Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
File: oV32zYKdlfY9kx1dz5HMi6UPkLA.mft (raw, json)
Hash identifier: Lz4baXRwzl9BtlvtfP7lSmmwIb9Mg/+qvVPQfTm6jHg=
Subject key identifier: 32:A3:5B:EE:D9:C4:DC:72:70:89:4A:C0:97:50:E3:14:41:B2:DC:B2
Authority key identifier: A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
Certificate issuer: /CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Certificate serial: 01958B848FE4458852FC0C3E701119A9028A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
Manifest number: 11BE
Signing time: Wed 12 Mar 2025 18:01:15 +0000
Manifest this update: Wed 12 Mar 2025 18:01:15 +0000
Manifest next update: Thu 13 Mar 2025 18:01:15 +0000
Files and hashes: 1: VuAYChzgVwA9U2Q6Uxu9DF2BLPk.roa (hash: 2ErjMaikK9MO12otuKOE97QoF/tRVc9Xenat/2fnwAc=)
2: eCInIDJljc296hyYtD5W8TkDML4.roa (hash: 748KveIKW32FuAoa2IrqedX1Io3eRBGbUpfsqc8GK+g=)
3: oV32zYKdlfY9kx1dz5HMi6UPkLA.crl (hash: SM7ctbecfpnlf4014tMC/DldQ9EdAhTiUmApOWRpRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:8f:e4:45:88:52:fc:0c:3e:70:11:19:a9:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Validity
Not Before: Mar 12 18:01:15 2025 GMT
Not After : Mar 13 18:01:15 2025 GMT
Subject: CN=32a35beed9c4dc7270894ac09750e31441b2dcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:ab:c7:a6:49:fb:e3:04:83:5e:31:e6:ea:
e7:55:80:65:00:31:a1:c8:57:20:e4:2f:7b:e7:0d:
67:7c:97:8b:0f:a7:59:75:90:b5:80:32:f6:8c:6c:
47:84:01:e4:49:56:82:cc:d4:75:06:8d:9d:41:40:
60:01:ac:99:1d:ca:ff:79:9a:6d:86:b0:ff:c8:5f:
fd:b4:77:d7:e9:40:99:be:c5:f6:93:55:94:b0:f2:
07:d4:6b:21:8f:8d:8d:90:3b:16:72:b2:8a:38:59:
38:85:a0:19:43:ee:d1:91:7a:b3:da:f3:e6:70:48:
9b:d1:dd:ff:c0:c6:dc:15:bd:fb:86:85:14:c5:21:
ac:84:d0:8a:99:69:b4:c4:16:07:2e:2a:ca:81:21:
62:15:ae:e9:c6:b7:6e:b6:56:15:19:13:c3:42:f0:
df:74:d0:7f:1a:40:e0:47:6a:b9:17:4c:b6:91:d8:
7c:35:78:68:83:78:14:43:90:64:a1:42:c0:6f:01:
9f:ee:fa:e3:27:8d:ec:fc:c1:c7:c3:8a:ac:09:35:
10:ca:dc:d8:fe:e4:4d:86:c1:27:3f:b8:18:0d:ce:
f7:95:94:49:f7:1a:99:4e:2d:e6:2a:49:cf:af:89:
23:82:8f:9a:8a:1d:ff:0e:a0:40:d2:d7:b0:63:6a:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:5B:EE:D9:C4:DC:72:70:89:4A:C0:97:50:E3:14:41:B2:DC:B2
X509v3 Authority Key Identifier:
keyid:A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:10:ca:0a:db:aa:9f:75:b9:74:15:ff:e1:46:00:b4:bd:2a:
34:22:9b:f8:4f:42:35:b6:59:cd:3d:62:93:20:9b:08:f8:d5:
70:34:bd:b0:d1:b7:c4:5a:5e:47:85:e6:bb:7c:0d:f1:87:12:
87:e8:4b:a0:a5:f0:70:74:b6:6f:e7:3d:f4:2b:ba:bf:fb:04:
d6:18:61:e1:c1:51:80:42:e0:e7:8d:8f:bc:f8:48:89:08:51:
79:ab:f2:63:ee:33:9f:87:51:9a:00:7b:e2:c4:f7:30:af:fd:
07:69:7c:74:36:0c:7d:a0:60:41:79:7f:f4:b7:e7:fb:4f:9b:
1b:4d:ad:50:b4:d5:96:25:1c:ba:06:bc:de:f4:87:04:b0:07:
e3:0a:4b:0e:c9:6c:1e:06:fa:5e:89:0f:5e:d8:4e:74:dd:87:
20:d9:dd:a4:c2:7e:73:06:07:bb:2c:3e:84:19:55:90:e4:cf:
84:33:2b:80:39:63:f3:77:e8:0a:98:0f:6c:1e:80:09:9a:67:
a4:48:27:7f:8c:41:56:74:46:41:99:dd:6b:94:df:95:12:7d:
97:f6:ae:7f:fb:02:b1:5a:f1:1e:7d:b3:93:0b:b8:9c:8b:74:
78:67:33:45:3e:79:f5:8b:d1:ec:9a:f0:ea:ae:b3:ff:38:65:
20:23:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:37 2025 by rpki-client