Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: Mr0JMCyHQptVkVeDaJ+87lMKeVdSSOiu278d95O62ys=
Subject key identifier: 6F:80:7B:EE:70:BF:9B:96:6A:EB:1B:5A:72:F4:E0:DA:A3:DC:04:C0
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 01968E4BC73811129F25E61886EA03C9874F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 034A
Signing time: Fri 02 May 2025 00:00:52 +0000
Manifest this update: Fri 02 May 2025 00:00:52 +0000
Manifest next update: Sat 03 May 2025 00:00:52 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: Djqk3J6LJmIttB3LoTNGiqYI6diC5tIhHv22ljADqNI=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:4b:c7:38:11:12:9f:25:e6:18:86:ea:03:c9:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: May 2 00:00:52 2025 GMT
Not After : May 3 00:00:52 2025 GMT
Subject: CN=6f807bee70bf9b966aeb1b5a72f4e0daa3dc04c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:4d:3f:91:13:48:2f:bc:7b:7b:5a:85:16:
52:c1:a2:98:fb:1e:a0:01:5f:4c:43:3b:a4:81:06:
d7:8f:14:a0:67:7c:e9:1b:65:1f:ae:f8:fa:81:68:
f3:74:b4:3b:b9:04:f7:71:68:84:b1:dd:82:85:f9:
d9:cd:46:47:09:08:08:56:78:89:fb:25:9a:13:b2:
96:21:98:ea:da:a7:1b:6f:6b:88:a2:53:8d:3d:0b:
ff:44:bb:51:60:21:c9:86:ea:84:f2:6c:33:fa:87:
47:bd:9c:93:7b:d0:d5:c0:78:75:42:fc:ff:73:4e:
9f:c8:ba:25:2c:0b:7d:24:a1:ef:7d:41:5a:12:97:
71:e4:4a:57:49:69:83:0f:a3:45:38:3f:f5:46:c2:
f9:e0:3a:90:83:8b:bb:7f:8e:57:98:8e:c3:fb:28:
9a:7a:a8:fd:de:12:0f:48:49:ef:2c:c9:87:26:22:
bd:e3:d2:dc:01:79:25:d5:20:d6:ef:25:16:8a:18:
67:50:67:67:8b:27:cf:62:ef:a9:e5:c4:1c:60:c5:
33:fb:61:9f:4a:41:1b:a8:8d:77:d2:75:2b:f9:b9:
12:d0:bc:66:fc:86:2e:7a:ad:09:31:7e:b8:08:5e:
25:7d:83:92:42:f7:0a:b6:9d:ce:65:02:5f:85:86:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:80:7B:EE:70:BF:9B:96:6A:EB:1B:5A:72:F4:E0:DA:A3:DC:04:C0
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:87:96:09:de:df:d2:05:bf:b8:84:99:51:0f:45:c2:e3:
79:88:92:62:5f:ad:cc:a6:03:27:d2:db:c4:cd:58:23:90:35:
f8:43:ef:24:22:8e:c6:82:c2:bc:82:5c:66:cd:07:f8:2b:d3:
50:b6:29:0f:76:49:67:8c:97:22:55:c1:d3:03:3a:30:67:f9:
32:fe:57:85:32:f3:b3:19:48:76:65:6e:52:81:7a:96:7c:71:
8d:4f:03:38:6b:f4:7c:e1:b4:99:64:b1:bd:fe:10:c0:ba:e0:
ed:79:cc:ac:06:f7:8c:da:aa:a2:2f:69:08:e0:1f:d2:5c:73:
04:38:2b:71:5b:15:70:f1:ef:d4:b7:70:da:bb:40:e7:a1:20:
06:83:99:90:1b:40:86:70:31:4a:22:6b:1c:7b:39:9e:d9:4d:
82:e0:d3:d7:29:bb:63:33:2a:61:15:14:77:73:1f:14:b6:c1:
dc:99:26:07:43:0d:38:5b:5a:f5:08:a8:6f:70:29:5d:90:c3:
a6:f8:da:0d:ca:98:c3:c8:2a:40:71:40:b0:50:8d:86:35:43:
ec:a0:20:63:44:32:6d:e8:64:e1:ac:18:ba:39:55:27:8b:42:
0e:62:0a:17:56:07:79:7d:b4:5b:d7:bc:28:a4:88:0f:b8:16:
bf:90:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:48:33 2025 by rpki-client