Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: X+dZ+AeNjcLhsHUsErAs/Vi9zejCRf7zbEmHPkEOY/M=
Subject key identifier: 4A:F9:0C:23:DC:67:D5:13:83:4D:3C:FB:99:EE:76:0B:AD:6A:78:C1
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 01963F8B5473B3A54730A85723F9C0B2E9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0982
Signing time: Wed 16 Apr 2025 17:00:17 +0000
Manifest this update: Wed 16 Apr 2025 17:00:17 +0000
Manifest next update: Thu 17 Apr 2025 17:00:17 +0000
Files and hashes: 1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: idE7e4nb6jILJUdz0nsUy1EHeq7fcbCYE2jD//WC/HM=)
2: iKF-Q9PfXOLXW4CJahZRW_VogkE.roa (hash: +qqtPKI3qMehNAw49JzdFyEOoExudNvSKeInlgLAy1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:54:73:b3:a5:47:30:a8:57:23:f9:c0:b2:e9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Apr 16 17:00:17 2025 GMT
Not After : Apr 17 17:00:17 2025 GMT
Subject: CN=4af90c23dc67d513834d3cfb99ee760bad6a78c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:66:4d:9c:3e:39:9d:c4:45:4e:ac:79:4c:
67:95:63:b5:72:28:57:42:ff:73:b9:8f:09:f6:3e:
49:27:d9:13:0e:53:7b:82:d7:0d:45:f8:e3:7d:cf:
db:4c:2f:73:2f:6b:f6:6d:72:59:7f:43:9a:ff:d3:
5c:e7:2e:c2:b2:8c:87:ad:a2:0e:6f:6a:75:9f:b8:
3b:57:95:15:30:d9:e6:1d:7b:c9:8a:48:b0:f3:93:
d6:d9:dd:76:58:1b:af:88:81:fa:0a:46:4a:9b:b5:
29:04:9c:0b:26:db:05:fe:e2:47:13:47:d4:41:c5:
21:00:45:03:5e:9c:f5:ee:0f:91:05:2c:af:f0:76:
0d:31:77:a9:a6:a2:36:2e:3c:e8:54:8e:fa:1c:62:
5d:13:29:27:d0:fa:38:4c:c5:d6:b4:bf:6d:a4:2c:
52:6d:80:0c:2e:12:8d:34:d7:61:7b:58:e2:02:59:
ef:58:69:03:68:43:a4:a0:42:ce:ca:62:f8:e8:03:
7a:7b:16:81:17:c3:fa:cb:e0:6a:32:d5:75:2d:8d:
1c:eb:d3:bd:ee:0e:5b:ec:1e:c0:e9:bd:5b:41:83:
77:7b:64:d4:29:38:87:bc:9b:91:f1:71:4e:c9:25:
f2:4d:76:ee:54:a9:38:a2:62:f7:87:dc:3c:7a:5d:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:0C:23:DC:67:D5:13:83:4D:3C:FB:99:EE:76:0B:AD:6A:78:C1
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:45:9e:93:e2:36:ef:0d:09:6a:52:d8:b4:86:f5:7e:be:79:
2a:62:c2:29:83:00:4b:a2:3c:a6:90:65:e7:01:86:e7:5c:b8:
c3:27:20:a8:30:c8:59:5b:b4:d5:8d:44:30:4e:68:25:fe:87:
79:c7:1f:39:0a:f4:3c:49:a9:12:6d:d0:5d:c4:c4:2d:45:de:
e2:24:1c:63:83:c8:07:96:62:c4:e8:6d:00:1d:bd:a2:ff:59:
f5:f1:ac:ba:a7:4f:c1:85:77:8c:44:fe:a4:5b:f7:f9:6a:b8:
c2:9d:b0:25:22:f1:ed:5b:8d:82:1b:d9:4e:f0:65:a3:56:59:
22:9d:34:aa:e5:05:c2:cf:a8:9d:68:cb:6e:98:22:43:65:64:
44:e6:3a:ee:51:1b:06:59:4c:55:d0:27:63:f5:9a:2c:8d:55:
53:68:93:26:1b:fe:35:92:d5:26:ff:5e:97:73:5e:2d:44:2d:
2d:fb:a7:56:45:2a:bd:25:8f:0a:84:74:7b:4b:02:ae:c3:64:
f0:b6:84:3e:71:6f:9f:8e:a1:12:7f:16:47:f9:78:77:1d:8a:
05:87:8b:2b:69:74:e1:a5:a9:a7:f7:3c:f7:a9:e0:13:63:db:
cd:0b:80:9e:c8:39:62:c8:01:33:87:b8:26:b7:85:e6:76:5d:
fc:a4:9b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:24:46 2025 by rpki-client