Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: aK9K9R6f8f5P9ENGdjpAjXReADLCHUDo/CdLJkohbZk=
Subject key identifier: 01:95:F7:69:7E:BB:B1:C6:54:F8:94:24:FF:69:69:76:93:82:60:4A
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 019682B4FEADBE7200764F954E9895F9E32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 131B
Signing time: Tue 29 Apr 2025 18:00:21 +0000
Manifest this update: Tue 29 Apr 2025 18:00:21 +0000
Manifest next update: Wed 30 Apr 2025 18:00:21 +0000
Files and hashes: 1: dX70ap0ffv2FBe6b9Bt26afmx5k.roa (hash: cA6YfbXERPxQEeXnO3dLN4qw3GbtwfitkG8Nn52ipuk=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: E7n2is2cmIqMjQnCsa3Y8gKR4SPHVYaKyGzTcJ8M4Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b4:fe:ad:be:72:00:76:4f:95:4e:98:95:f9:e3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Apr 29 18:00:21 2025 GMT
Not After : Apr 30 18:00:21 2025 GMT
Subject: CN=0195f7697ebbb1c654f89424ff6969769382604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:99:21:f2:f8:25:76:78:98:27:7b:b4:fc:
e0:45:56:f0:7b:78:69:9f:40:d5:ac:7e:4f:9a:2b:
4d:61:5c:7b:29:4f:5f:0a:0b:99:e8:14:f8:f7:23:
c0:95:3d:05:bf:5c:83:56:f1:96:42:2b:9c:88:e0:
8a:0a:ab:2d:3c:0a:1d:eb:dc:dd:50:3e:4a:2f:be:
e9:e5:33:b8:b7:fa:6f:b4:79:88:c6:52:1b:4d:fe:
84:74:9c:ef:ba:cb:c8:f5:0c:7d:48:58:8c:96:cc:
70:28:89:fa:0a:1b:06:3f:cb:a9:ac:8f:ae:36:17:
c3:2c:3b:96:42:2d:db:9c:29:0a:c4:00:e2:ea:87:
cb:88:7c:9e:dd:89:b6:35:c5:81:89:25:32:9f:2e:
7c:3d:8c:2c:0b:16:f0:ea:c0:50:ab:cc:8c:a3:7b:
7b:61:b1:13:1b:82:73:10:53:f8:f9:3a:ac:4e:22:
9a:06:ec:a6:eb:21:e0:01:e4:57:78:da:b8:ad:a6:
9d:f1:26:60:5d:2b:dd:f0:a7:03:0a:7e:aa:7e:85:
e9:11:2c:63:dd:ac:cb:60:7a:3b:94:5e:24:2e:42:
22:68:8d:70:1d:b0:3e:99:21:d9:ba:69:fa:f3:b0:
20:45:40:e5:29:47:fe:2c:03:60:f4:2f:df:fb:f5:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:F7:69:7E:BB:B1:C6:54:F8:94:24:FF:69:69:76:93:82:60:4A
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4d:c5:d6:30:6d:cb:8b:0d:e0:9d:69:85:3d:45:2b:5c:ad:
f0:9d:62:aa:66:af:6f:69:f1:58:33:2f:c2:56:da:0c:67:d7:
cc:cd:90:ba:ef:13:4d:e0:3b:18:2e:09:4a:90:71:eb:a7:c8:
9d:72:d2:ac:81:5c:ab:86:9e:c7:6b:aa:cb:f1:bf:56:b5:84:
20:71:bd:ba:88:61:b6:bf:40:31:48:f7:a5:ee:f3:38:43:64:
be:80:e4:b8:38:81:b9:38:d8:f3:5a:44:13:c0:c0:79:9b:4b:
3c:2f:11:1a:b5:4e:5c:13:25:90:14:9e:30:d2:89:af:90:ff:
7e:e4:78:20:1e:90:54:a1:2b:9f:b4:9f:5c:e1:70:99:c6:a7:
a1:b5:02:c3:bb:52:8b:bf:64:7a:68:c8:2c:78:da:24:cc:ee:
39:9e:cf:9b:f6:ad:44:55:62:fd:93:d9:3d:2c:1f:71:63:1c:
42:3c:0b:3e:8b:4f:00:41:1b:ea:34:c8:ba:ec:6f:3b:49:20:
2c:3f:8a:32:4f:d3:12:43:e8:62:1c:94:5c:f6:3f:eb:87:51:
51:89:0a:ac:95:8d:50:64:63:ec:5d:6f:a6:dc:c4:9a:33:bd:
6c:dc:0f:45:4a:b8:53:94:c3:be:3a:22:6b:9c:4b:db:3f:34:
0f:93:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:47:31 2025 by rpki-client