Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: eIX1k8pz1arHMX1MUQFr0a7pAX5hpGK7796B2v6aS/k=
Subject key identifier: 4E:22:32:FA:10:21:13:75:1F:63:DB:E1:34:BD:58:B5:77:27:F5:C5
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 0196102077624532A556F94F80346988D3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 12:01:25 +0000
Manifest this update: Mon 07 Apr 2025 12:01:25 +0000
Manifest next update: Tue 08 Apr 2025 12:01:25 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: l/BtTdQdg6pP4PrJD+PsfFblFDQXgHj33hGvy4IetWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:77:62:45:32:a5:56:f9:4f:80:34:69:88:d3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Apr 7 12:01:25 2025 GMT
Not After : Apr 8 12:01:25 2025 GMT
Subject: CN=4e2232fa102113751f63dbe134bd58b57727f5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:83:25:e9:7d:8e:4d:8a:86:17:b1:da:53:
26:9c:32:6c:0a:a4:04:a5:71:75:b7:15:d7:d8:57:
bc:66:bf:21:e1:6c:87:fe:79:30:0d:ab:40:a3:05:
e4:87:6d:9b:b1:94:80:6e:10:17:d6:13:54:ad:c5:
5d:61:54:8c:d1:86:63:c2:72:54:d4:60:a7:c8:6d:
fb:3b:66:ea:32:02:ec:59:f8:e8:42:ed:b0:14:3b:
2d:a4:db:9e:81:ae:f2:fe:ae:b5:1e:c5:0b:cc:22:
27:bb:5b:ed:ce:a9:36:41:ba:9f:dc:be:b6:c1:c2:
17:f8:d4:53:89:db:38:09:6b:a8:fa:49:2d:94:e5:
b2:3c:04:c0:0e:fa:5f:ca:66:c1:42:fe:e8:cc:56:
cb:ce:a6:5f:ef:10:3c:92:94:e6:c5:c1:12:7b:ed:
e3:ab:aa:b3:78:f2:75:7a:eb:fb:61:98:e5:89:4a:
19:55:c8:16:fb:d9:95:97:16:e7:5f:1d:59:1f:76:
89:c1:28:39:49:5c:c9:5f:b6:8a:ac:3c:12:b4:61:
6d:70:49:5e:dc:a9:0a:f3:bc:6f:18:6c:ea:f0:64:
26:ed:7c:3a:dd:d5:bf:48:93:d5:81:ad:ed:76:53:
59:d6:44:59:17:48:98:5e:f4:98:26:5e:b5:60:eb:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:22:32:FA:10:21:13:75:1F:63:DB:E1:34:BD:58:B5:77:27:F5:C5
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:19:f3:a4:c1:93:9e:ff:0c:82:b5:56:5d:39:ac:06:e4:01:
f6:c8:9e:08:e7:30:7c:fd:63:10:ec:0a:9b:d9:27:cb:57:e9:
3a:c8:c7:3e:d1:f6:42:1a:63:82:b5:16:fd:57:d6:63:80:27:
73:c8:af:28:45:29:cf:48:94:2b:3c:10:ed:f3:85:a5:35:44:
b6:c1:57:74:93:6b:c0:dd:01:e7:14:70:5c:c6:7f:fb:34:f1:
2f:d6:cb:49:10:6d:08:c5:cb:9f:9c:e8:ca:7e:9a:42:96:48:
86:cb:95:58:51:7a:44:44:8f:21:9b:db:0f:19:36:ef:84:18:
f5:7d:d8:28:ce:2d:3b:0e:9f:62:40:39:2e:5b:6b:d7:03:ba:
ee:6b:e8:a4:2d:03:fb:1d:02:75:a1:ae:cb:dc:a8:26:8a:70:
af:b5:1c:cf:25:2f:ad:18:ba:59:db:0b:b7:c9:66:e0:e9:a7:
1c:0a:1f:e4:eb:0f:37:00:d6:d5:b8:d0:26:4f:3f:52:bd:e7:
0b:ef:c4:8f:41:18:a4:bf:44:20:61:ac:22:69:90:65:f3:3c:
0a:4d:c1:53:0c:25:80:50:91:ce:a8:74:9e:22:bd:36:f8:23:
90:78:c0:7f:78:71:e0:1c:6a:82:85:08:50:0b:8b:e6:ba:83:
cc:8b:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:55 2025 by rpki-client