Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: sBVnKBK8FVXeRlhV2sIMEyczG6yvAy+wKXU2QCfBBYw=
Subject key identifier: D8:6E:F2:BE:9F:76:59:86:54:FA:88:43:3C:7B:92:61:74:6F:46:BC
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019650113693090E27903B4CE12199034B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 13F3
Signing time: Sat 19 Apr 2025 22:00:27 +0000
Manifest this update: Sat 19 Apr 2025 22:00:27 +0000
Manifest next update: Sun 20 Apr 2025 22:00:27 +0000
Files and hashes: 1: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: qbMvImvXDHAK8Wgf1wFWLNxI7X88T9d29Y1sTQMueKo=)
2: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
3: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:36:93:09:0e:27:90:3b:4c:e1:21:99:03:4b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Apr 19 22:00:27 2025 GMT
Not After : Apr 20 22:00:27 2025 GMT
Subject: CN=d86ef2be9f76598654fa88433c7b9261746f46bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:5c:10:a0:3a:22:48:d3:21:c5:d5:03:0c:
a5:1b:d0:1a:8f:a3:66:76:ac:3d:f2:42:67:23:e3:
54:3b:8f:3c:4d:35:90:eb:55:bd:8b:24:61:0c:2d:
bb:6a:ab:3b:de:90:a1:e7:a3:a3:c3:b4:3c:a2:a6:
aa:2b:28:6e:4e:81:63:3b:86:cd:12:76:bd:ff:3c:
08:94:be:ee:ac:31:fe:81:e6:fd:fb:c3:cb:33:c5:
28:b2:df:0a:c0:99:38:eb:47:d9:3d:4a:66:51:77:
d6:44:b5:f3:95:5a:44:6b:f2:c4:59:6a:9b:a2:ae:
70:53:c3:54:69:b3:c5:76:88:d9:a3:37:d1:d2:aa:
27:4c:e0:e3:dc:06:b8:ff:c8:15:6f:af:f4:4a:08:
fa:6c:49:0d:1e:d9:35:08:f2:4b:30:52:08:2e:88:
15:80:f6:30:67:02:ec:58:81:16:27:85:70:5c:94:
17:32:05:e9:f5:a0:dc:e1:fb:1e:4f:81:a4:16:83:
e4:e3:0a:f0:ce:2a:61:52:67:52:67:e5:dc:c8:81:
a5:0c:a9:95:e0:e8:43:60:9a:4e:ab:f3:d0:96:57:
33:7a:dc:a8:1b:3b:ce:8b:d6:d9:de:82:af:c4:f1:
e7:fd:fb:3e:49:62:0f:06:0c:e1:00:ec:11:b8:ee:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:F2:BE:9F:76:59:86:54:FA:88:43:3C:7B:92:61:74:6F:46:BC
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:da:1b:d8:17:4c:9e:29:06:d8:55:16:c3:23:fa:9e:21:dc:
be:27:85:a2:82:f3:15:90:76:41:b2:40:58:47:65:67:eb:91:
09:80:cd:8b:fe:59:a1:7c:1e:34:7a:fe:ef:5b:35:d4:da:42:
86:d6:92:2b:3e:f0:7e:ee:ec:6a:a7:a5:bc:28:98:fe:a4:b0:
21:eb:f6:3a:b9:cc:af:0c:43:b3:59:41:f5:c1:c4:09:ea:a8:
00:19:97:d9:7a:ac:76:93:b0:63:2d:1d:20:89:7c:35:59:b9:
fa:64:77:f1:c5:c8:29:c4:4c:96:db:60:45:43:a0:49:5c:74:
8b:19:9e:c5:2c:82:d7:a4:d2:3b:d9:f3:23:27:cf:dd:14:04:
e2:10:c1:25:86:48:a2:4e:82:b6:0b:f9:3d:21:98:e1:39:cb:
45:9c:e4:21:0f:54:dc:a9:6b:8f:c6:6d:43:0e:f4:86:f9:9e:
33:64:77:f3:fe:95:c2:df:ab:fa:6a:07:9c:23:5a:32:d8:bb:
6f:a2:ef:ae:7f:2e:5b:18:18:8f:84:cc:46:14:cf:dd:2b:67:
8d:2a:f7:7b:f8:71:11:4a:b7:6b:7d:d8:86:6a:a6:c1:08:cc:
5b:77:88:19:bb:ed:4e:63:06:f9:88:00:28:56:59:79:97:e2:
46:86:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:56:06 2025 by rpki-client