Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: +naQ6d1mVwiSyWSWUywc/hHDnvaGM35snUaZSFVpXuo=
Subject key identifier: 9A:2B:C3:26:1F:7F:12:D3:C2:24:29:4F:D8:A7:B6:07:A5:89:6A:E7
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 0196895C25B44993BE8E4798994549EF7AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0A6D
Signing time: Thu 01 May 2025 01:00:39 +0000
Manifest this update: Thu 01 May 2025 01:00:39 +0000
Manifest next update: Fri 02 May 2025 01:00:39 +0000
Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=)
2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: Hjhk0ZtqNurDMAMZrDOiNy7R6Rb+ALiZ2mW9sUPCsqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:25:b4:49:93:be:8e:47:98:99:45:49:ef:7a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: May 1 01:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=9a2bc3261f7f12d3c224294fd8a7b607a5896ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:8f:54:2b:a7:bb:58:31:9d:1d:ad:0e:4e:
eb:6b:69:d5:39:7c:58:8c:50:27:f7:16:bc:8a:20:
d0:88:45:a7:e9:8f:83:ae:37:8b:59:2f:4a:98:80:
06:85:a6:00:bd:d6:fd:08:80:84:19:ae:43:3c:7a:
a7:fa:9a:ba:50:f8:6b:06:c4:eb:1a:41:99:5b:c7:
37:65:4c:38:ab:08:bf:9e:83:69:c4:74:1e:47:06:
91:21:1a:ad:45:08:7d:77:d3:79:78:ca:30:49:00:
d2:52:70:6a:0d:a4:1c:08:c1:63:98:ad:7a:52:3c:
fa:2a:0e:8c:82:7f:6f:91:83:6f:63:70:57:8d:82:
f8:d9:38:99:77:77:9e:6f:18:c8:ea:e7:eb:99:00:
65:59:ac:a5:2d:2d:47:fb:e0:b0:29:4c:d1:51:99:
99:2f:31:d8:b9:c5:78:52:f4:c8:31:fe:f0:88:91:
58:fe:2a:fe:2c:ff:96:84:5e:cd:5d:6a:f0:01:d4:
24:6d:80:ba:ae:dc:79:8d:11:f2:c2:cb:9f:33:23:
c9:b1:a9:6c:cc:cc:46:d5:c1:c2:6b:ac:5d:76:5f:
0f:d1:b8:dd:63:4f:dd:18:ad:d4:94:64:53:16:31:
a9:4b:97:18:2b:0c:79:3e:15:fe:a5:14:a8:67:3b:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:C3:26:1F:7F:12:D3:C2:24:29:4F:D8:A7:B6:07:A5:89:6A:E7
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9c:44:6a:ed:d9:b1:b9:78:52:2f:c0:e1:23:77:78:7a:48:
b3:11:1c:c7:25:e0:78:34:5d:c0:88:dc:ac:bd:6c:04:e3:d3:
78:ef:59:da:57:f0:b9:b2:67:4c:b0:de:b9:65:71:8b:a2:06:
ba:f4:88:aa:22:c7:5c:2e:5a:df:f1:bf:bd:b8:a7:04:fb:92:
ac:c3:c4:46:00:b6:30:92:cd:95:8b:4c:59:7e:40:fa:97:f7:
fd:dc:51:c8:f6:99:60:f7:aa:de:29:e1:0e:3f:12:34:e5:fb:
7c:9b:4a:d0:e9:a9:21:bd:23:4a:e2:c0:72:f7:ee:1d:40:81:
df:dd:7d:0b:09:38:bf:d3:1f:2f:b2:64:45:5d:23:9d:b4:b8:
99:00:7f:7d:2e:6c:e5:a2:7d:f1:bf:67:ef:05:83:81:24:8b:
d5:91:cf:63:c5:2e:55:55:82:47:3f:ac:ac:71:bc:54:f3:5b:
49:c5:e3:24:f5:fd:e9:95:7b:85:89:c0:92:10:20:f8:66:99:
12:06:56:18:e3:7a:61:9e:8e:d2:8e:a4:3f:72:f9:19:b8:e0:
9c:6d:7e:c0:3e:57:52:fb:11:dc:b2:64:c3:88:a7:c8:35:be:
36:c9:39:af:02:25:09:bd:0f:2e:83:a1:dc:14:cb:a0:b8:9c:
e5:4f:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:09:59 2025 by rpki-client