Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: x7wRvG3ddiTtSZA3rKuvPMWvaNtwPL94bIIZg5DbyhY=
Subject key identifier: 2A:25:65:F1:D0:A7:E7:3E:C5:83:42:AD:47:26:1A:94:37:E4:F8:4C
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 01962ABBA827E5B8FF42058862FD2950F964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 08FC
Signing time: Sat 12 Apr 2025 16:01:03 +0000
Manifest this update: Sat 12 Apr 2025 16:01:03 +0000
Manifest next update: Sun 13 Apr 2025 16:01:03 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: u6EVgk5LyImy9mCa/6YLV9s+SylcPloJu1QQ7lWPSCY=)
3: I8ts4VChZIvxCXnk3zghDL9Bmu4.roa (hash: Md6prX/mk6M2hIPa7lBG6X8P2VoqSBLYC0PebMg3Wr4=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bb:a8:27:e5:b8:ff:42:05:88:62:fd:29:50:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Apr 12 16:01:03 2025 GMT
Not After : Apr 13 16:01:03 2025 GMT
Subject: CN=2a2565f1d0a7e73ec58342ad47261a9437e4f84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:a5:1a:d5:36:ae:ce:73:27:0c:0b:09:7c:
0c:e0:b5:cf:3e:fe:bc:26:18:d4:47:ac:ba:50:ce:
38:c7:2b:14:4c:cf:3a:db:49:7d:76:49:db:cc:25:
fd:f3:8f:a9:de:1c:8e:60:c3:53:20:60:aa:af:df:
ce:fb:3f:7c:ef:17:08:5b:6c:3d:e8:c8:94:63:21:
62:33:68:0b:93:71:7c:7a:2a:a9:5b:27:be:ed:f1:
f3:ae:f5:0a:b9:93:6f:a6:22:24:cc:6d:64:d2:f2:
4a:9e:c9:49:63:a3:b0:23:31:97:f6:db:e2:66:39:
d5:09:39:60:21:2c:96:f3:c2:51:b0:8e:1d:d3:55:
3a:1b:40:aa:7e:64:31:09:2a:fc:53:33:e1:28:56:
b3:d9:8a:99:8e:a6:9b:63:a2:24:4f:c6:22:a9:59:
12:ce:36:7e:39:9e:38:4c:ae:e5:e4:8a:82:a4:28:
22:a1:82:6b:af:5f:47:43:6c:51:cb:a1:b2:76:69:
ec:06:98:7c:39:ee:20:23:14:b5:d4:4d:1f:ab:61:
e4:e0:df:c0:71:7b:80:99:9b:d1:a5:b8:d2:ca:c3:
92:fd:14:c5:d5:5e:22:8f:46:92:11:91:45:9c:ac:
64:74:8a:47:95:7b:b0:b0:b2:c7:97:df:26:2c:dc:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:65:F1:D0:A7:E7:3E:C5:83:42:AD:47:26:1A:94:37:E4:F8:4C
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3e:01:04:dc:e7:2e:43:8c:be:46:9f:3a:9b:fa:cc:e6:34:
7e:35:7a:33:ac:9d:97:2d:0a:e6:d9:87:68:a7:ea:49:f5:b8:
9d:a1:6c:08:d1:74:98:0e:9d:30:05:ed:3c:49:6a:d1:50:77:
d3:10:48:06:3f:90:57:5f:e6:97:f0:01:fa:aa:18:8a:da:5f:
73:0d:21:a6:8d:d1:47:f4:13:c5:33:8e:63:67:3e:78:48:3a:
a8:df:06:60:d2:1a:1d:58:9b:a3:44:65:00:db:09:23:66:cd:
4e:40:e1:f1:4b:b0:75:30:85:75:62:fc:24:f4:f6:75:c2:22:
18:d0:de:ba:60:6f:c1:d3:5a:72:e0:a0:c0:86:35:63:14:05:
72:3c:71:70:29:e1:4d:25:72:42:de:f6:80:6d:65:11:4e:99:
41:22:26:04:de:e3:ea:08:31:0c:55:d8:9d:47:c5:01:70:7a:
c6:67:32:db:e8:20:be:e3:5b:10:61:21:57:af:ad:9f:e1:73:
71:fe:98:29:6f:74:c7:89:46:1d:83:c0:81:97:06:dc:b0:56:
ae:cf:04:98:e0:52:01:72:8f:1b:45:ee:0b:28:9d:37:ae:b7:
78:82:7c:c3:a1:a2:9d:0a:ff:02:a7:a0:37:e3:c6:c5:03:c7:
41:b5:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:41:56 2025 by rpki-client