Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: aiGBzil52WTVV70l8YqybS5TpNyF9gSkFtYwUH+JV+0=
Subject key identifier: 10:B6:0A:01:9C:7F:A8:55:74:77:F7:F6:34:EB:D1:06:61:87:A9:F7
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 01969FAD25010C15CC1A94593E219DF4F677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 14B7
Signing time: Mon 05 May 2025 09:00:46 +0000
Manifest this update: Mon 05 May 2025 09:00:46 +0000
Manifest next update: Tue 06 May 2025 09:00:46 +0000
Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: 28p05iMiUWN6vCq58pBsVD/wwhSRFhx02OGRaj1LvSQ=)
3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:25:01:0c:15:cc:1a:94:59:3e:21:9d:f4:f6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: May 5 09:00:46 2025 GMT
Not After : May 6 09:00:46 2025 GMT
Subject: CN=10b60a019c7fa8557477f7f634ebd1066187a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:9d:fd:1e:1a:e2:e3:67:58:2a:85:0d:2e:
64:4e:f0:e4:d1:2f:e9:a3:9c:31:e4:68:b5:31:42:
0c:f4:88:db:0b:b4:02:12:81:1d:db:23:5a:50:60:
6f:ac:98:e1:ec:9b:78:f1:ef:3f:39:89:17:07:b2:
e6:44:73:6c:22:df:de:95:4d:88:31:1c:17:c0:d6:
bd:70:d1:64:aa:15:80:5e:bd:71:ae:15:80:e2:0c:
85:94:7b:63:d9:e4:6d:8f:da:32:1c:33:52:b2:83:
a0:d8:e5:9d:2c:69:ad:0c:1c:21:5d:e7:66:29:25:
2c:35:b3:0d:c5:ee:51:e6:26:a3:6b:ec:61:e2:7c:
04:db:b3:79:23:8b:82:82:ef:2f:ef:13:84:94:5f:
2f:ca:68:5f:52:e1:52:3e:e8:38:41:a2:24:8a:52:
fe:27:86:d7:fd:46:d5:59:d9:19:7f:a2:65:93:8c:
c9:ca:57:9e:af:74:3c:af:e4:93:da:59:c6:19:8f:
c5:50:ab:2b:ec:87:8b:90:16:4a:71:cf:60:7f:a4:
aa:a6:fb:7c:e6:62:19:93:4c:6c:a3:49:4d:7d:9f:
7b:2d:ab:ca:72:ca:de:42:ae:01:7a:dd:9e:ae:13:
66:0f:05:9c:97:0c:95:b5:f6:cb:c4:c4:af:94:76:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B6:0A:01:9C:7F:A8:55:74:77:F7:F6:34:EB:D1:06:61:87:A9:F7
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:08:2f:04:b4:07:0b:6c:a5:7b:8c:48:6c:73:32:bc:2d:7b:
9d:02:47:fc:d9:db:9d:5e:4d:72:9d:42:77:78:3b:cd:93:cd:
49:d7:d9:f7:bc:ff:7f:25:0c:fe:9b:e2:12:94:70:2d:6e:df:
e5:18:39:0f:ad:1a:6a:de:04:c5:4e:71:a6:c6:11:a8:80:8f:
20:bf:ad:54:5b:c6:29:08:a6:16:32:7c:5e:ce:19:73:22:a8:
f8:89:c1:e7:40:3e:76:03:9c:f0:79:2c:75:3e:aa:68:f1:66:
32:56:bf:75:87:10:21:4a:20:c6:9b:b9:cb:a9:30:24:9d:e5:
16:0a:09:d1:5c:e7:02:2d:32:f7:06:2b:cd:c6:be:23:8d:79:
84:8b:3f:8a:e3:7a:9b:53:ad:9d:73:6a:60:32:b8:75:3e:1d:
3c:ce:b7:45:48:97:1c:86:59:ae:06:ff:4a:ef:63:22:96:b7:
e0:82:99:af:65:7c:55:c0:49:8a:c9:3e:bb:01:80:09:d4:93:
af:c0:31:3c:80:bd:cd:a9:4d:43:8a:dc:bc:41:45:39:78:6d:
e0:56:f0:78:92:74:70:57:a6:6c:c3:de:38:78:a3:1d:d7:cb:
b8:0b:31:8c:6f:6f:0a:79:26:e8:eb:42:bd:c5:4a:ef:8e:06:
33:bd:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:45:19 2025 by rpki-client