Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: DiIoSUgkFDeteCXSnehE1vwzxZ/9Ve5q0QY7knHW7K8=
Subject key identifier: 0A:2C:C1:01:5F:17:6C:CD:74:EB:10:17:CA:D1:DF:18:A6:0F:13:BB
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 01965DCD6168F9FB91681814584F1F72D8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 0DB4
Signing time: Tue 22 Apr 2025 14:01:02 +0000
Manifest this update: Tue 22 Apr 2025 14:01:02 +0000
Manifest next update: Wed 23 Apr 2025 14:01:02 +0000
Files and hashes: 1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: ZAosWRCCA9VZCz8RlSqEbxP98pHA84mFwWaNCLIFeEk=)
3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:61:68:f9:fb:91:68:18:14:58:4f:1f:72:d8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Apr 22 14:01:02 2025 GMT
Not After : Apr 23 14:01:02 2025 GMT
Subject: CN=0a2cc1015f176ccd74eb1017cad1df18a60f13bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:71:c0:05:7c:49:a8:3a:d3:a2:6d:0c:7d:
fd:66:25:42:93:9b:b1:d9:82:d3:13:bc:b6:c5:18:
1f:eb:b7:86:72:a8:6b:97:33:11:96:d1:8f:1c:9a:
18:17:27:c9:36:85:d9:ec:2a:50:94:fb:ef:cf:ed:
02:40:b1:6f:c8:ff:b3:85:a8:25:41:23:1e:56:d5:
7a:c4:4a:82:cd:b3:6d:b0:ca:20:53:e9:b4:31:89:
03:7c:71:9e:ff:ce:9e:6e:da:b3:13:7c:4b:fd:31:
b1:f4:59:d8:fd:05:b1:bb:a8:90:f3:ea:7f:a7:90:
20:fb:89:58:e4:ca:cb:8a:28:93:c0:ec:4f:12:c4:
77:11:4d:59:6f:00:08:ad:c2:57:13:8b:15:6b:27:
b1:a7:18:ed:d1:1d:3b:fc:84:9c:2d:15:ff:0a:36:
d1:87:a7:c2:66:14:d3:76:b6:eb:34:b4:f9:6b:4a:
df:c2:80:71:3d:d2:aa:b3:a8:73:8e:0c:ef:de:ab:
97:60:7a:78:ca:0b:b3:fa:9b:b6:f7:81:17:36:60:
9a:1a:33:a4:1b:e4:e8:96:79:92:80:bc:53:cc:a8:
b4:3a:c8:35:a5:c3:e6:28:b8:52:3b:30:a3:d0:4b:
d9:c2:29:0b:7a:4b:d2:fd:2c:4a:51:e1:f1:03:a0:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2C:C1:01:5F:17:6C:CD:74:EB:10:17:CA:D1:DF:18:A6:0F:13:BB
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1e:38:5e:5b:e9:b6:c9:9e:cb:03:fb:36:bb:11:5d:e4:4d:
a7:ca:38:bd:33:05:20:fe:65:c9:d6:1f:88:db:7a:4b:a7:08:
62:21:ff:84:7d:48:2c:79:cd:18:1e:c2:1b:fa:32:4d:f3:bf:
75:30:b8:79:8f:7f:b9:17:e3:31:68:33:d3:1e:70:d5:75:70:
d2:44:4b:39:a8:66:8a:43:aa:32:a9:de:da:64:15:d2:87:88:
ab:ee:a3:eb:d2:54:cd:44:ed:48:fe:9e:09:d9:c6:3d:a7:3f:
d1:73:26:39:92:43:89:c5:67:e6:07:a6:26:bd:a2:8d:f7:eb:
8f:bc:3d:a2:10:01:65:6f:b9:dc:9f:84:87:0e:bd:be:0a:bf:
9c:4c:69:41:e2:65:d3:69:d9:79:a3:f5:34:b5:f2:51:bc:b4:
d8:32:22:e6:09:2c:9b:c9:b5:72:78:d7:cb:bd:d9:74:ad:f4:
0a:7c:a4:48:49:4e:8f:84:44:44:d6:3a:96:0c:d0:e1:49:b7:
ed:f6:29:59:9d:ff:96:f9:9d:1e:97:1f:fd:d2:6c:bb:8e:25:
77:12:fb:13:b8:45:32:16:19:65:fb:7c:69:63:9f:73:80:aa:
2e:d4:c4:52:17:86:60:90:97:ba:44:01:70:ed:34:6a:05:ca:
2a:6a:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:14 2025 by rpki-client