Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: 9K+nqgJAeDbBh4MIlkw93SDGrsfg+AqVmT3Pty4NXYU=
Subject key identifier: BE:3A:28:57:67:6E:2C:93:EB:47:50:6A:F5:2C:5C:D2:60:E8:BB:24
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 0196BCDB72AE2B599CF4EA8C157CBC3E0109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 0E1D
Signing time: Sun 11 May 2025 01:00:20 +0000
Manifest this update: Sun 11 May 2025 01:00:20 +0000
Manifest next update: Mon 12 May 2025 01:00:20 +0000
Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: nTwgyvmPTQn4VWu20zAa+8SIcbhDOL362uTtFlHrsrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:72:ae:2b:59:9c:f4:ea:8c:15:7c:bc:3e:01:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: May 11 01:00:20 2025 GMT
Not After : May 12 01:00:20 2025 GMT
Subject: CN=be3a2857676e2c93eb47506af52c5cd260e8bb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:92:5f:e4:38:9a:31:21:3b:db:78:b7:2a:
f2:dd:26:80:cb:c5:80:6f:31:a1:48:39:8d:7b:74:
a7:ee:c2:70:4e:bb:fa:ae:95:59:0c:3d:13:22:66:
34:1e:ba:45:b0:14:8b:97:a2:4d:61:65:ee:04:0e:
f3:33:de:16:4c:12:48:10:d0:12:cc:c4:4f:51:29:
35:02:55:81:48:0f:cf:a0:1f:97:73:ef:a6:02:82:
44:b4:78:19:90:94:3b:09:85:2e:90:04:65:a7:5e:
94:10:f3:85:5a:bf:1b:00:5a:42:b0:90:be:da:11:
37:45:13:34:07:82:b5:e4:52:e5:85:bf:86:01:06:
96:8f:7f:e9:c3:82:62:71:9e:fa:a7:b4:b1:2c:d8:
fe:87:33:fa:ac:09:9e:57:94:82:dd:dc:2f:8c:ed:
95:7b:92:2c:7a:7c:4d:eb:45:4c:89:5d:d7:fb:79:
d9:d5:7a:c4:67:d0:0a:73:87:98:5c:5f:81:2b:13:
63:5e:a0:d8:ea:58:c1:93:5e:80:8f:50:f2:ed:5c:
a0:c4:92:82:9e:67:e6:94:2c:e0:ef:ca:03:0c:57:
8e:b4:c8:fd:ad:02:d7:7e:6c:4d:41:fd:6e:d4:e8:
d4:10:8c:39:f8:64:ff:0a:ee:0f:63:1d:48:0c:44:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:28:57:67:6E:2C:93:EB:47:50:6A:F5:2C:5C:D2:60:E8:BB:24
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f4:9d:c3:54:8b:92:23:3e:f6:04:76:ad:bf:db:ad:ff:a6:
2a:b6:60:fb:0f:16:14:ff:77:cd:70:f3:99:0a:fc:90:70:2e:
59:03:64:0c:65:98:40:e0:76:87:a3:4a:0c:87:56:46:e2:a0:
a8:3b:47:c1:1e:61:df:01:5e:0c:05:72:b9:ca:eb:4e:38:c9:
23:86:f2:88:cb:d5:f8:72:c4:15:0e:61:14:c7:48:b3:96:45:
c2:19:79:34:63:4f:eb:e4:63:b8:16:bf:38:bc:7c:1c:e6:19:
5e:64:c3:c1:a5:05:12:11:a0:ce:a2:c6:0c:3e:b5:86:38:40:
a9:34:3a:21:e4:ba:c6:69:af:6f:da:39:73:2c:47:f5:0b:e9:
66:fb:59:66:5b:d2:3b:f9:24:23:e1:f5:86:f1:f4:d6:79:78:
88:1a:a6:4e:a9:d9:7a:a5:bb:29:35:a2:6c:df:d2:a8:73:f5:
ee:b4:b4:06:fd:8a:fe:46:92:5d:0f:77:a0:d7:db:d8:da:7d:
38:80:40:c9:4e:e4:35:09:67:f9:e8:fc:5d:fa:cb:4d:58:63:
84:fc:b9:49:9a:04:b1:95:fc:2e:8e:dc:b9:06:9c:c8:fb:71:
b0:93:1b:ec:76:d5:ac:c0:73:80:fa:f4:36:21:af:99:50:e4:
b3:a4:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:49:32 2025 by rpki-client