Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: OQzAWvA9uwlNH0ysF2gVS7iu/n6BQa0CLIl2rZQozm4=
Subject key identifier: FD:87:D4:E4:54:C0:3E:2A:E5:D6:AF:3F:32:49:43:51:E8:8A:5B:8E
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 01958F9847F249B61C42C3CF5200D105795B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0A9F
Signing time: Thu 13 Mar 2025 13:01:16 +0000
Manifest this update: Thu 13 Mar 2025 13:01:16 +0000
Manifest next update: Fri 14 Mar 2025 13:01:16 +0000
Files and hashes: 1: 9XB5L2BKr8qvjKYU2Uioly6fY1U.roa (hash: tKzpvJI6ftqAt+HOqzK+2PC1tLhzH4FaMM6p7/zTUWE=)
2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: sTdKMOz5eK6jptegBKUOZt9kNQ0rpnoV1O306Hp7Z3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:47:f2:49:b6:1c:42:c3:cf:52:00:d1:05:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Mar 13 13:01:16 2025 GMT
Not After : Mar 14 13:01:16 2025 GMT
Subject: CN=fd87d4e454c03e2ae5d6af3f32494351e88a5b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:74:c9:84:9a:59:d8:c1:10:af:85:bb:f9:
5a:32:5b:6a:1c:0b:d1:dd:87:e9:82:39:13:2c:91:
20:12:7e:ee:8d:8d:8b:55:32:56:43:ba:65:c7:eb:
4d:7d:67:9b:dd:1e:71:e0:3c:1c:c4:01:2e:46:c2:
de:ea:d8:ec:2b:ed:18:bb:ed:f6:ef:76:0f:58:96:
b7:e8:40:dd:4e:2d:e7:8b:59:75:7a:63:52:71:0f:
5d:d8:bd:b7:61:76:12:65:a4:24:37:ac:3e:7c:f1:
d0:2a:30:8b:8a:b0:2e:5e:bb:0d:d4:31:19:cd:4c:
4e:17:06:51:54:3a:cc:32:06:8a:3a:a6:66:b7:29:
83:aa:fc:01:71:9e:12:1f:02:a0:31:9a:00:82:9a:
22:b1:f9:72:27:7b:d3:b1:19:b0:6e:1e:57:f8:c1:
0f:59:c1:27:c2:ec:02:cd:09:30:16:8a:1c:04:6a:
97:a7:9a:d2:f4:47:8c:d0:31:34:a3:f8:17:d3:cb:
a0:82:20:32:03:10:66:ca:61:2a:16:2c:6e:6f:0f:
a4:0f:4b:d9:d4:cd:68:b9:0c:93:78:1e:a3:bd:f3:
70:d0:af:d1:ec:45:90:14:10:5f:e6:8f:3c:b4:27:
e8:e3:84:7d:c6:cc:4b:96:4b:1a:b0:f1:be:ec:d7:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:D4:E4:54:C0:3E:2A:E5:D6:AF:3F:32:49:43:51:E8:8A:5B:8E
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:77:ab:26:f0:0f:42:a4:04:fb:5a:18:1c:55:6d:5d:c1:64:
ea:ea:bd:d6:ae:a0:7e:ef:38:96:44:d7:4f:cd:62:9f:50:69:
d0:fb:a3:84:e7:be:c3:dc:37:8d:38:b3:49:e6:c1:ec:7e:b5:
8c:94:78:d4:0f:dc:ee:42:23:de:17:78:a9:2d:53:4f:dc:5e:
50:8e:33:ee:a1:73:2c:25:c2:e4:80:a7:6b:9c:85:56:6e:59:
c2:3b:35:d6:e3:4b:62:6f:19:27:31:0a:e2:6a:7a:77:c0:64:
37:93:ce:22:8e:c9:99:e4:92:a3:5f:c4:b8:42:75:41:1c:95:
ba:b0:e3:66:03:5d:f3:bc:cb:e6:0a:f4:e1:42:64:5b:38:e7:
12:32:71:8b:85:5f:49:45:7e:30:a2:c4:6d:38:68:f9:4d:93:
76:69:bb:51:dc:ad:89:81:6f:4b:c3:c0:fb:91:10:1c:27:d2:
c7:30:e5:e9:17:64:aa:26:57:1c:d2:1a:b6:1b:0c:ce:06:21:
ae:c5:24:cb:aa:1b:30:7e:10:65:70:42:22:d5:f9:6a:ff:bc:
88:93:47:94:eb:d4:46:d0:6e:0e:e1:8e:24:64:d2:92:78:a5:
6e:dd:47:71:8c:d2:77:78:75:57:57:6f:76:90:65:8d:28:97:
a3:03:5c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:38 2025 by rpki-client