Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: gRu7b4+RhEVozWcy2EMouyhHMP2hG8s+A3ybvzR/bYE=
Subject key identifier: 94:56:7D:6A:F6:F6:44:2E:C8:53:FD:BB:CE:04:47:29:1D:DA:42:E0
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 0196A2ADF279C019D2E1D377365F8F93AC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 1535
Signing time: Mon 05 May 2025 23:00:30 +0000
Manifest this update: Mon 05 May 2025 23:00:30 +0000
Manifest next update: Tue 06 May 2025 23:00:30 +0000
Files and hashes: 1: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (hash: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=)
2: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=)
3: YRU1Ojg5qyXEoXOhvO7oLvQPC8c.roa (hash: TDJgwlET1jOQj6C/tybMD3s4rcsYrcr30h1aS7JqjFc=)
4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: jzRkTIpiTZIIF2SYYCzs+nNzIi2VKldzZ0D2rXkhwNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:f2:79:c0:19:d2:e1:d3:77:36:5f:8f:93:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: May 5 23:00:30 2025 GMT
Not After : May 6 23:00:30 2025 GMT
Subject: CN=94567d6af6f6442ec853fdbbce0447291dda42e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:b6:41:40:87:2f:85:9d:59:6e:1c:ed:60:
1d:57:92:5b:58:66:39:e8:25:57:8c:a6:a7:f0:67:
a0:c2:bf:0a:09:f5:83:d9:bd:21:2c:4c:1a:4a:7b:
e4:0c:7c:ba:e6:46:0e:9c:fe:d4:fb:1f:74:73:f2:
6f:43:e3:93:d5:05:6a:54:3a:e4:9c:07:c9:02:71:
92:c4:1d:14:cf:d1:f6:60:b4:8c:b3:be:bc:62:6c:
4d:7a:38:6f:d7:6e:f7:3c:28:b0:3e:dd:3b:3a:a4:
b9:7e:83:9d:d7:2c:61:95:9d:4e:2c:d3:7f:95:06:
79:41:f5:a3:5b:7d:8b:0d:14:11:bc:63:18:e6:16:
39:65:b9:c1:70:af:28:e4:41:1a:2e:c7:5a:a3:10:
f5:f2:df:27:e2:37:f7:f2:21:7e:23:e5:71:1a:e3:
99:d3:2e:06:2c:8d:41:b8:fb:8c:8c:79:48:e4:94:
cd:e5:00:d8:da:53:75:19:4b:f9:fe:ad:32:dc:73:
ac:68:4a:78:45:17:7f:05:79:c4:d4:b9:e9:58:3d:
79:b6:05:07:02:dc:46:12:1b:db:70:a4:e9:79:a1:
b1:dd:d1:f5:82:7a:94:c2:ed:3a:80:9e:13:cf:0e:
87:e7:34:a1:e6:2e:72:1e:52:2f:23:93:48:9d:ae:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:7D:6A:F6:F6:44:2E:C8:53:FD:BB:CE:04:47:29:1D:DA:42:E0
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cc:ae:cc:51:ee:9d:e7:79:2b:df:af:55:51:17:fe:95:4e:
1b:71:04:94:63:0a:29:ea:bb:c1:94:0e:a6:b3:d2:ef:25:7e:
5f:e7:8e:4a:b9:fa:a0:a3:bf:a4:4a:ba:7c:e2:68:aa:c3:24:
b7:44:80:28:23:fe:d3:0c:13:fc:f4:4c:47:b7:ac:48:02:e5:
84:a2:9e:50:4e:8f:71:3e:ed:67:bc:65:4a:77:01:5a:dd:df:
28:46:b7:ac:c7:af:cd:95:cf:1d:1c:a8:ed:7e:b0:c1:ad:09:
5c:8f:9e:90:f5:25:7d:89:b3:0e:a1:fb:ea:51:a0:d5:ce:cd:
ec:0c:d3:59:d8:12:a8:f1:91:27:bd:78:35:b7:4b:77:20:9b:
ab:4e:86:1c:4c:0e:30:2e:cc:8e:4f:7b:a0:6c:ab:f6:13:a9:
7a:26:be:b5:e1:df:1a:e8:50:29:a2:26:c8:da:e9:ab:7b:1b:
64:e3:64:75:8a:84:98:fe:13:43:5a:4c:31:d4:05:03:1d:26:
68:41:0d:2c:7f:72:f4:12:66:bb:75:32:01:08:f3:65:14:09:
98:63:56:88:24:35:72:9a:2b:25:6f:ce:fa:26:92:6c:42:32:
00:c3:57:54:d6:70:5c:8d:32:73:5f:1f:8e:3c:61:35:b2:f7:
c2:b8:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:10:36 2025 by rpki-client