Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: fQOpUhE40rReUNZM03NuhEeWRnLag9QTdBhfy9MaX5w=
Subject key identifier: 3F:6E:A1:72:DD:1F:C9:98:E9:FF:A7:1D:6F:6A:91:D7:5D:7C:D1:94
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019691157D98000B48337BEFDE73CB39CC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 04F7
Signing time: Fri 02 May 2025 13:00:26 +0000
Manifest this update: Fri 02 May 2025 13:00:26 +0000
Manifest next update: Sat 03 May 2025 13:00:26 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: ZWRBe53dTwTyWn5uVo3jLktHMyF2KYdQ53Iw983APyY=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:7d:98:00:0b:48:33:7b:ef:de:73:cb:39:cc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 2 13:00:26 2025 GMT
Not After : May 3 13:00:26 2025 GMT
Subject: CN=3f6ea172dd1fc998e9ffa71d6f6a91d75d7cd194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6f:6e:ba:fb:31:5c:91:2f:c7:c1:c3:c2:e7:
6c:37:83:9e:f6:b9:5f:4e:16:37:4c:5a:ee:67:71:
29:2f:78:a6:7a:35:f2:5a:06:c9:cd:ba:a4:ef:da:
40:3a:08:0d:9c:32:1c:fe:08:ba:88:74:ed:0e:73:
9a:cd:56:df:22:4f:8f:9f:41:7d:56:94:61:f8:f0:
47:e7:e2:ec:a0:22:59:df:f5:cb:c2:4e:46:87:d6:
7a:ee:35:84:34:4d:34:da:b0:16:f4:82:38:b1:fe:
44:45:a4:df:66:26:b3:55:d9:df:08:7a:c3:37:ef:
28:20:cb:17:fb:d6:1f:90:4d:13:1e:dd:c9:89:21:
ea:80:74:1b:0b:84:ee:fe:3a:90:f1:ed:70:3b:8a:
9a:0c:57:9e:84:f8:60:4a:cd:73:bd:76:52:d1:38:
79:df:a1:17:52:c8:ad:a7:b9:d4:99:75:65:60:23:
d5:41:e6:6b:54:d7:63:89:2c:54:0d:af:85:3b:b2:
69:76:16:e3:2b:79:07:23:f7:6a:0c:e8:d0:00:ef:
ec:ac:65:05:50:07:9f:57:97:cc:dc:a2:32:80:cd:
d5:18:08:4e:a8:84:a5:59:11:c6:50:8c:1e:84:e7:
e6:c4:4f:84:69:18:9b:85:51:55:35:b6:61:68:05:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:A1:72:DD:1F:C9:98:E9:FF:A7:1D:6F:6A:91:D7:5D:7C:D1:94
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:e6:ff:53:03:de:74:5a:26:4e:8b:f7:c6:f5:1b:73:ab:
6b:fc:6c:49:f1:46:fd:f2:02:58:a1:7b:59:75:b2:82:64:81:
d8:b4:ff:14:43:ee:cb:42:5d:2e:26:c3:74:74:f9:f2:87:ef:
54:01:71:5f:7c:3c:73:09:74:3e:f3:4b:64:1e:a3:66:db:32:
76:3c:fb:ea:3b:5b:3f:66:10:12:f6:b5:e8:84:1a:57:48:ea:
f3:07:8c:4e:d3:58:32:d3:ff:3e:7c:16:05:33:39:20:fa:3e:
88:38:05:50:7e:50:9b:bb:26:9e:19:fc:d7:3b:84:55:ca:07:
fd:09:f7:85:23:96:45:b6:74:37:b0:2e:fa:fb:97:68:f9:1d:
aa:67:cf:9b:88:8a:a3:9c:bd:8f:2d:ce:9a:11:a1:a1:75:8b:
69:a7:8c:fe:33:5d:fc:16:20:90:1e:f9:41:df:ac:8f:45:fd:
e1:1a:c3:13:2a:46:19:ee:7a:9b:d8:ff:a7:31:08:21:1e:a2:
61:6a:06:1b:a2:33:e1:a2:f1:d8:73:a3:7d:50:a2:55:94:c4:
dd:de:f2:6a:84:af:23:ed:6a:fe:36:c5:9d:15:c6:e1:46:04:
c3:7c:a0:66:8f:da:a6:0c:71:7f:85:3b:5e:1c:74:ce:a4:36:
2f:30:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:59:09 2025 by rpki-client