Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: DW/b3IjCtF+wBV8XQ59UaH4hyqJ9vvvCs+j1YGwYzbI=
Subject key identifier: FF:13:64:1A:51:4E:8D:68:04:69:2F:9B:31:FA:12:82:3F:21:66:A5
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 01965CBA0DF3A53C63E835AE323A018FFCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 09:00:19 +0000
Manifest this update: Tue 22 Apr 2025 09:00:19 +0000
Manifest next update: Wed 23 Apr 2025 09:00:19 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: dbxADbF+AtF3CZNYjdDAJKNKAtiSRn3HXfq5ydFwzX4=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:0d:f3:a5:3c:63:e8:35:ae:32:3a:01:8f:fc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Apr 22 09:00:19 2025 GMT
Not After : Apr 23 09:00:19 2025 GMT
Subject: CN=ff13641a514e8d6804692f9b31fa12823f2166a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:5e:32:da:01:58:7a:97:65:3a:b0:44:7b:
b8:8c:97:84:79:e5:a8:75:bb:62:2e:24:f4:73:77:
61:d2:a4:13:e7:f8:75:b0:79:54:86:7d:8d:cf:ce:
1b:b6:fc:20:9f:82:90:10:99:7c:30:c0:f5:ec:e9:
be:d6:6a:bc:63:d8:27:aa:84:d4:b5:51:f4:7c:09:
df:e8:c6:7c:76:0b:e7:fc:62:b1:25:83:71:5d:8c:
4e:af:62:31:6e:4a:3a:82:22:e0:b8:32:f0:19:14:
16:21:ae:7c:f7:3c:32:c2:49:61:af:bf:5a:bf:99:
0a:e2:21:4c:83:05:87:e3:26:9c:19:19:43:54:bf:
f7:34:93:a7:6c:7d:72:20:af:3a:2d:2e:34:07:4c:
48:1b:8e:ef:87:68:10:50:77:ec:d4:1c:98:73:24:
d6:66:8b:58:6e:73:18:be:d6:33:cd:98:78:34:85:
4c:e5:55:bf:58:31:9e:e8:21:a2:19:71:bc:25:dd:
1a:93:98:5f:aa:17:a9:37:8f:55:70:d5:62:62:ce:
18:71:c8:f7:e6:f4:d7:54:ee:b1:80:bb:6c:4b:8c:
70:31:1d:19:9f:31:86:90:bb:74:7c:fd:1d:1d:6d:
64:7a:76:8e:ea:1c:e9:c5:75:86:c5:52:72:9e:40:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:64:1A:51:4E:8D:68:04:69:2F:9B:31:FA:12:82:3F:21:66:A5
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:52:e0:a1:b1:78:a9:61:4c:34:7b:da:af:b1:ce:22:99:0a:
bc:5d:c4:5d:9f:cd:c2:eb:a2:7c:73:71:11:8d:90:a8:b4:ff:
da:66:08:51:b4:1c:8a:ba:0a:87:0a:62:d3:b1:03:cc:9e:3e:
6a:10:14:ab:77:02:b1:e9:2e:6f:73:a4:4b:5d:54:04:ce:1a:
1e:d5:7d:61:40:b5:4f:15:ff:73:6c:b2:ef:77:d0:91:66:b5:
c0:19:c0:33:06:3b:72:f2:ce:3c:fe:d0:b9:d0:c5:c6:87:74:
aa:a6:49:75:5c:af:12:18:1b:38:7b:de:0c:6f:63:0f:fa:38:
36:43:7b:37:88:b6:97:39:ac:ba:c2:75:b7:67:e6:e1:7e:bd:
36:7d:8a:e2:52:c7:be:b7:9d:62:ca:5b:52:5c:63:64:08:50:
7c:bb:f3:4e:eb:5b:81:70:c6:7f:bd:fa:c9:9e:be:74:28:69:
60:97:61:8a:8b:26:77:ba:ea:2a:7b:b4:64:e6:5e:a8:81:b7:
94:a4:32:50:ba:e3:ae:2c:77:53:c3:10:61:76:73:ff:e3:5e:
0d:4f:2c:b8:be:aa:38:4f:09:ae:2a:40:71:6c:d4:f3:94:fe:
8c:7d:15:13:8c:b3:38:bf:db:5f:eb:91:90:2e:04:f9:17:da:
a1:e9:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:04 2025 by rpki-client