Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: OnoF+fPxnuHWwf4uc7x3gxsfptEI4BoyVr2Vt4qWa3U=
Subject key identifier: EE:73:DA:75:25:38:6F:84:12:5E:45:C8:B8:7F:2A:36:5F:32:59:EA
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 01964EFECEF32D6953BC702E49F7008E411C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 0D94
Signing time: Sat 19 Apr 2025 17:00:44 +0000
Manifest this update: Sat 19 Apr 2025 17:00:44 +0000
Manifest next update: Sun 20 Apr 2025 17:00:44 +0000
Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=)
3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: DXwuE2cBkRrQ7U7SrnVOdKsT1Qz+y2YmmXheOi2hWpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:ce:f3:2d:69:53:bc:70:2e:49:f7:00:8e:41:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Apr 19 17:00:44 2025 GMT
Not After : Apr 20 17:00:44 2025 GMT
Subject: CN=ee73da7525386f84125e45c8b87f2a365f3259ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:4d:8e:15:52:1c:63:38:b8:48:88:aa:fc:
75:52:85:e3:c9:7c:b7:c5:ab:74:c2:c0:66:ba:63:
0a:85:aa:8e:c4:ec:5b:ab:b0:7d:2c:c8:b8:fe:f7:
c8:8f:f3:33:84:16:5b:70:64:10:3c:06:e4:8f:75:
2a:02:ef:44:3d:46:55:4f:be:bf:a6:64:5c:aa:c9:
39:57:b0:54:15:29:92:62:a4:a8:13:af:d8:5b:11:
85:c7:dc:1d:b2:9d:99:6c:ed:69:93:c5:7d:45:1f:
ac:15:fe:fc:d6:c7:16:ad:94:92:f1:fd:59:a9:30:
11:6c:af:a3:50:2f:18:6a:a8:65:e0:74:66:38:84:
87:e5:4f:6c:53:05:06:b1:00:f0:66:0f:3b:b8:d9:
8b:8f:73:21:c9:07:2b:30:59:9f:0d:be:b8:ba:a0:
6b:0d:0d:63:33:92:0c:8c:07:87:c9:d7:30:99:42:
e6:72:97:3f:d8:53:fb:8a:30:97:9a:d3:f4:2b:4a:
46:86:de:36:9e:d4:d2:d2:3d:9a:8c:83:d4:aa:80:
c9:e2:c7:c5:ff:9c:72:7a:44:a7:d2:79:ae:a2:81:
23:d9:9a:9a:58:a4:d7:7b:94:6d:da:61:7b:6a:27:
da:0e:c0:e7:3f:56:0f:b5:72:04:60:15:ed:3f:9d:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:73:DA:75:25:38:6F:84:12:5E:45:C8:B8:7F:2A:36:5F:32:59:EA
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ff:86:46:5a:f5:cd:19:76:b5:8d:f7:7c:88:8a:15:80:bf:
b0:35:59:53:b0:7c:6d:37:9b:ae:09:14:f8:b0:af:33:f6:ea:
e3:13:3d:40:66:c1:7b:cd:e7:31:46:af:de:f2:2a:a0:34:1c:
21:58:20:99:ec:a7:86:55:3d:e3:3c:0f:04:a6:f2:d4:56:66:
41:e0:b8:e1:5f:4d:71:13:53:7f:27:9f:f7:af:2e:1f:bf:c1:
4b:22:69:f5:a6:cb:bd:07:c6:48:61:02:ae:6d:e2:ef:c8:84:
da:99:62:ec:a9:7f:98:d3:0f:1f:97:1d:09:1a:b0:6c:56:dd:
4a:da:0d:53:07:39:04:bb:3c:53:95:0c:ea:1e:15:9e:50:11:
6f:a1:1f:d7:f9:49:25:bc:a4:3b:ab:4f:22:91:5a:78:4e:3a:
b3:5c:dc:b6:0a:00:fa:10:a9:cd:f9:5f:34:db:93:69:44:54:
c3:fa:bf:a0:ea:6d:79:77:3e:86:da:14:f2:93:8b:a9:c3:e8:
17:e0:a5:f5:2a:4b:dc:f9:35:4c:fd:f6:53:ef:bc:db:12:91:
ca:ac:df:6b:69:ba:17:1b:c8:02:5e:6d:3e:dc:cd:2f:00:64:
51:9d:5f:dc:f0:c8:a2:1f:d1:59:c3:83:e5:63:33:49:8d:e2:
a2:8b:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:49 2025 by rpki-client