Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: I8P6JwmyOYyWlKeSuAqChqTzjo+iRRqHzLYsllGnx3s=
Subject key identifier: DE:0E:FB:04:1C:02:4E:5D:DB:8C:5F:A4:90:82:F9:56:D5:B9:FA:EE
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 019675673F6A03D0511341BD7F2EFB649DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 04:00:22 +0000
Manifest this update: Sun 27 Apr 2025 04:00:22 +0000
Manifest next update: Mon 28 Apr 2025 04:00:22 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: 9LUNLDWx49ZRrpoU9WyWbKq/acXLIMbq4Go4IjrN4ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:3f:6a:03:d0:51:13:41:bd:7f:2e:fb:64:9d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Apr 27 04:00:22 2025 GMT
Not After : Apr 28 04:00:22 2025 GMT
Subject: CN=de0efb041c024e5ddb8c5fa49082f956d5b9faee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:cc:e5:6a:b5:a8:7b:33:45:9e:cf:a3:2e:
45:84:7b:9e:f2:4e:5a:84:46:99:24:e8:59:79:79:
a4:0f:96:ef:46:06:f1:0a:f1:50:f4:b4:78:bf:dc:
64:56:25:28:4e:ae:51:c1:72:50:6f:18:d2:97:7d:
60:9c:ae:ba:52:f9:9d:dd:3f:3a:aa:12:ef:98:79:
7b:1d:b1:21:d4:65:2b:4b:e7:de:e9:ed:f7:0f:a4:
32:c8:14:d8:cc:d0:9f:f7:e5:38:7d:2f:10:2a:19:
04:90:3e:e1:69:63:7b:bb:db:70:6d:2e:b5:97:f7:
ad:44:ef:a4:9f:6c:7b:e3:ff:dc:29:0b:20:54:34:
11:7a:c5:c5:e4:b5:f4:51:91:8b:a0:8e:35:30:9d:
54:be:b9:0e:be:3d:02:c9:6d:5b:2f:d7:2e:16:85:
d7:52:0e:2a:5d:b3:55:bf:38:56:16:13:11:4c:37:
3e:f3:29:76:8f:f1:2d:84:fd:17:5d:f1:14:72:d5:
d1:ac:bf:85:16:fa:53:bc:57:f1:9a:a5:86:0a:40:
5f:1b:f5:44:01:ee:a7:75:bb:e3:af:2c:43:05:89:
e7:1a:a7:f4:f3:6b:96:c4:2e:ef:5d:d1:4b:9d:25:
ff:4f:1d:dc:3c:fc:30:ae:29:1d:f5:d3:1b:f2:c7:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0E:FB:04:1C:02:4E:5D:DB:8C:5F:A4:90:82:F9:56:D5:B9:FA:EE
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:e2:e7:7f:64:a4:7a:1b:53:21:e5:61:da:44:30:f8:d7:
15:b1:d7:5a:c7:2a:79:68:f7:a6:1b:a6:4f:8e:e1:41:02:51:
19:b6:da:aa:38:b2:f1:1e:0c:06:7e:77:19:96:d7:98:4e:a8:
87:ca:91:7a:68:32:c3:0f:26:d4:e1:95:e3:1a:27:62:13:fc:
42:51:d7:cd:5d:bd:ac:b5:63:e8:75:83:28:a1:94:d8:58:cd:
44:c1:64:83:15:9b:08:70:4e:ce:dd:3f:51:d4:15:0d:86:fd:
45:8e:94:9d:33:8e:ae:2d:24:cc:74:ce:6a:6b:32:fe:aa:03:
0f:41:01:03:1f:b8:be:ce:42:8c:44:b3:25:70:41:85:d1:46:
cc:dd:be:bc:ed:b1:f1:84:b0:f9:cc:ea:e6:6d:34:9d:b6:44:
cd:3f:07:5a:e3:f0:c1:8f:45:89:d2:60:2c:ea:8f:4e:98:d4:
6f:21:54:f0:e0:da:84:c7:0a:2e:11:60:2d:df:d1:df:87:74:
61:a4:7c:89:8a:79:c5:da:4b:25:03:cb:65:9a:ba:11:45:e0:
6f:06:83:a7:f0:f6:e6:50:22:af:09:1f:2e:7c:ab:e7:2d:47:
d5:d6:66:d1:18:19:06:16:2a:52:5e:67:5d:70:b3:2e:0b:f5:
3a:04:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:54 2025 by rpki-client