Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: 00dq8ixy1SByF+bmxYTCYP+fRgAd+R4W/IvcIZ5+psM=
Subject key identifier: D6:DF:2D:02:45:52:60:69:FE:C9:D4:BA:B4:79:0C:C3:05:F6:B0:EE
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 0196059C582A854CE53C483FF7F83728BB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 50
Signing time: Sat 05 Apr 2025 11:00:54 +0000
Manifest this update: Sat 05 Apr 2025 11:00:54 +0000
Manifest next update: Sun 06 Apr 2025 11:00:54 +0000
Files and hashes: 1: 4TBEbTwznRUyfO-99-DGzicdpVY.roa (hash: NUzc37NEChJ2ehR4MuI3RA+Wwr1maBIZ+yC3jO0gtfU=)
2: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: MUPurhUH5iz4uhZFoeNYhKPhAhN6ZhUflIGmcE9vxHM=)
3: dsqp4bxyFCCs7RL2PZGSdi7KthE.roa (hash: LpothYWyfl3DUg9u8R+0xehBO2vE3vsq9xV0G0H4C0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:05:9c:58:2a:85:4c:e5:3c:48:3f:f7:f8:37:28:bb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Apr 5 11:00:54 2025 GMT
Not After : Apr 6 11:00:54 2025 GMT
Subject: CN=d6df2d0245526069fec9d4bab4790cc305f6b0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:26:c6:bb:b3:46:d2:76:cd:1b:f8:99:fa:
ab:34:a6:4a:08:c0:c5:32:c5:3d:94:6c:ff:31:5e:
07:db:5e:db:79:3a:72:c2:af:8e:b1:5e:23:4e:30:
20:eb:73:6e:d1:77:f5:b9:eb:29:38:a9:97:48:14:
1c:ed:cc:d7:a1:f7:7c:a9:f1:d4:9d:76:24:33:16:
49:3b:97:81:2a:4f:49:e1:c9:6c:c5:89:d1:3b:40:
ed:d7:ff:3a:7b:0c:08:dd:ed:79:31:de:bb:ed:19:
9b:d9:c5:9f:c7:9c:6f:ce:74:54:f3:46:e5:38:43:
c2:1d:32:be:4b:8d:15:0c:fe:ce:b7:b2:c0:8a:fc:
f6:80:21:20:d2:9c:38:47:14:fa:b4:44:b1:b5:11:
6c:d0:da:21:0a:b9:8d:6e:e3:25:45:c3:e2:22:4c:
cb:17:c9:1f:dc:ef:9a:76:d1:b9:b7:2e:6f:8b:ee:
0b:b0:3c:56:ee:11:16:03:45:0a:2b:25:dd:34:c1:
ee:9f:da:58:3f:7c:29:20:f1:86:60:f5:5b:14:57:
be:26:33:02:a4:22:28:3e:a4:5a:5d:ac:68:c3:81:
85:5b:80:fb:16:58:01:c2:0d:19:4a:02:ff:d8:d1:
10:8c:db:0d:f8:d2:84:b2:21:a6:e4:e3:6e:82:2d:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DF:2D:02:45:52:60:69:FE:C9:D4:BA:B4:79:0C:C3:05:F6:B0:EE
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3f:9e:78:d3:a1:05:90:b7:df:a6:a1:d9:7a:d3:20:0e:2f:
c6:51:bd:1f:d7:c5:bf:a0:4a:a7:6e:1b:e3:93:d3:c4:a0:5e:
45:7d:b2:c2:2b:91:83:cb:0b:fa:a0:c3:43:ab:cb:e7:ed:6d:
fb:c0:0e:9b:21:ec:38:f1:97:6b:a6:e6:d3:1c:74:de:f9:1f:
75:03:36:93:ee:a4:e1:aa:02:7c:b6:7c:b4:ed:27:a1:21:85:
ec:79:e9:6d:0e:01:89:21:da:bd:aa:c1:8a:d1:2a:65:f2:0c:
a7:1b:be:cb:ae:9a:b8:ee:48:47:8b:0f:15:57:73:88:fe:a8:
bc:b3:82:ee:ce:f6:4f:1d:8f:d7:40:e8:b0:8d:44:18:23:23:
d7:ef:3a:be:7e:4c:d5:28:c0:13:e5:e3:14:c2:97:ff:b3:0d:
6a:31:5f:63:16:77:8f:db:8d:b8:3b:ad:f9:14:34:6f:22:6c:
5e:82:68:69:9c:3a:b3:3e:b8:e9:8b:35:5e:ab:80:3f:f7:f7:
78:e3:ee:a9:3b:a5:6b:53:46:ea:38:c5:87:20:1d:ef:f4:c6:
c1:ed:b8:26:0b:10:bb:03:1f:e5:7c:7b:3b:95:54:21:96:fe:
b2:e6:1e:b7:73:77:ec:d5:8d:e1:4f:ce:1f:2b:83:ad:df:57:
5b:11:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:17:31 2025 by rpki-client