Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: 4tCNu8TlUM50Z7H9wYE1lgu4f2TtREZtTnZI5RGgE58=
Subject key identifier: 89:E3:F8:99:46:32:75:89:4E:2D:8D:DB:54:46:B8:D8:C7:D0:04:76
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 01958B1686A0402B21A54DE2E36E960F023B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 0F37
Signing time: Wed 12 Mar 2025 16:01:04 +0000
Manifest this update: Wed 12 Mar 2025 16:01:04 +0000
Manifest next update: Thu 13 Mar 2025 16:01:04 +0000
Files and hashes: 1: d8Ubh0CXhXXhagmmKA6YqgiY1CI.roa (hash: XS7bGpIqru665bj8O0eStPb/SWXWzyB/RG2r/OA2+68=)
2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: ckuEnp0G+PwQtEYdANNmKcuwPbRS7nZq9IOszF5gJNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:86:a0:40:2b:21:a5:4d:e2:e3:6e:96:0f:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Mar 12 16:01:04 2025 GMT
Not After : Mar 13 16:01:04 2025 GMT
Subject: CN=89e3f899463275894e2d8ddb5446b8d8c7d00476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:0c:db:de:a8:4a:0f:a8:5c:bb:0b:d4:c7:
21:68:8a:da:a4:53:46:2e:38:4c:08:7d:c2:db:29:
42:d2:fb:3b:8a:c9:a2:84:ed:33:38:38:e8:32:9c:
4d:fd:93:df:f9:c8:6e:ac:87:a1:03:93:df:07:f7:
cd:4b:12:09:cc:8f:14:0d:00:85:eb:7c:b3:9f:5c:
26:0b:fc:e8:12:97:01:86:6f:93:f6:a1:15:8f:c0:
70:69:7a:8c:f5:aa:04:54:a0:f9:1e:1a:6e:4f:25:
41:55:68:1d:1d:93:3c:06:de:a8:26:51:3e:ef:2a:
83:ee:c6:3d:99:03:fc:51:44:7d:36:f1:57:57:43:
4a:c3:b3:83:2f:4c:3b:5d:ff:af:73:36:fc:4a:9d:
2c:72:96:e8:98:b6:5d:7a:3e:b9:54:13:30:9e:c1:
b8:99:43:0c:a3:a4:5c:3b:a6:20:b2:16:36:fd:02:
19:29:aa:38:cc:4d:c9:1c:17:c4:2c:63:74:ac:65:
91:e4:e3:08:92:0e:e8:24:88:73:34:8b:59:25:6c:
d4:98:58:e6:d9:1f:eb:b3:0c:ac:37:98:06:2c:ef:
16:76:5d:69:30:34:19:fa:db:d4:69:9c:94:d2:0f:
e4:87:0c:26:29:02:b6:0f:89:41:bd:e5:37:42:83:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E3:F8:99:46:32:75:89:4E:2D:8D:DB:54:46:B8:D8:C7:D0:04:76
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4a:24:b6:16:c7:51:be:51:e6:65:a8:fe:ca:67:01:5e:60:
a9:a7:b4:cf:3e:a2:83:dd:f2:00:75:6e:02:32:a9:51:ce:95:
e4:22:6b:cb:dd:6b:b7:22:c6:ec:5c:74:42:6a:fe:e3:08:eb:
c2:28:b4:57:1a:ed:cc:00:a3:ad:d1:9f:32:91:f4:b4:fb:7c:
13:47:56:d6:ca:40:e0:ed:af:11:0f:60:ac:71:74:f6:a5:49:
89:f8:74:3d:99:24:91:e6:95:90:12:af:11:6e:17:e5:46:00:
10:f7:9f:58:77:86:bd:35:ea:57:e9:e7:11:7b:f0:fb:17:ae:
60:27:66:65:92:95:1b:44:02:e2:32:97:62:8e:b7:7c:4e:ac:
ab:24:36:75:ba:94:0a:80:50:a8:0f:03:9d:c7:72:b4:54:bd:
83:3a:6b:b1:c3:52:4a:06:fe:d7:e9:c5:5f:ae:62:72:4d:f3:
6d:63:8a:65:0f:bb:3f:70:fd:cc:54:83:7c:eb:6a:1e:14:64:
02:6b:f0:1e:83:e9:99:85:36:a8:77:9e:c8:60:9c:8b:ae:fb:
81:59:bf:e2:75:a3:3b:12:5b:11:59:2c:0d:b9:0b:a2:ae:1a:
da:fc:58:d5:99:a5:34:56:91:13:5c:7b:39:31:03:79:71:20:
1d:f3:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:13 2025 by rpki-client