Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: 1eWk34xq674tgNtJOrnIcbC/GKYFxHmfGxQs7wWeVWk=
Subject key identifier: AA:01:47:BE:4E:35:EE:7E:4C:05:8E:AD:AD:9E:E3:6F:F4:65:46:2C
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 01958B167D8EF26DFC4C4EB1CAFE8D18DD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 0ECB
Signing time: Wed 12 Mar 2025 16:01:01 +0000
Manifest this update: Wed 12 Mar 2025 16:01:01 +0000
Manifest next update: Thu 13 Mar 2025 16:01:01 +0000
Files and hashes: 1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: moZQF+1KRzMfXRgakiW76dDBMbWKWhp5G1AkAWpm7eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:7d:8e:f2:6d:fc:4c:4e:b1:ca:fe:8d:18:dd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Mar 12 16:01:01 2025 GMT
Not After : Mar 13 16:01:01 2025 GMT
Subject: CN=aa0147be4e35ee7e4c058eadad9ee36ff465462c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:f5:e7:72:c1:ae:07:9c:37:f7:61:eb:32:
b6:71:cb:e2:13:9f:cc:e2:a4:a3:ca:e3:ac:d3:49:
a3:e9:5e:45:cf:94:20:e9:b4:c6:b3:35:66:b9:35:
19:eb:ac:a8:e8:41:21:c9:31:66:85:7e:c9:98:cd:
a7:cf:98:29:b9:0c:43:85:d4:4e:f5:b3:6f:4f:15:
c9:ee:7c:fb:78:42:e6:cb:b0:7c:4a:21:b0:b4:56:
4f:d0:a1:25:db:00:64:5b:aa:6a:cc:7c:ed:24:60:
6d:5f:c4:53:b9:fe:eb:c6:2b:bb:89:95:80:36:b0:
2f:e3:2f:83:69:30:88:71:b4:15:77:29:16:a0:de:
fb:58:6f:1a:a1:a1:6d:6c:3b:88:72:cd:8f:bf:07:
4a:a8:36:c1:e1:0e:97:48:63:5b:7d:24:79:28:d7:
5a:6a:9d:1f:db:59:f4:da:de:57:10:2b:5e:9c:d0:
f8:7e:6e:9a:0e:eb:00:df:e6:7c:97:08:0e:f7:3a:
1d:7b:a5:c7:8f:08:c2:99:ea:75:e8:de:93:fe:09:
7a:1a:f8:e6:a8:8e:ea:0f:fb:d3:ef:7c:eb:23:1d:
0c:93:39:93:a8:0e:17:d7:bc:72:de:56:dd:46:e7:
6f:ba:85:5c:ea:20:22:59:ff:69:78:9e:18:e6:43:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:01:47:BE:4E:35:EE:7E:4C:05:8E:AD:AD:9E:E3:6F:F4:65:46:2C
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bd:68:df:47:cc:a7:2f:97:10:34:b4:46:ce:03:6f:1a:58:
8f:9d:bd:c9:a5:06:38:ff:f6:91:be:fa:33:79:40:a5:a8:36:
8c:78:92:11:68:35:82:37:6c:97:a0:00:a1:1d:1f:5e:75:29:
f6:bd:c6:82:ee:41:4d:8f:14:00:ab:0e:6c:d9:1b:95:49:15:
45:d4:c2:42:28:ed:9b:dc:ab:f9:fc:dd:a3:c0:91:61:39:28:
fc:67:10:6b:4c:2f:42:f3:45:54:4c:f9:7f:dc:40:e9:03:91:
a5:b9:d3:a0:9b:f0:96:36:2d:33:b6:ed:d8:24:f2:4f:00:fe:
d1:de:a8:d5:65:43:68:f6:ed:69:b2:cc:86:bf:e3:ac:4c:c0:
fe:d3:16:cc:71:23:6f:e2:c9:95:57:db:77:37:07:82:b8:c3:
e2:22:ad:99:78:31:8a:02:09:44:bd:d1:f6:44:a0:02:e6:22:
cf:27:60:4f:63:b7:fa:76:be:6e:0b:ea:74:86:4c:ed:b2:68:
65:2e:91:59:a2:8f:4d:8b:b0:58:38:f2:82:bc:d8:a4:81:55:
26:2c:1b:4d:16:38:95:3e:24:b4:6a:34:2c:97:e3:c6:fd:b6:
59:71:06:ec:a3:e4:94:d3:ec:a4:5e:89:ac:24:3f:f3:0b:15:
52:46:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:34 2025 by rpki-client