Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
File: mLERYbntS7CKACbVz9H-yWh8GcM.mft (raw, json)
Hash identifier: Db04rSyF8Ohy482ihrJXZ/OXZF/Y9rQjSTYwyONX5DI=
Subject key identifier: 78:F8:D1:19:0F:5E:34:5D:00:FD:43:82:33:BC:3D:04:FC:21:C3:39
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 0196809026358DE66794662020C52585446F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
Manifest number: 06FD
Signing time: Tue 29 Apr 2025 08:00:52 +0000
Manifest this update: Tue 29 Apr 2025 08:00:52 +0000
Manifest next update: Wed 30 Apr 2025 08:00:52 +0000
Files and hashes: 1: mLERYbntS7CKACbVz9H-yWh8GcM.crl (hash: 3isWG9nOnTi6Ny5cfp0a4iLvTy8IQSl5vnETBIcbbSM=)
2: x61cbfT7RvhEfVSD3Yzd6Sqt3eg.roa (hash: nkg8d2JuPVPfqk0kcc5OXRrb5PIvthJQYUpxPMl5/LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:26:35:8d:e6:67:94:66:20:20:c5:25:85:44:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Apr 29 08:00:52 2025 GMT
Not After : Apr 30 08:00:52 2025 GMT
Subject: CN=78f8d1190f5e345d00fd438233bc3d04fc21c339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:e8:f0:d0:5d:e2:88:77:fc:4b:64:8c:24:
54:80:b2:4f:95:60:f4:e5:71:01:35:e4:3b:dc:e7:
e8:5a:2d:54:c6:7f:b6:3a:1c:9f:74:29:f6:af:d6:
4e:5a:bf:e5:41:9b:8e:9a:6d:d7:1e:54:94:4c:19:
c2:5e:c5:9a:b7:db:35:f8:f5:59:30:18:62:25:10:
90:34:29:d1:46:02:fc:ae:33:99:19:2c:d0:85:c9:
32:74:73:05:04:a9:b7:dc:ca:ba:c0:53:6b:dc:fa:
83:e6:ca:c9:8a:27:38:fa:5d:5a:8f:0a:42:58:e8:
ca:45:7e:94:3c:57:85:e7:be:67:ce:e5:ee:f6:70:
14:94:45:84:5b:0d:b8:49:67:47:50:52:0d:ce:e6:
89:b5:ae:10:4c:1a:42:ca:ed:06:42:f3:0d:3c:09:
8c:b8:57:3b:14:35:c2:85:64:90:be:85:81:58:a3:
c5:e2:f1:18:03:0e:7c:45:bf:60:1a:b5:c8:0b:11:
a0:e1:2b:2b:72:c6:9e:c4:a6:8a:7b:8b:3a:c3:d8:
c3:88:ed:21:ea:dd:55:2f:96:98:5f:43:c4:4a:a6:
c6:a6:09:a2:14:a3:3b:42:7e:d6:04:2b:14:91:af:
31:46:6a:6e:6a:e2:4f:c2:ae:1e:95:ae:ab:a5:b6:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:D1:19:0F:5E:34:5D:00:FD:43:82:33:BC:3D:04:FC:21:C3:39
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:40:86:15:7b:16:bd:b9:cd:65:be:9f:39:55:79:51:7c:af:
d3:bc:d3:a2:9d:9c:8d:71:3d:ee:af:c6:d1:de:da:f2:10:21:
7b:91:88:e2:4a:c8:4c:38:7b:91:f9:88:03:fe:1b:43:45:14:
37:ef:81:5b:18:14:fa:fc:a9:24:3e:e0:ff:5a:53:f0:68:25:
a4:27:07:28:b5:b7:00:40:29:9d:af:7d:a8:6f:d0:7a:9d:56:
59:0d:35:07:d7:af:7e:db:fa:fd:ac:7e:94:10:ce:2e:9c:1c:
e8:fe:90:43:8a:4a:74:d1:2a:b5:12:5f:b5:00:41:58:3e:39:
13:00:9e:f9:b9:46:3c:85:11:ff:dd:40:b8:cd:cd:33:d8:fe:
6b:d3:0e:ed:08:93:cc:07:d3:62:42:38:06:a3:0d:9d:b4:93:
11:32:ca:29:53:b1:bc:44:d5:fe:61:e6:be:59:d4:3d:73:04:
ec:48:e6:ee:07:c7:47:ed:cb:42:30:8f:02:f6:55:74:ac:26:
bd:89:b3:db:8e:64:88:26:d7:93:7e:d6:ab:e2:b4:64:63:62:
e1:88:44:40:98:0e:60:6f:c8:24:93:c2:4e:cf:83:64:5e:96:
41:07:42:2f:f8:3c:e2:58:b7:fe:4f:3d:1d:24:0b:12:dd:26:
13:40:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:45:45 2025 by rpki-client