Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: To4Mz8OEM0Ge7kKoKJ8H2f55pXMbxSXJttqIwSw/srg=
Subject key identifier: 5E:3F:F0:F3:84:16:50:B6:6A:2A:BC:62:62:BC:20:C5:3F:47:11:F9
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 019652DBAA3A2E983271761FEBEBF30B9886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 114B
Signing time: Sun 20 Apr 2025 11:00:49 +0000
Manifest this update: Sun 20 Apr 2025 11:00:49 +0000
Manifest next update: Mon 21 Apr 2025 11:00:49 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: P4smnx5ALre21EC9qONVPjbSD8Glo0HHtavMW7VAM2c=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:aa:3a:2e:98:32:71:76:1f:eb:eb:f3:0b:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Apr 20 11:00:49 2025 GMT
Not After : Apr 21 11:00:49 2025 GMT
Subject: CN=5e3ff0f3841650b66a2abc6262bc20c53f4711f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:10:9d:f7:95:26:d3:57:8e:90:5b:3e:e2:
ff:f5:0f:c1:6e:df:56:e5:e6:fc:c2:89:36:c1:32:
f3:73:03:4d:d2:0f:42:3b:0a:63:4f:be:5a:b7:47:
12:aa:38:7a:c8:35:78:c8:6c:a9:e0:af:10:b4:09:
6d:30:41:64:c4:d4:74:cc:b8:7d:6f:5c:b8:43:eb:
80:6d:27:41:f1:d1:59:64:4c:9e:e9:b5:91:e4:04:
fb:ac:b1:18:49:67:46:27:0e:42:e6:ef:d2:e4:af:
51:f4:d8:a5:4a:83:19:81:34:7d:e2:37:83:42:86:
e7:39:12:9f:43:99:50:d3:f2:19:d5:66:dc:86:34:
eb:b3:ed:08:54:c0:fd:57:fc:4d:6d:09:d4:48:d3:
83:d6:62:27:af:fc:32:f0:6c:0c:09:c3:95:12:77:
95:b9:f2:29:aa:7e:bd:4e:97:1d:34:34:eb:04:5a:
aa:83:8b:5f:11:f2:37:21:54:b5:84:a7:54:7f:b3:
6e:33:d6:27:c4:0e:3d:df:89:68:c0:0c:80:ee:0e:
6d:10:2d:df:be:a3:9b:52:4e:d5:e4:f5:fd:b3:01:
f7:97:31:21:a8:58:41:91:ef:60:10:97:62:41:56:
db:f1:76:72:90:93:ea:ab:f5:63:c5:4b:f8:18:53:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:F0:F3:84:16:50:B6:6A:2A:BC:62:62:BC:20:C5:3F:47:11:F9
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d9:39:64:96:73:10:3c:1f:c1:14:0a:00:66:69:0d:02:65:
05:4b:50:40:02:42:3c:43:f1:c4:1a:8b:1a:fa:a2:c7:0b:3c:
d0:32:19:d8:2f:06:4d:b1:1a:55:f5:a9:a6:65:cc:b2:2f:51:
ca:96:5f:c7:4f:49:b1:46:1c:0a:ca:33:46:d0:74:10:f3:16:
e2:9b:17:c2:04:04:55:45:a8:25:95:64:20:11:d3:45:e2:70:
6a:c8:33:21:9f:e3:4f:a9:04:29:0c:b8:24:5f:c4:1c:46:b0:
ab:ba:7b:90:5d:ec:dc:43:ec:89:64:95:48:0d:3e:24:6a:65:
c1:7e:65:c3:eb:09:76:9c:69:7a:cb:16:56:95:4f:64:a8:f4:
b7:ac:65:db:c1:11:2a:88:85:9e:bf:45:7a:63:50:9f:8e:d8:
17:ab:35:a0:e9:cd:e0:54:88:ee:47:f0:0f:35:c6:e6:65:4f:
b8:3b:8d:ba:c7:ec:5f:9a:c5:fd:54:96:9b:5f:cb:f5:2c:f1:
87:63:0d:64:3a:12:d0:d1:a2:a5:bb:37:35:93:fa:8a:f5:d9:
43:22:83:7e:90:42:64:e4:97:9e:a9:d7:fe:83:1d:9b:db:61:
88:b0:35:df:b1:4a:2a:e9:02:e4:f4:25:02:cc:8f:ad:0f:80:
5f:a5:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:00:19 2025 by rpki-client