Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: AN7UNRpP3dFkmIo1l0nt0zY2pQlAtGMd0rgJjjJ306w=
Subject key identifier: 10:F5:4F:4B:52:D4:68:87:FB:BE:58:26:FB:5C:61:8F:44:81:3A:CA
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 0196BEC9E4C0BAAE7E2F041D1A9B307073BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 10:00:24 +0000
Manifest this update: Sun 11 May 2025 10:00:24 +0000
Manifest next update: Mon 12 May 2025 10:00:24 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: nRhffwGgdkpOFAnnE8z1dD2i79amfct44iLCpa5Ep5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:e4:c0:ba:ae:7e:2f:04:1d:1a:9b:30:70:73:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: May 11 10:00:24 2025 GMT
Not After : May 12 10:00:24 2025 GMT
Subject: CN=10f54f4b52d46887fbbe5826fb5c618f44813aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:06:a8:5e:03:fc:b5:8e:55:db:19:f3:d8:
2e:8b:c2:a6:d8:8d:26:fc:a3:ff:68:29:24:86:eb:
a2:73:d5:f7:4f:be:c9:24:e3:af:b7:98:8e:14:fc:
6c:c8:b3:4b:b9:ed:37:ef:5d:1a:b4:63:9f:95:ca:
34:58:fb:93:06:b6:92:44:c9:92:b3:24:c1:d4:ca:
47:80:46:16:7b:b8:31:2f:33:06:92:a0:df:37:ad:
95:c0:d2:d6:ba:0c:1c:8a:54:37:4e:b3:d0:cf:be:
10:b8:d2:d7:2f:ff:bf:ee:ea:1f:74:15:43:58:13:
99:88:dd:bb:a8:fd:9c:a1:26:61:70:cc:19:92:65:
67:55:2d:93:ec:b2:d9:17:e6:76:60:3e:54:28:35:
03:7c:a2:a3:77:9a:e0:95:e5:fe:71:48:e0:d9:ff:
6b:b7:ab:ff:3e:e8:a8:f2:a9:dc:df:66:15:c8:65:
7b:2f:84:40:a6:19:c3:0a:f0:70:bd:58:aa:c1:79:
3a:55:27:f1:c2:0b:a6:22:5b:ec:49:10:0b:e5:f0:
88:68:86:00:6e:88:8f:51:15:47:5e:a4:84:bd:e4:
42:4e:eb:43:f0:d1:ed:b0:9f:d8:09:d7:7d:4b:7b:
b4:74:30:5f:68:ad:b9:95:10:fd:90:56:65:59:3c:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:4F:4B:52:D4:68:87:FB:BE:58:26:FB:5C:61:8F:44:81:3A:CA
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ed:5e:b0:7b:18:89:f4:aa:bd:44:12:73:57:d5:12:2f:e6:
23:94:6a:ab:0b:29:f2:d7:a7:61:ae:eb:1e:3d:e1:f1:91:68:
0b:28:6b:4f:cc:62:01:89:95:9c:26:35:7a:fa:72:a2:e5:d7:
88:40:7c:58:3f:15:53:17:7a:86:1b:ac:47:0a:f9:53:1d:6b:
fd:80:12:83:97:ef:d0:80:b8:e0:11:b7:9b:2f:3b:28:85:13:
68:30:50:ab:17:a1:b3:59:1a:ba:c3:1d:c8:32:8e:38:21:72:
12:b3:13:11:81:db:38:7e:d8:a0:60:84:9c:e1:f4:35:3d:a6:
89:b9:7d:1d:e0:ee:e3:e2:32:cf:0e:77:3f:ab:4e:c9:06:ef:
4a:1d:a1:66:84:87:f2:22:bd:72:bf:fc:1d:0e:e8:5e:03:68:
ba:87:30:fe:4e:6f:e7:15:d0:dc:3e:ee:75:8e:5a:67:a4:df:
b7:38:bb:ea:39:da:35:48:ca:d5:e7:76:4d:78:7c:70:fe:ef:
44:4f:c5:8c:54:48:81:20:1b:d6:ff:f4:b0:e6:d2:00:23:ba:
8a:25:4e:26:99:83:de:74:44:ac:08:67:5e:cb:40:30:aa:4e:
9a:4d:dc:32:b4:6b:07:7c:1b:9b:0b:30:d5:d9:8f:7a:31:3a:
d8:c4:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:14:27 2025 by rpki-client