Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: 5n/LDpp4O+D1P3q+yZrDhBR+IrsyKjxEZnaGoxJNZi0=
Subject key identifier: 90:84:A8:AF:05:FD:58:39:C2:F4:B6:13:A6:85:F5:7A:5D:5A:7F:D6
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019645C4D846F24E5A2E4F9C029BD0FD5C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0B91
Signing time: Thu 17 Apr 2025 22:00:50 +0000
Manifest this update: Thu 17 Apr 2025 22:00:50 +0000
Manifest next update: Fri 18 Apr 2025 22:00:50 +0000
Files and hashes: 1: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (hash: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=)
2: hw5zWhZ37cy3fl-F4c6L7KinXWA.roa (hash: JVVK2E4Q0U9kLmKrr7lDfe4ry5wJQg7f4zL2c9LIRlo=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: Vf09Sfp+jB/F+6U2RopOH4j4FZ1NmTCIbmrk3meBMBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:d8:46:f2:4e:5a:2e:4f:9c:02:9b:d0:fd:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Apr 17 22:00:50 2025 GMT
Not After : Apr 18 22:00:50 2025 GMT
Subject: CN=9084a8af05fd5839c2f4b613a685f57a5d5a7fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:a0:16:d4:5a:27:53:62:76:21:e1:df:74:
65:8f:de:61:f4:1a:2f:0a:3a:96:5e:5f:4e:62:fe:
0a:c4:ac:98:02:3a:e4:a6:28:1f:12:06:07:f6:e4:
2e:3d:99:6d:9e:46:5b:b0:51:0d:1c:04:8a:24:71:
7b:3e:f4:d6:98:89:f5:2d:8f:ad:49:b8:29:2f:ae:
a2:52:d1:d4:95:b1:59:bf:14:32:0e:55:36:eb:ce:
b4:3c:29:2a:66:2d:fe:dc:5f:72:96:b7:eb:fe:e1:
32:dd:17:f6:d2:ec:5b:d7:f0:7e:10:46:a2:9c:ab:
65:cc:b1:c1:24:b6:44:81:b5:c6:f7:7f:e0:b2:8a:
7e:25:05:65:c0:7c:be:c5:02:d4:87:eb:88:23:87:
2f:1a:91:54:f7:20:03:d6:e6:0d:58:73:28:c5:9c:
0a:99:cf:f3:03:89:49:66:2c:9d:32:5f:28:b4:0d:
45:14:95:e8:a5:8f:b6:d2:f9:f8:d9:a9:3f:52:23:
64:b9:de:ef:04:68:92:3d:fd:91:55:c6:fb:7e:5b:
49:06:11:b0:d4:f8:43:1c:54:d6:29:f9:2b:24:88:
45:5b:a1:cc:c1:9c:09:0c:06:d9:b4:7f:e2:3a:43:
88:f8:6c:ec:6d:83:9b:35:64:89:e9:f5:07:72:17:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:A8:AF:05:FD:58:39:C2:F4:B6:13:A6:85:F5:7A:5D:5A:7F:D6
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:03:90:88:cd:08:ce:47:8a:e1:f6:a2:d6:8e:8f:12:91:c1:
a4:8b:4d:07:df:ab:a7:4e:8a:e3:d9:b9:fc:e4:ad:d4:7d:8d:
af:d7:dd:19:d8:f6:50:f0:7f:81:e1:9f:ef:99:8c:e5:84:ee:
7b:7c:de:bf:6a:ce:a9:de:7b:f6:f9:e4:e9:c7:e6:89:0d:52:
c9:86:b8:fa:fa:04:04:8b:c1:5a:03:ea:eb:a4:01:67:5f:af:
73:d8:66:37:c6:60:4f:2c:42:6c:90:0f:23:0b:4b:76:e0:a2:
89:a0:ca:0e:df:56:22:ea:63:85:61:68:7d:eb:2f:a9:66:ee:
e4:bf:38:86:5c:54:bc:55:25:18:bf:79:c9:67:f6:23:1c:d6:
c2:d1:a2:0b:b5:d3:52:c8:1b:ca:18:43:c7:70:72:be:90:d2:
f3:0a:24:59:84:cb:72:1e:8f:63:ef:24:26:f1:83:5f:85:34:
f4:33:df:c7:d8:fd:cf:c2:dd:c5:dc:b9:83:f2:36:1d:0b:60:
30:a0:62:ea:8b:fd:c4:23:e4:09:47:52:b2:a3:18:fe:7b:1c:
2b:44:a7:03:c3:dc:a0:94:54:9d:4f:6f:69:60:a7:3f:92:cd:
e4:82:cf:09:67:8a:b9:78:f4:93:d3:4c:42:39:97:ce:86:cd:
8b:a0:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:39:10 2025 by rpki-client