Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File: p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier: YxXZnb0KgYGV8PNcEOl5880BjauSzcm4podPVr8LPHc=
Subject key identifier: 96:EA:6F:E0:E6:BC:16:2C:14:9F:98:D9:01:5E:B9:72:D5:CC:64:FB
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 019685484D1097602EEBC4C4765B9818D4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number: 1157
Signing time: Wed 30 Apr 2025 06:00:30 +0000
Manifest this update: Wed 30 Apr 2025 06:00:30 +0000
Manifest next update: Thu 01 May 2025 06:00:30 +0000
Files and hashes: 1: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (hash: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=)
2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: 83l7xQYzQGGND8i84BISh+24erGOut7GtL4MIs2SlII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:4d:10:97:60:2e:eb:c4:c4:76:5b:98:18:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Apr 30 06:00:30 2025 GMT
Not After : May 1 06:00:30 2025 GMT
Subject: CN=96ea6fe0e6bc162c149f98d9015eb972d5cc64fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:05:67:a3:6a:29:e9:17:c4:36:68:5a:36:
b7:7a:68:aa:8a:56:e8:cd:86:81:1d:7a:e7:66:5b:
54:4c:af:71:71:a1:59:c2:22:bc:e6:ab:84:e8:9c:
e0:a7:aa:f8:90:4f:87:4f:15:89:5f:1f:5a:99:dd:
35:0b:61:84:23:39:bd:54:aa:f1:f8:c4:67:5b:39:
ce:de:0b:35:a0:09:04:1a:c8:b4:52:ed:5c:98:9d:
c8:dd:98:79:74:ed:27:bc:92:7e:39:d0:1f:1f:ab:
26:e3:c7:b2:d4:43:50:0c:3f:a2:ce:1f:1a:6c:95:
9c:96:91:76:c0:cc:fc:64:87:04:3d:18:e3:73:a5:
bc:29:a0:71:d8:3d:d8:b3:d8:c8:02:62:66:6d:e6:
5f:52:03:64:80:fd:0c:10:80:aa:f4:fe:63:9d:e9:
e6:83:ac:71:79:5f:1a:7f:6f:17:de:e8:5c:f9:e6:
85:a4:df:29:6d:ac:20:f7:f2:3d:75:21:23:18:83:
b0:53:f0:6d:a8:17:ec:96:6f:d4:9a:a4:98:59:89:
62:37:14:2d:24:b5:2f:7f:39:75:78:46:d2:99:f8:
d4:ba:1e:71:fc:fb:45:b0:0c:cf:7a:e3:14:5e:e3:
0e:27:de:bb:04:9a:5e:45:74:e1:e4:ac:dd:ef:f7:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EA:6F:E0:E6:BC:16:2C:14:9F:98:D9:01:5E:B9:72:D5:CC:64:FB
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:16:d8:ea:f0:23:62:d0:5c:e3:56:9d:5a:c4:5f:01:a6:ca:
53:e3:0f:3d:eb:62:94:13:6f:a9:61:8f:82:bb:e5:6a:23:75:
97:40:0e:a5:4b:c1:91:be:ff:22:96:06:17:7e:51:b5:08:a5:
e6:24:9d:cb:e2:80:d7:16:b0:04:50:d0:4a:63:5a:6b:45:f6:
80:18:c1:51:b3:cc:38:7f:1e:a7:96:f7:ff:b4:db:28:e1:55:
07:14:48:81:0b:43:95:ba:69:e8:d8:f4:eb:27:9a:e9:ef:b4:
63:46:5d:a0:cd:a0:49:bf:16:e3:f3:9d:38:f0:78:50:f5:6a:
c2:29:26:15:54:f8:69:eb:5d:e4:ca:8a:d0:05:61:65:1d:21:
bd:9c:81:3c:05:c2:5d:4e:0e:c0:a7:bf:00:21:de:b7:3e:4a:
b7:56:dd:12:65:0c:53:eb:3c:e0:9a:8b:c1:1f:c6:5b:fc:22:
d0:5f:2c:cd:4d:dd:e0:3d:8f:8f:d9:5b:ab:19:98:fd:1d:65:
06:c9:d4:73:48:3c:f3:72:34:59:35:d9:c8:ea:01:7a:8b:da:
51:77:71:35:f2:b7:c5:30:e5:9e:93:55:89:2f:fb:1f:cc:b3:
8a:31:4c:c4:b4:ba:0b:08:55:1c:33:9a:b7:f0:f3:3f:17:1c:
79:ff:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:23 2025 by rpki-client