Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: 1+QL+ElRCAanxdpbrXpCotZ9bW4N7OSnPPrwLJSyUA0=
Subject key identifier: B1:4E:88:3F:02:6E:6C:5D:4D:6D:F6:16:05:09:EE:63:83:53:1D:CA
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 01968C25F577B26859DD94A6D91CA8855A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 0CF5
Signing time: Thu 01 May 2025 14:00:19 +0000
Manifest this update: Thu 01 May 2025 14:00:19 +0000
Manifest next update: Fri 02 May 2025 14:00:19 +0000
Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: K53n9/iQTtDJbzGfhGBv0TJ6rZmuAZccdJa0JY6rEtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:25:f5:77:b2:68:59:dd:94:a6:d9:1c:a8:85:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: May 1 14:00:19 2025 GMT
Not After : May 2 14:00:19 2025 GMT
Subject: CN=b14e883f026e6c5d4d6df6160509ee6383531dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:26:fd:6e:cf:43:d1:f6:9e:f9:b2:2c:e5:
0e:ff:5c:9f:60:7b:c5:bb:28:23:8c:33:7c:52:b4:
9c:82:b5:cd:f7:ac:28:04:c2:6b:cf:58:b2:1a:93:
16:6f:66:12:f6:c0:e8:e5:31:d8:1e:cd:c3:35:94:
11:d4:ec:92:7f:dc:14:cb:75:36:e5:70:07:fe:36:
7f:69:ca:e0:e4:39:96:a4:d4:89:65:39:d7:9d:5f:
c9:52:61:48:e6:2b:a4:f1:3c:44:85:89:d7:a3:41:
79:74:fa:e1:2c:dd:20:c8:33:82:1b:c1:5e:28:c3:
04:f1:93:30:2d:ca:d5:84:45:0b:79:e3:00:d2:d9:
5d:c3:78:07:7f:c5:8c:d5:12:f0:26:d0:cc:70:45:
9c:00:39:4f:ff:91:3b:eb:c7:f4:12:f6:f2:5a:20:
30:8e:2b:bb:9b:84:60:9f:03:e1:7b:1f:86:f0:cb:
83:03:b4:b4:fd:fd:85:86:3e:29:da:41:1e:cf:cb:
e2:34:98:2f:54:a2:5f:ab:41:5d:a2:77:32:dc:4c:
61:17:6d:81:2c:b3:04:79:57:b9:9b:7a:47:98:1d:
27:b9:58:c9:c4:bf:ff:45:6b:3d:69:6a:72:8f:c3:
15:4e:b6:6f:3f:5a:5b:65:f4:35:db:3c:d6:31:19:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:88:3F:02:6E:6C:5D:4D:6D:F6:16:05:09:EE:63:83:53:1D:CA
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:44:8e:50:45:e3:4f:c2:89:71:cd:11:06:ff:3c:c6:06:b0:
d1:83:3d:fb:0b:30:8d:74:5f:77:72:01:d1:a2:5d:69:55:fa:
e9:a7:8f:1f:e5:4b:b6:cf:34:96:15:49:1c:5a:d0:89:cf:d3:
19:b5:1b:b1:cd:02:c7:d1:5d:d5:96:4a:5c:cd:e4:59:47:5e:
3f:4f:74:97:3f:0c:01:4a:cd:d0:97:14:de:0b:65:08:fd:24:
a4:43:b6:18:45:b1:48:ea:30:55:53:37:fe:a8:61:8b:36:30:
72:15:31:39:8a:ea:04:88:93:2f:ba:f2:ed:10:bd:50:0f:40:
e3:8d:d0:4c:79:0f:c0:84:1a:9b:33:35:21:8f:57:e9:68:f0:
a3:87:99:4a:f2:69:00:6c:2c:d8:af:71:de:36:eb:92:85:00:
c3:76:ce:d9:3f:e3:96:dc:6c:6a:1c:21:29:15:1e:e6:b6:a1:
c8:e2:cc:b6:13:ff:a9:07:de:18:22:dd:b8:08:f6:c0:ba:cb:
9a:4a:8e:b1:de:23:64:3e:53:2e:a2:53:29:3a:6f:9d:4a:f4:
45:7a:d3:38:bd:59:eb:be:f1:a4:a6:b1:f0:57:7d:eb:52:4f:
4a:a8:1b:f7:c4:4a:9c:47:0d:c2:a4:39:f4:c9:bf:32:e9:0b:
07:d3:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:42:54 2025 by rpki-client