Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: MEpD/GBzbVvCgsG4ZRkxdd44cc/6ieHYhZKUNXvcV1s=
Subject key identifier: 18:24:C5:FF:8B:C9:95:87:AC:BB:84:B0:BD:F0:33:0B:9A:8F:88:2A
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 01964AEAA9B4A4BF713BD252F10A93314170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 1140
Signing time: Fri 18 Apr 2025 22:00:14 +0000
Manifest this update: Fri 18 Apr 2025 22:00:14 +0000
Manifest next update: Sat 19 Apr 2025 22:00:14 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: olu3MrOtpnjqaQ9wqV3TBLJvogswKk7w4dlj5UqhH38=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:a9:b4:a4:bf:71:3b:d2:52:f1:0a:93:31:41:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Apr 18 22:00:14 2025 GMT
Not After : Apr 19 22:00:14 2025 GMT
Subject: CN=1824c5ff8bc99587acbb84b0bdf0330b9a8f882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:80:fd:1f:74:03:fd:cb:16:55:81:a1:00:4d:
2a:3d:b8:71:d1:bd:51:66:bc:5a:23:4e:79:59:f3:
3f:35:4d:7a:2d:21:ff:96:15:f2:c9:35:c1:dc:85:
73:bf:22:b4:3c:d0:28:03:fa:51:b8:50:af:bc:76:
5e:09:7e:50:8a:6e:6d:61:48:1a:8f:44:e3:5f:83:
f8:e4:2b:e4:de:6a:aa:63:6f:70:ed:a4:fd:54:85:
7e:23:c5:82:08:3a:3a:fe:d5:42:31:b3:11:87:9c:
4f:83:c7:67:4b:df:f6:71:ca:d1:6a:ad:eb:59:d7:
40:e5:66:93:2a:2a:56:8b:66:27:78:46:81:4e:f6:
81:61:22:3b:ef:97:48:6c:db:7d:f9:59:88:c8:0f:
b7:27:29:f1:32:6e:14:a8:06:cc:4e:5c:7a:89:96:
54:6c:67:ad:e5:67:6c:96:2f:1b:b2:68:df:f3:e5:
53:af:33:fb:08:a5:bb:6e:cf:d0:a8:49:2a:4f:fa:
be:d1:1a:38:df:d5:d2:8e:83:24:74:f7:b8:52:aa:
0e:b3:b0:37:45:05:a5:96:78:3b:7f:c5:da:36:92:
97:f6:7e:5d:4a:75:40:b7:e6:0a:c7:80:05:eb:4f:
c7:a1:a1:10:17:33:3d:22:ba:ec:87:36:75:1e:a9:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:C5:FF:8B:C9:95:87:AC:BB:84:B0:BD:F0:33:0B:9A:8F:88:2A
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:85:ee:20:0f:ff:ae:aa:4a:76:b0:30:3b:82:a0:95:e2:a4:
99:ae:75:72:0d:80:23:14:b9:ec:d1:75:b1:c6:e8:65:85:cc:
b6:48:21:31:68:77:22:fe:c9:a2:40:8e:e2:94:e1:1b:c3:a2:
5d:d1:4c:0d:88:b1:13:b0:6a:c0:bd:89:0b:19:6f:79:b4:34:
8d:b0:28:0d:2f:e1:4d:91:05:8e:ed:e0:e6:bb:a5:60:38:32:
92:a7:cb:66:1f:c8:63:93:84:a8:f7:5b:42:23:fd:3a:74:7b:
a5:98:fe:9d:57:e6:eb:94:1e:42:11:30:b3:7e:f9:1a:62:b4:
fd:a8:d7:56:aa:ae:39:99:29:50:3d:25:fd:5d:29:f2:e8:9d:
c5:23:d4:2c:85:89:1e:05:91:8d:53:98:fa:70:3f:75:8f:b5:
a1:ee:69:bc:83:e5:e4:d7:e5:5b:11:11:eb:15:39:bc:03:e6:
9f:d8:63:95:71:b4:af:77:dd:84:57:d7:0e:00:54:46:e4:72:
34:9b:83:4e:69:7f:d2:df:34:e9:7f:3d:16:3a:a6:16:e5:f5:
e7:bd:6e:3c:bd:e8:fb:a9:e0:5d:05:be:50:f8:8d:8f:63:91:
60:bb:dd:0a:23:02:4b:06:30:d5:32:46:86:cc:53:24:8f:71:
de:b1:db:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:41 2025 by rpki-client