYY=
Subject key identifier: 0A:20:FA:25:15:11:1D:4A:A9:22:D6:C9:FF:89:FC:FB:BC:1D:0A:49
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 0196C615FDB4674311A0F9B05E5BCB2819D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1548
Signing time: Mon 12 May 2025 20:00:51 +0000
Manifest this update: Mon 12 May 2025 20:00:51 +0000
Manifest next update: Tue 13 May 2025 20:00:51 +0000
Files and hashes: 1: 1Lqm7Z3ZvF5pC9_HDRj5UNkhd7A.roa (hash: kWMYsrVZaVYfP4Ct5LwW7USETz9giRgVCzYAo1+XF/g=)
2: QAnENOV7C6lzH_x8jNRvH6GLqjc.roa (hash: 9SXWdd7rJD88L+XO12WxPTCi0XtVW7lKw0msZqZnedw=)
3: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
4: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: kT8aj+5aqCjjKFMlsC6B8r6HMcqRAarIZ6jlA9zdsTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:fd:b4:67:43:11:a0:f9:b0:5e:5b:cb:28:19:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: May 12 20:00:51 2025 GMT
Not After : May 13 20:00:51 2025 GMT
Subject: CN=0a20fa2515111d4aa922d6c9ff89fcfbbc1d0a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:a8:10:de:f6:82:2e:79:bb:ad:96:af:6c:
67:1f:b0:3a:8a:d1:e2:77:1a:18:1a:9a:d9:f6:a5:
d5:d2:91:cd:e1:ac:af:66:c8:92:40:b3:52:90:72:
6a:c8:8d:d8:42:c7:f9:ec:75:f4:a7:fb:e8:6d:c7:
91:24:f2:65:94:fe:9c:4a:45:76:a7:d8:c4:52:90:
86:f5:0b:22:68:18:1f:74:87:f1:db:01:59:7f:50:
ea:6a:4f:49:14:c3:3b:29:64:23:1c:f8:fd:92:c4:
60:0c:20:09:03:63:3d:9f:b7:f5:21:29:7d:6c:aa:
dc:0a:6f:74:ce:a3:ab:ec:eb:13:79:be:e7:de:b1:
71:c0:33:94:f6:ea:21:aa:37:c5:ed:32:2d:7d:dd:
6a:51:ad:0c:88:da:b7:75:1e:d3:f5:3c:32:e7:88:
6f:4e:2a:fe:54:f0:2a:72:ba:6b:75:54:ea:9e:1d:
a6:93:05:59:9e:70:68:89:cf:5b:20:fe:31:30:10:
2a:b2:c4:b5:85:c0:6a:cb:e0:45:a5:78:76:82:fe:
8f:7e:64:19:03:f9:6b:43:53:e1:f9:7f:da:5c:9c:
18:6c:22:62:f6:6d:35:47:65:87:6a:95:06:13:f1:
e3:4b:d8:d2:ee:25:45:3b:9c:d9:a5:08:99:69:a8:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:20:FA:25:15:11:1D:4A:A9:22:D6:C9:FF:89:FC:FB:BC:1D:0A:49
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:ed:1b:f7:43:6a:36:0a:d2:52:35:93:07:58:9d:9d:bd:
aa:29:94:51:fb:e2:93:7d:98:8d:92:b7:ca:a0:e9:d8:44:00:
96:52:ba:54:8a:57:f2:55:05:88:45:47:da:24:e9:93:94:5b:
4d:32:26:0a:62:2f:46:a9:81:3f:b3:00:9e:25:72:66:22:50:
8c:c3:36:05:2b:ef:4e:e1:39:75:b5:52:cd:ca:c3:e5:09:7f:
e9:b3:7f:06:e2:d1:1e:eb:1d:30:ab:eb:4a:23:fa:80:4f:72:
f1:31:b5:e0:99:e7:6a:dd:f8:98:39:58:8e:74:cb:1f:da:83:
a2:bd:34:7c:41:78:81:af:a8:33:21:c1:56:03:eb:b6:5f:54:
41:30:4c:21:26:d0:fe:a3:e8:33:f9:34:48:37:83:ac:01:45:
bd:78:bc:c9:65:c4:82:2d:55:7c:a2:d5:78:81:df:7b:c4:ae:
ac:e1:16:e0:f6:7c:c4:cb:e7:0d:84:1d:ee:c1:3c:21:ef:06:
8c:7f:23:0f:7b:6d:d5:8c:94:70:b2:f7:6c:5c:6c:85:c1:ba:
89:47:0a:8f:9b:5e:52:64:47:cc:8f:3b:c2:80:50:46:c6:32:
fd:bf:2c:14:a2:6f:64:66:e6:38:31:63:80:78:46:4f:65:23:
78:0e:04:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:24:50 2025 by rpki-client