Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: /Fv+4JSHF2NoHek/WOf+JD2kLWTOwUMDymGW4KngRC4=
Subject key identifier: 5C:5B:95:25:4B:3A:69:A4:4B:86:CF:22:5C:C8:A7:BF:1E:57:EB:6B
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 01964857CB6E2ED1DB08C9C58E12404E78D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 0D32
Signing time: Fri 18 Apr 2025 10:00:35 +0000
Manifest this update: Fri 18 Apr 2025 10:00:35 +0000
Manifest next update: Sat 19 Apr 2025 10:00:35 +0000
Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=)
2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=)
3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: bXLlEMr43j3Rho4saVjZhFQbmZskiMS2/rlGeoNqUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:57:cb:6e:2e:d1:db:08:c9:c5:8e:12:40:4e:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Apr 18 10:00:35 2025 GMT
Not After : Apr 19 10:00:35 2025 GMT
Subject: CN=5c5b95254b3a69a44b86cf225cc8a7bf1e57eb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:74:68:f1:62:f6:64:18:57:22:53:9c:bd:
0a:05:90:da:aa:79:3d:c6:37:3c:bb:ae:24:5e:41:
86:1f:6d:88:51:7c:e6:46:58:cc:4b:a0:73:b1:de:
b5:08:4b:cf:fb:43:2e:5d:b8:63:e4:6d:ae:1a:b9:
67:b5:dc:c9:a6:1e:ec:e7:a4:0f:b3:5e:be:be:6b:
1b:ea:be:8c:ea:7b:c1:06:a3:39:2f:c2:50:9d:80:
3a:40:1e:65:61:d0:a5:70:44:4a:df:b9:93:91:2f:
8f:1e:76:73:de:4d:79:ed:f8:30:a4:85:a2:ab:e5:
a0:31:0e:50:93:f4:e3:ec:d4:1c:43:63:c6:89:b8:
f4:53:a1:5e:b0:e0:29:f0:52:c9:89:e1:74:e9:68:
16:6b:d6:cf:fe:bd:da:45:35:89:69:5e:86:60:2b:
e1:6f:90:8b:ae:c4:78:98:12:e9:57:3f:26:8d:e3:
ea:21:e3:5c:bf:0d:d4:3b:3f:0e:33:d7:60:30:30:
ec:0d:d5:a9:f8:e1:59:91:93:6f:dd:70:a0:03:28:
e9:88:d5:59:a9:25:87:43:d6:22:42:c6:1d:21:01:
8d:72:fa:36:d1:56:be:d6:01:e6:89:71:f9:2f:7e:
c2:68:a7:7f:a7:d6:e9:ed:33:16:04:20:6c:0a:85:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:95:25:4B:3A:69:A4:4B:86:CF:22:5C:C8:A7:BF:1E:57:EB:6B
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bf:c8:a0:fa:88:82:35:32:19:1f:3a:6b:c1:8e:c4:60:9d:
ee:14:56:c3:a3:88:ba:42:43:7d:a4:55:79:d0:60:ab:19:3a:
7a:cd:78:1e:f9:2f:db:6c:a7:94:f5:2c:5b:c8:ad:4a:25:87:
bb:62:03:62:77:3f:e4:a2:01:8b:d1:73:be:bf:b7:30:9a:f3:
90:46:63:10:fe:3a:65:e4:a4:88:3a:9a:22:df:9a:bc:0f:7b:
73:4f:26:b0:d3:30:8f:36:0c:76:58:1f:3d:b2:b7:f7:0a:4f:
ff:93:4b:c2:31:e8:58:d0:a4:10:6d:99:d0:39:a9:99:e6:46:
7a:e6:4c:6f:27:3a:3f:68:a1:13:ef:b2:22:cc:09:f2:0a:46:
e1:64:f5:79:57:d3:c9:08:04:21:de:0b:fc:e7:21:93:55:65:
a3:cf:6b:08:8d:f6:e2:36:64:f8:ab:ac:25:5b:67:25:17:2b:
f9:69:db:61:e8:7e:47:ed:57:0b:b9:45:94:ec:9c:26:45:88:
a4:0a:cb:bf:9a:2f:78:5c:3a:4e:39:8e:4b:db:ea:70:e8:de:
48:c7:da:fc:c7:42:41:6a:3b:11:b2:ce:76:db:48:da:bc:c2:
e6:80:93:e7:49:6e:10:36:c9:0c:2d:e4:f4:04:f9:ef:57:d0:
cb:28:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:52 2025 by rpki-client