Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
File: 5O8X9MtP6SrQU-7yXznWOuEgfdM.mft (raw, json)
Hash identifier: Zm7kyAccFFPQ9m6IE4dFugD6OJ8PNj8TPxYwk+kAxpk=
Subject key identifier: FD:E3:BF:BD:C1:11:61:07:80:07:75:B1:A7:D6:D6:E6:CB:B5:22:94
Authority key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
Certificate issuer: /CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Certificate serial: 01965CF0E7E5C29AED8ACE19F2A66D47F948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
Manifest number: 0138
Signing time: Tue 22 Apr 2025 10:00:13 +0000
Manifest this update: Tue 22 Apr 2025 10:00:13 +0000
Manifest next update: Wed 23 Apr 2025 10:00:13 +0000
Files and hashes: 1: 5O8X9MtP6SrQU-7yXznWOuEgfdM.crl (hash: HV5M+9kQsmoJMc2y8pS2pgeBScFZPmRKbbMPMKlsXus=)
2: hkqw3W9-pdwewEMPwrQBPExOldQ.roa (hash: GNMEaQG7JI+6R+GxCRi11C7wb2KrqYyAM0elThFtbVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f0:e7:e5:c2:9a:ed:8a:ce:19:f2:a6:6d:47:f9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Validity
Not Before: Apr 22 10:00:13 2025 GMT
Not After : Apr 23 10:00:13 2025 GMT
Subject: CN=fde3bfbdc1116107800775b1a7d6d6e6cbb52294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:a8:9d:f5:ba:df:ee:fa:78:1b:b8:6b:44:
7a:88:de:3a:f0:80:84:f8:12:de:ab:19:bc:0c:42:
af:a6:64:dc:ca:10:1a:63:50:23:53:70:0f:75:0b:
9c:fd:12:19:6a:99:58:71:11:49:88:c5:11:16:c0:
40:28:6d:06:d8:dc:9e:a5:30:f4:c9:8c:3d:0d:a0:
a0:06:9c:0f:dd:29:ec:4f:03:58:28:e9:07:83:8c:
84:0a:b8:45:36:30:a2:1d:0e:91:3c:2a:84:78:ff:
74:1b:26:c2:a2:18:75:61:2d:a5:a4:43:09:e8:1f:
3d:10:48:9d:ce:c0:a8:30:b0:57:50:28:3d:38:52:
e7:ee:f3:5c:22:e1:4b:e7:93:f6:15:85:b1:0f:ae:
75:93:89:f9:9d:64:35:36:4f:d5:da:d3:fc:59:02:
5c:6f:19:a9:07:06:55:0b:b6:c5:0c:d9:0e:16:cd:
e5:4b:6e:6d:4e:a5:34:68:e3:39:e8:ef:86:6d:ad:
74:df:15:7c:ab:66:a5:c5:e7:6e:ab:0e:fd:ec:ac:
e7:ab:ea:0b:15:1b:5a:35:95:9b:78:6f:dc:f7:9e:
75:38:1f:21:5b:bc:df:ae:d3:2c:c7:17:95:43:a0:
f7:f2:95:09:2c:4f:a5:ca:4e:48:f6:bd:c3:18:fa:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:BF:BD:C1:11:61:07:80:07:75:B1:A7:D6:D6:E6:CB:B5:22:94
X509v3 Authority Key Identifier:
keyid:E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6f:56:b3:a5:13:89:eb:cf:24:82:72:ff:61:71:0a:13:9a:
c7:b8:43:08:60:1b:e2:b5:48:a8:07:5c:b7:30:ef:e2:46:ca:
64:75:b5:21:aa:0f:fc:5a:7f:1a:39:26:13:d0:27:05:db:60:
f9:a7:8e:e7:67:d1:4d:0f:73:be:f3:6c:16:1c:a6:34:d0:b0:
24:bd:be:f9:3b:f9:78:68:a7:ea:17:32:b2:11:be:f3:c1:d7:
51:3b:c1:a7:4e:9f:b9:ae:c3:9b:d7:db:bc:bf:c9:d5:91:d1:
49:20:fe:68:a4:b8:8e:54:58:6f:c6:81:2d:de:44:b4:16:d0:
b9:53:04:ea:2c:47:e0:f3:e1:45:b4:05:61:5c:a4:9e:83:0d:
00:7f:cc:97:d8:0c:59:80:42:26:56:46:c0:9e:68:7a:b3:df:
ee:3f:fa:0e:52:18:a7:5b:df:be:aa:e5:7d:55:47:2d:d5:fc:
da:12:94:4e:07:be:ef:32:ee:ce:b5:ed:f8:1f:eb:e7:56:df:
14:cf:15:bb:ab:6e:d9:c4:0b:f1:31:ae:d4:a5:42:2b:68:b5:
39:cc:64:ad:9c:d1:c8:50:31:35:29:e4:96:de:76:d9:f1:47:
c5:00:f3:ac:40:3f:6b:c2:f7:a1:8b:5f:9b:eb:98:75:60:b4:
17:ac:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:33:27 2025 by rpki-client