Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier: I6+wQAK9IKloC+swnbrbzcmb0vQF41c3LVSxymHTcnw=
Subject key identifier: CF:58:E8:50:3E:A1:42:D5:C8:41:87:F5:67:53:A3:2C:6E:A7:90:B0
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 01965E71C9E098B39D9E59D75A6428A6DFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 17:00:37 +0000
Manifest this update: Tue 22 Apr 2025 17:00:37 +0000
Manifest next update: Wed 23 Apr 2025 17:00:37 +0000
Files and hashes: 1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: 3cKhHM/MzgyEBDgpfgMd8dAvCg9wVbBESFVLN494gXQ=)
2: tKq2kTGwjRxV1VeF4yjWXlgGg4s.roa (hash: 26irNsQZ2yFre3Oewun8lnjL981q/hQTWsn6QhKyj1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:c9:e0:98:b3:9d:9e:59:d7:5a:64:28:a6:df:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: Apr 22 17:00:37 2025 GMT
Not After : Apr 23 17:00:37 2025 GMT
Subject: CN=cf58e8503ea142d5c84187f56753a32c6ea790b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:05:1b:33:5e:30:1d:c6:7c:50:08:79:0e:
ce:83:91:a8:af:dc:8d:aa:b3:4c:cc:c4:b4:45:ae:
11:3a:19:e2:9c:97:c6:4e:e5:f1:84:3e:df:f8:70:
4f:74:7b:88:78:5d:fc:b0:cd:a5:f5:33:a2:20:4b:
82:78:8b:e6:cc:9a:2b:a0:71:c1:7a:df:02:bb:53:
eb:a8:f7:ba:d6:a6:19:65:d4:a2:de:22:26:91:3c:
d3:6c:04:7c:a8:e7:e9:54:ba:19:b7:15:2d:ae:04:
fa:d9:eb:4e:30:b1:41:f5:63:60:6c:d4:21:7d:af:
8e:6b:16:96:ba:e3:c8:cc:04:d9:c4:76:a4:75:ba:
df:ec:73:0f:2c:c6:cf:db:3e:aa:3c:27:4c:65:c0:
4e:09:d0:35:2b:df:c1:ab:f9:ea:57:b7:e7:2a:fa:
be:56:a6:ee:7e:6a:2a:71:47:aa:1d:e7:64:35:c5:
75:aa:b9:8f:58:5b:d2:c8:0e:55:e4:50:53:52:a7:
c6:82:21:71:fc:b6:6a:ea:69:df:af:c1:52:ce:7e:
88:ce:49:fc:d6:a6:87:98:5b:22:3d:91:fd:33:48:
d3:77:e4:35:7f:27:4f:90:df:ed:28:e9:00:72:2f:
52:a1:a1:a7:41:15:56:70:7a:b0:27:8a:0d:cb:7e:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:E8:50:3E:A1:42:D5:C8:41:87:F5:67:53:A3:2C:6E:A7:90:B0
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:81:86:aa:6a:f9:75:61:0e:35:d4:e1:e9:1a:1b:34:26:ee:
65:82:ab:ce:71:04:8a:ab:f2:34:ec:16:7a:85:f0:0c:2b:df:
7b:45:65:88:d9:c1:89:40:b0:cf:78:c5:b3:7d:2c:96:b6:0f:
c7:5e:dd:99:58:a6:cf:c0:61:b0:97:37:77:46:30:54:0f:dc:
af:73:86:5b:ee:93:fa:c3:94:94:17:a7:3a:75:d3:85:6c:eb:
dc:34:49:e0:b2:f1:bc:47:af:50:f1:eb:f6:d2:20:1e:47:5a:
9e:0e:37:0e:9e:53:aa:9e:49:b0:bf:49:5f:95:bb:e6:5a:8b:
e5:1e:74:ed:04:6b:cb:56:79:d5:3b:1c:02:5b:1c:6c:45:22:
9e:d7:17:dc:71:50:14:a4:c5:ac:a1:da:a4:04:83:6c:8f:93:
bf:a6:2b:f6:ef:6d:96:cb:1a:eb:35:bf:12:88:11:a1:80:23:
e2:a8:24:2c:c3:5d:78:b6:d2:e6:2f:3c:7e:2d:7a:55:ad:24:
8c:5b:08:26:6a:32:4d:51:51:2d:ec:b9:22:d3:2e:dc:d0:fb:
ea:2a:3e:16:90:ba:96:1a:32:6f:24:53:c2:60:26:3a:a4:b3:
d9:36:e3:0f:5b:aa:68:94:2e:5c:a9:c1:55:2e:89:81:0d:a3:
62:bc:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:22 2025 by rpki-client