Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: OWgTo1qi60WNZpMR36Jwo0z0Ga1BWbDVcEy9olUhVNk=
Subject key identifier: 49:4B:EB:D0:A8:F8:A9:C7:B5:63:3C:C6:F1:38:86:18:B0:46:1E:FB
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 019652DBAF21B1EEA64D855C71BDD5B23F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 05E5
Signing time: Sun 20 Apr 2025 11:00:50 +0000
Manifest this update: Sun 20 Apr 2025 11:00:50 +0000
Manifest next update: Mon 21 Apr 2025 11:00:50 +0000
Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: +GiMArA9/IbF1JJzAz60KQj2tGJVg4cRWEjpdG8ecF0=)
2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:af:21:b1:ee:a6:4d:85:5c:71:bd:d5:b2:3f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Apr 20 11:00:50 2025 GMT
Not After : Apr 21 11:00:50 2025 GMT
Subject: CN=494bebd0a8f8a9c7b5633cc6f1388618b0461efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:05:98:37:4c:d8:6b:e1:eb:8a:c0:2b:bc:
ee:df:77:f5:ea:8e:3b:46:d0:7c:23:74:a1:af:55:
c7:64:3e:a8:96:e8:9d:bf:aa:70:f4:f8:a0:ca:45:
e6:36:54:7b:8a:4a:29:c5:ef:87:30:71:67:6b:ee:
56:a6:73:77:89:16:31:5b:2f:d8:15:23:c4:af:0b:
5c:97:9f:57:6a:49:27:2d:57:a3:38:a4:5e:1c:ca:
82:48:29:83:95:e8:6d:56:50:27:cb:dd:29:81:14:
7d:d2:ea:34:49:71:11:77:7c:86:5d:d6:b0:76:96:
9f:1e:d2:80:2d:99:57:cd:91:21:46:36:f7:b1:ba:
ac:b9:58:27:09:c0:ef:19:3b:a1:05:b6:0f:a3:0a:
48:02:4c:a1:98:0c:7b:4f:e9:b9:e8:5c:53:31:a9:
1d:c1:18:2f:1e:c4:41:c7:94:ae:ec:e8:9d:24:90:
b4:3f:6b:66:31:05:c5:69:c6:b0:98:36:c4:ac:c7:
3e:22:42:cf:a1:7d:97:16:ee:c5:17:c8:46:a3:23:
9b:8e:46:8e:76:b5:d8:a2:3c:50:c0:c7:55:ee:7d:
d0:b8:43:1c:b4:db:67:6c:4a:a3:41:6f:ab:a2:56:
c9:f4:ad:d3:48:e5:e1:6a:d5:fc:36:0b:15:77:91:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4B:EB:D0:A8:F8:A9:C7:B5:63:3C:C6:F1:38:86:18:B0:46:1E:FB
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:2c:42:d7:c8:74:c3:99:49:39:75:0c:d9:4c:79:fc:7f:
93:0e:fa:4a:39:d5:a2:84:ec:97:66:c0:f3:f4:78:33:af:45:
29:e0:98:7e:a4:07:05:d8:35:fa:a6:32:f8:65:22:79:3d:0a:
56:fa:dd:9e:86:04:4b:fe:bc:0e:13:f3:c7:e6:bf:ce:53:de:
bb:0a:e3:56:19:40:fc:d7:e3:4a:d1:74:9a:27:c4:74:e2:c7:
f0:03:f0:7b:1d:6f:4b:17:fa:7d:0b:c4:3c:c8:98:fb:df:9e:
a2:71:44:3d:0f:eb:67:5a:1b:bc:e1:a4:f9:39:f4:e2:ba:9e:
51:cb:b3:91:c2:d3:8b:09:c6:81:5e:76:6b:67:4c:4b:22:56:
f3:9a:dd:c6:e4:85:21:10:9a:01:46:a8:19:90:e0:cc:72:28:
08:e2:7c:45:33:f5:da:f7:29:cd:d9:31:4d:90:02:b7:6b:a5:
5c:5f:ea:cd:61:02:3e:18:27:0e:ad:81:11:92:71:e4:a2:56:
f4:9c:62:1e:b0:6b:b0:bc:c0:bd:a6:7b:cf:14:64:69:de:85:
ef:3c:08:05:2a:22:ba:f4:1b:db:23:16:d7:48:58:d0:c0:78:
c1:de:c0:a0:ac:e9:d8:6e:be:71:a8:1f:8a:b1:5b:bd:d1:56:
92:f9:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:30:01 2025 by rpki-client