Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: X5lr9Bke5eAwZtm7+V+Vp/CgtiGBSGNhrEScVPl6Tvs=
Subject key identifier: 57:B7:08:53:FC:7B:28:07:17:7F:84:24:6C:35:2B:2F:AD:61:45:AF
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019610C52AEC663A1FE17F61C6E909E8D254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 08C2
Signing time: Mon 07 Apr 2025 15:01:18 +0000
Manifest this update: Mon 07 Apr 2025 15:01:18 +0000
Manifest next update: Tue 08 Apr 2025 15:01:18 +0000
Files and hashes: 1: m50G2xjf4eko7b4H4T04QnFfNVk.roa (hash: GGKv2wzF1TvAhDLfkaO5+AkkZcueQ+luEbM0QfwqNgs=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: Wr8sa4wstJZJGtmS+p/93WWO4UTSr61PCbS5coGPeX4=)
3: sU9Gf8xtIizGCx3n2mNvIY0L-S4.roa (hash: 9lLK6NJxBVPn0bXzjcavrpReTIaQOByvwj845Zkopcs=)
4: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c5:2a:ec:66:3a:1f:e1:7f:61:c6:e9:09:e8:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Apr 7 15:01:18 2025 GMT
Not After : Apr 8 15:01:18 2025 GMT
Subject: CN=57b70853fc7b2807177f84246c352b2fad6145af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:61:d8:0f:07:df:12:d9:11:80:af:f6:2a:
02:24:19:e8:4c:e0:24:60:f9:2a:03:1f:19:b7:6a:
00:b8:0e:60:95:72:86:ac:15:0b:5c:b9:1a:9d:af:
6e:60:39:0e:35:0f:0a:66:1c:3b:eb:d4:34:50:d8:
eb:bb:6c:49:93:3a:32:d0:b6:f7:c3:12:4b:35:a6:
31:37:bc:6a:ae:6e:4d:e1:29:e0:74:e1:de:37:5e:
b6:61:21:e4:81:09:db:38:b2:94:bb:f1:27:39:c3:
ea:9d:0a:75:a3:18:4e:c6:11:86:a1:d7:ba:3a:2a:
c4:8e:cb:9d:2a:df:f5:0a:39:47:f8:23:83:72:89:
a8:90:58:90:fb:2b:02:ff:a8:a6:5a:99:c0:3b:fe:
28:7b:64:fb:79:b8:47:d2:fd:8b:d1:4b:5c:7a:f1:
0c:12:07:db:a2:34:48:6c:69:c8:f1:ab:f1:60:b0:
b3:82:3e:d4:f3:b3:a2:2f:12:25:52:24:07:dd:55:
19:b2:da:70:ea:08:56:f4:e5:43:dd:e6:c1:05:45:
68:e5:23:52:52:99:c7:1d:16:2b:fb:22:88:cf:fc:
d8:cd:c0:7d:fa:38:66:3f:aa:58:be:f7:d1:f9:eb:
7a:d3:ca:05:e7:30:e9:29:2e:de:e5:84:0f:58:b5:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:08:53:FC:7B:28:07:17:7F:84:24:6C:35:2B:2F:AD:61:45:AF
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ef:1e:a7:db:ed:04:80:9b:ed:79:c1:ff:10:8f:bf:6b:b4:
cd:22:5b:d9:1b:ab:da:8c:3f:cf:94:a9:93:7c:47:2e:47:fb:
71:1d:3d:b6:aa:a5:c9:79:94:b2:02:71:e0:35:15:f7:75:3c:
c6:d3:c7:06:96:d8:4a:2c:d2:89:cd:1e:eb:45:2f:a1:96:e6:
33:40:b6:b0:e6:ff:3b:99:d3:0f:8b:1c:09:21:23:21:f4:83:
8a:37:fd:2c:40:05:3c:72:6d:98:6c:3a:98:4d:21:f4:06:08:
8b:e2:7e:4d:25:6c:26:af:8a:10:d1:31:ba:83:53:fa:b2:b1:
20:e6:4c:37:e2:bc:fc:e4:69:6d:74:47:bb:26:c9:5c:ac:17:
89:8e:ae:8c:2b:85:98:63:86:3c:4f:88:8c:db:a5:ee:52:e2:
9d:b3:59:08:38:bd:ac:81:ec:16:e7:be:72:47:94:70:4f:e1:
7b:2e:cb:2d:db:8b:73:d7:c6:ed:7d:9b:2c:fa:23:e4:e8:20:
12:1f:9e:ee:61:a8:78:3e:c8:aa:5e:49:f1:54:bf:f3:cb:32:
e1:df:99:a7:02:72:b2:92:d4:18:4c:8f:7a:42:c7:15:a3:a5:
cd:56:32:f2:34:49:31:54:6d:94:f8:72:54:51:04:d0:1c:55:
15:96:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:30 2025 by rpki-client