Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: uOmLmA/FeTab9Qk8MGEfNJO77YpJ4DUOmLevuTkikAw=
Subject key identifier: 1E:F2:35:CD:E5:67:40:52:8D:3E:CB:3B:00:1C:DA:8C:A5:E2:42:54
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 01960C43CF2BBF2509DF6C2F28BA31786E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0C4B
Signing time: Sun 06 Apr 2025 18:01:32 +0000
Manifest this update: Sun 06 Apr 2025 18:01:32 +0000
Manifest next update: Mon 07 Apr 2025 18:01:32 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: wEMwAD87O3rHtW6L5aQ9cM94Q0wB3DwlKGo0RVxIbes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:43:cf:2b:bf:25:09:df:6c:2f:28:ba:31:78:6e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Apr 6 18:01:32 2025 GMT
Not After : Apr 7 18:01:32 2025 GMT
Subject: CN=1ef235cde56740528d3ecb3b001cda8ca5e24254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:01:ad:52:fe:7d:6f:56:d5:35:98:fb:f9:
c8:9b:06:dd:ba:8e:11:22:94:42:c8:fe:79:07:5b:
aa:ad:74:f6:90:a5:c6:27:70:12:58:a9:a0:6f:65:
4d:99:f8:59:cc:01:2b:5a:a5:60:a8:be:68:04:fb:
c5:a0:6b:23:a1:5e:a9:d7:55:63:0b:f2:e4:16:29:
0f:99:54:39:6c:84:50:94:81:5a:d0:14:e9:94:af:
75:44:10:35:16:e3:3f:ce:de:56:45:f1:c4:4b:7d:
7d:04:f2:9b:80:05:d5:7f:d1:2f:22:e7:1c:2a:42:
c1:fd:1f:7b:aa:87:8e:26:ed:a1:f1:9a:8e:c3:12:
91:c7:4d:ce:bd:ca:af:23:b5:11:2f:8a:c0:ae:43:
a9:c4:c8:f8:d3:b1:be:9c:22:73:ed:b8:c3:a6:0b:
c4:05:e0:c8:aa:43:c6:af:9c:ff:49:00:6c:7c:4b:
8a:b8:7a:ad:cb:d3:62:75:07:d0:ab:35:0c:d1:74:
52:b8:09:10:25:2d:84:d2:61:e0:61:e2:66:12:e3:
7c:30:69:a3:cc:6f:be:a2:1a:61:37:db:f2:f9:88:
7b:d0:f3:9a:19:7c:51:92:ec:c7:76:9c:c3:87:b1:
8f:6f:6c:58:94:07:f5:bd:5a:f5:c3:28:ad:14:a7:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:35:CD:E5:67:40:52:8D:3E:CB:3B:00:1C:DA:8C:A5:E2:42:54
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ab:16:97:2b:db:df:8d:c2:3a:d9:5c:ac:1f:33:4a:08:e3:
63:db:6d:62:ec:1e:9e:f3:7e:03:a6:14:44:d4:43:d9:3e:7d:
43:b2:b4:26:4c:1e:b1:fe:03:55:fd:99:9a:69:b4:4e:96:85:
bf:3c:aa:8e:98:48:a8:6a:42:3c:a6:4c:55:3c:cc:bc:61:dd:
d4:e0:64:4a:00:a9:1a:6d:ad:2e:9e:36:b8:79:99:72:67:ff:
7e:34:eb:b2:ca:37:a5:3f:45:43:ce:86:7d:ac:0b:46:b7:14:
50:82:cb:2d:bc:89:8f:7f:28:9e:7f:c6:7b:d8:ae:43:56:81:
5f:4a:56:97:f0:0b:15:29:66:b4:38:89:7d:7a:cf:60:45:5b:
4a:a5:4a:75:86:d2:35:18:1d:4a:9e:9d:85:70:ff:38:a9:3d:
46:56:d2:17:5c:61:1d:47:39:6a:f1:75:b6:46:1a:11:84:00:
1d:90:cf:4c:14:92:9a:18:9f:b5:26:dc:70:ad:d6:bd:69:36:
0d:bc:a8:a1:a0:27:5c:04:0f:85:a9:3a:ac:ef:8c:a0:aa:1f:
4a:d4:1d:c1:cd:17:db:2e:22:cd:c5:b1:e1:d6:5a:f5:49:9d:
95:1d:47:08:2b:b0:86:59:3b:e5:6b:3c:f6:4a:89:68:aa:16:
ea:60:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:48:18 2025 by rpki-client