Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: qbhR4AOni7jRuDXNOsGBGFUIR+5APGymdQyj6rFDYNA=
Subject key identifier: 2F:CB:F6:60:35:0A:A0:F8:15:C0:F4:86:AC:43:E8:2D:08:07:A2:DE
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 0196827E2FA4EF481408F1A4B043A80B00B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: DF
Signing time: Tue 29 Apr 2025 17:00:29 +0000
Manifest this update: Tue 29 Apr 2025 17:00:29 +0000
Manifest next update: Wed 30 Apr 2025 17:00:29 +0000
Files and hashes: 1: BsVvYEeON_W4W9ZLNqa4GXckg6I.roa (hash: iOxv5V+HpG39JzWV7shdmh0Q2oD1yPq3ovyP8RI1dPM=)
2: PejYz8HPGGclVll9vz9DLWCJzMQ.roa (hash: kVrf6QXYUJflpg6RS9qqGj+K93kGQxvjJpeCSRiFtPk=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: nc4waEfTTfMRfOgiTutOsXCKGpg1wfA3KuT9J9t6TPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:2f:a4:ef:48:14:08:f1:a4:b0:43:a8:0b:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Apr 29 17:00:29 2025 GMT
Not After : Apr 30 17:00:29 2025 GMT
Subject: CN=2fcbf660350aa0f815c0f486ac43e82d0807a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:a6:cc:48:24:4b:0e:f1:09:df:80:73:87:
26:e6:d3:27:42:48:62:01:c9:03:67:23:a1:25:d2:
ce:61:bf:fc:92:57:4c:9e:25:d6:7e:0d:5c:6f:68:
fe:7f:bc:d5:9b:31:38:50:9a:20:a3:55:c4:b5:78:
df:a6:dd:f4:bb:77:45:f9:9f:49:f8:38:a6:b6:ab:
00:ad:cf:9c:a8:1a:10:19:6c:47:1e:49:90:ed:49:
24:ab:2f:89:54:1f:8e:24:66:88:87:ed:a5:2e:35:
e3:b3:34:00:f2:ad:0f:09:4d:66:9e:6c:cb:22:49:
5a:8e:26:7f:4f:6a:b2:45:fb:a9:7e:47:a2:3f:e7:
b1:f7:57:38:45:1e:71:9d:c3:8b:93:35:ec:54:b1:
05:76:7d:68:92:fa:db:b0:54:48:e2:2b:a7:aa:49:
9d:73:02:b0:86:f8:55:68:75:71:71:0f:ab:f4:93:
4e:a0:c9:b5:65:33:9d:ac:93:4c:e1:db:9a:8a:93:
fb:c2:a5:8f:a1:e2:f4:aa:d6:68:46:0b:33:29:40:
3a:e6:c7:c4:b7:6e:50:c5:16:06:6d:10:7a:8f:ee:
d3:cd:50:7d:b7:e8:b9:af:58:97:5b:2b:94:a5:49:
c2:1f:cd:9a:82:23:8f:fc:2b:08:a5:e2:81:91:fd:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CB:F6:60:35:0A:A0:F8:15:C0:F4:86:AC:43:E8:2D:08:07:A2:DE
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:21:e4:d1:71:40:22:c6:f3:41:b5:bf:81:07:c6:66:d3:
e5:ae:87:df:bf:a2:9d:6e:cf:2f:73:75:06:ea:47:21:54:5a:
e7:68:9e:59:dc:0e:73:7a:1c:2d:de:55:f1:f7:29:6b:09:2f:
7c:c8:b9:64:8c:1a:7e:e7:90:bb:90:96:1d:ca:56:5b:04:66:
59:01:ec:3e:fe:0b:25:ba:4d:a7:54:fd:c1:88:6a:5d:d4:51:
c0:e9:db:1c:cb:87:57:02:0b:03:a7:70:a5:03:fc:f0:4b:f4:
ea:83:a4:91:db:59:71:db:39:26:7d:93:63:21:6c:7f:65:8a:
3a:53:4f:04:31:4e:ff:2d:dd:80:2f:ff:f8:f1:9c:e7:80:81:
cf:cf:1a:6c:e7:28:a1:5e:4f:d5:ca:75:e9:33:96:16:29:71:
4c:82:be:6f:95:cc:4d:7c:2e:a9:97:11:48:be:39:6c:db:20:
c9:f3:f5:fc:0c:12:f2:c5:51:b3:99:e7:fe:77:88:7c:79:01:
75:d8:11:33:19:a9:43:66:bc:e6:0f:72:f7:dc:72:90:8b:9a:
b3:f3:de:0d:e0:5b:27:44:f2:5c:7d:c2:b2:cf:89:ce:b2:9f:
fe:37:57:8b:24:97:df:22:58:05:6c:03:10:2e:9e:20:13:b0:
b1:6d:fc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:16:29 2025 by rpki-client