Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: eHkHDYRtB3DMz6kEiFBrDSH3NekqlggqhkfPxuybHY4=
Subject key identifier: D7:A7:67:EC:88:12:F5:59:2C:09:8B:D4:98:56:B5:E1:F8:0C:21:F6
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 0196260350064454C92C7048C61FFBBF8F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 14E5
Signing time: Fri 11 Apr 2025 18:01:13 +0000
Manifest this update: Fri 11 Apr 2025 18:01:13 +0000
Manifest next update: Sat 12 Apr 2025 18:01:13 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: lilWEpCQK9fm/ABIea+qzbzVujmI2Xv49qUUvmAnp6g=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:03:50:06:44:54:c9:2c:70:48:c6:1f:fb:bf:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Apr 11 18:01:13 2025 GMT
Not After : Apr 12 18:01:13 2025 GMT
Subject: CN=d7a767ec8812f5592c098bd49856b5e1f80c21f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:94:a1:c1:80:4d:0b:f1:8a:6f:d5:97:76:
e9:8c:3c:d8:a4:a8:2e:83:89:b9:d8:88:76:c0:eb:
bd:4e:4d:3e:3c:85:3c:6f:81:20:bb:86:08:9a:6b:
6d:69:0a:3c:e8:6d:43:db:07:1a:bb:e5:59:56:37:
02:95:f3:0d:4d:b8:60:73:e4:e4:29:33:2e:57:9f:
25:3f:f1:14:12:3a:3b:ae:e4:81:78:f3:c2:bc:80:
15:60:a4:2d:ca:be:de:6f:d5:22:e7:08:1c:fe:b2:
a8:58:5b:34:92:8d:a2:36:b9:8a:fc:7e:21:82:db:
41:2f:f0:00:ed:d5:83:2b:73:2a:2b:69:a8:39:38:
2c:cd:dc:ff:b0:57:fa:8a:2d:bd:70:63:de:37:0c:
ea:fa:c1:d8:e0:2b:af:2a:cc:55:ae:6f:59:3b:8c:
99:96:46:44:f2:95:1c:cc:7a:9f:b4:26:6b:74:5f:
4f:80:ae:2c:db:b6:b3:33:fe:75:5a:d2:78:53:12:
aa:77:72:74:2a:57:6b:4e:51:b7:3d:dc:17:e9:39:
d8:7e:8c:8f:3e:cd:84:56:3b:e2:28:83:25:bb:3b:
a9:f0:55:90:ff:58:22:db:91:6e:0e:1f:17:f5:44:
3c:88:05:c2:86:cc:a0:35:98:85:9f:f7:65:2d:37:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A7:67:EC:88:12:F5:59:2C:09:8B:D4:98:56:B5:E1:F8:0C:21:F6
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fc:ce:f6:bc:9d:41:ce:1a:47:9e:5a:45:1e:8e:ba:80:bb:
e4:86:28:31:82:92:45:af:94:aa:da:43:68:1d:53:89:61:9f:
62:24:87:6e:37:b8:4b:89:50:8d:ae:c9:7e:34:bd:c9:16:59:
a1:ec:58:a3:b0:51:29:1c:52:e8:3c:a3:b6:12:d8:ff:ca:91:
24:59:73:2c:3a:dd:93:c5:b3:ff:54:aa:3e:0e:b0:a8:38:7a:
60:fc:2c:41:6b:84:a9:ae:7b:68:79:5f:15:9a:2a:79:19:52:
20:b3:8f:61:56:bb:56:f2:b8:0a:ef:7a:9d:e0:70:7d:3d:1b:
b0:b7:6b:be:88:e2:b4:b0:81:df:46:68:07:82:a8:e3:01:17:
d7:a6:66:b2:87:8b:2f:7a:e1:b2:39:5d:98:30:64:c9:1c:94:
9d:89:6b:c4:66:fc:e9:19:ec:13:d8:89:ca:7b:dd:58:31:e3:
f6:cd:b9:2a:09:02:f0:d3:19:61:9e:c8:6a:49:c7:b8:f0:fc:
91:3e:8b:25:da:70:f6:dd:10:4e:4d:0d:99:22:3e:fe:a3:48:
7b:6d:e7:49:59:ea:b8:5b:9b:cd:2d:a5:26:36:78:05:1c:ff:
25:38:26:d5:db:da:5d:96:69:98:52:2c:6b:ad:ac:98:5e:2a:
28:78:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:33 2025 by rpki-client