Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: J+Aj1swYYfvLUaiH1eJirzYix1hUhSz2PfApsLrS/6c=
Subject key identifier: 79:D8:65:7D:6D:8E:1D:39:96:7E:E4:07:B3:D1:61:AC:0B:42:0B:83
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 01969002B55EB7050456AFC7A21D31FAE571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0C1E
Signing time: Fri 02 May 2025 08:00:18 +0000
Manifest this update: Fri 02 May 2025 08:00:18 +0000
Manifest next update: Sat 03 May 2025 08:00:18 +0000
Files and hashes: 1: Iwa2WjVDIZS6E4vl286hIpDRTL8.roa (hash: Ml9mAf4D4cdmyuWDVRKJcbVlY2mEksJYokJMfWOm/SM=)
2: cRrQhRl21akyISJAcESzBw3cqNc.roa (hash: ZVnhoZeTO3PrLcaDJF9qovHR+RzyE1BQFr1o16SkPy8=)
3: kxpX1lCQQ8yOBbstUeCdv_zpUVM.roa (hash: oJhD38+sw8OGBYsN0ao2Z9Co7xQKNJ8DNYl0qpddiRA=)
4: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: OeXVZikGM7ZuvxiC3q0HkkW7ax50HbaoAWLw0Gs8Ap8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:b5:5e:b7:05:04:56:af:c7:a2:1d:31:fa:e5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: May 2 08:00:18 2025 GMT
Not After : May 3 08:00:18 2025 GMT
Subject: CN=79d8657d6d8e1d39967ee407b3d161ac0b420b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:6f:a4:25:14:85:be:4e:0f:df:38:89:51:
87:08:d4:61:12:f4:ff:30:ee:7a:86:3c:00:06:64:
fe:f2:23:1d:a5:12:0b:c7:c3:ed:b7:68:38:73:31:
d5:11:aa:c0:1b:d0:6a:ab:e9:9a:3d:9f:c3:f4:56:
b6:e8:28:08:b7:bf:5c:69:f0:41:b1:44:ea:77:2d:
96:5e:a3:16:24:6d:92:b6:31:8c:bc:9f:de:dd:de:
a2:c0:3d:a6:4d:8e:aa:1c:1c:ba:78:09:6a:f2:0c:
a6:91:04:0d:02:aa:5f:ff:17:8c:44:52:d7:6b:11:
09:ae:bb:9c:a9:99:93:68:c2:b3:61:d8:7d:17:e6:
ff:cc:e0:2a:5a:c4:77:b2:89:9a:39:f8:41:d7:49:
2f:05:87:2c:f8:cb:6d:4f:1a:e2:c6:0f:ad:12:bf:
fb:09:e0:23:b9:2a:c6:a9:6f:19:42:52:97:9b:5c:
e2:9e:32:c3:bc:df:55:6a:48:29:8e:40:a1:bb:6f:
04:cf:cb:00:35:ed:02:cc:92:4e:10:00:d0:97:9b:
29:af:a9:ea:db:28:09:29:0e:fc:98:e6:fb:a3:40:
fb:d5:ef:83:f3:c2:9d:f9:59:72:8b:13:bc:5b:fd:
4b:e1:7f:5d:21:12:19:37:ee:94:fb:82:e9:9b:9f:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:65:7D:6D:8E:1D:39:96:7E:E4:07:B3:D1:61:AC:0B:42:0B:83
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:d8:40:fb:59:da:b6:fa:be:44:9e:3c:16:73:24:d7:93:
94:2a:64:32:a9:99:a7:2f:20:5c:8c:f5:72:13:97:18:22:6e:
0d:c8:e2:f0:03:02:88:e9:f1:c6:6d:89:65:48:bb:17:06:cd:
61:72:9b:ed:4a:b1:e1:16:45:30:9d:e6:99:71:4f:43:74:ea:
73:59:51:d8:5c:24:c6:63:f1:5f:a8:e1:b9:3e:be:bb:5a:d7:
cf:cd:f4:67:6d:11:27:c8:38:09:d9:0f:9d:a6:63:6c:80:e2:
7f:ef:d1:21:8d:f3:6e:e6:d4:4a:67:74:cb:f4:86:4d:a4:8c:
90:83:18:f8:25:ac:d3:e5:2d:e2:20:c1:0c:d6:5e:e9:9a:02:
62:1f:9d:3d:a9:0b:34:48:4b:a5:4f:08:2d:68:1d:67:c6:c0:
ec:a8:a8:d5:5b:4a:be:09:14:60:8d:1f:1b:37:c0:ce:27:93:
07:33:aa:0b:29:df:2e:37:46:f6:45:5a:cc:18:d2:be:2a:86:
0d:59:06:1e:2b:cc:a1:3a:e3:34:ee:2b:70:f8:22:59:88:d1:
62:18:83:73:cb:ca:40:ab:c4:72:92:b0:9d:7f:ef:e6:3d:63:
6e:e0:51:b0:39:76:80:60:f2:ac:f2:40:81:9e:e2:a6:65:80:
28:41:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:00:53 2025 by rpki-client