Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
File: oV32zYKdlfY9kx1dz5HMi6UPkLA.mft (raw, json)
Hash identifier: BDwpHErf/i9jh/3iB9kZcDrI35i9F2vloMnESMRKMDQ=
Subject key identifier: FE:2D:F6:85:DF:C6:44:E2:5A:A8:D2:04:BD:4A:85:F8:55:DC:61:E0
Authority key identifier: A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
Certificate issuer: /CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Certificate serial: 0196564A2580691084135CF826C7EFFFB8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
Manifest number: 1227
Signing time: Mon 21 Apr 2025 03:00:21 +0000
Manifest this update: Mon 21 Apr 2025 03:00:21 +0000
Manifest next update: Tue 22 Apr 2025 03:00:21 +0000
Files and hashes: 1: VuAYChzgVwA9U2Q6Uxu9DF2BLPk.roa (hash: 2ErjMaikK9MO12otuKOE97QoF/tRVc9Xenat/2fnwAc=)
2: eCInIDJljc296hyYtD5W8TkDML4.roa (hash: 748KveIKW32FuAoa2IrqedX1Io3eRBGbUpfsqc8GK+g=)
3: oV32zYKdlfY9kx1dz5HMi6UPkLA.crl (hash: Ck56F1dL/tBGodGqfnw2tgIDfHNhDiGvVSFMDI6k3Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:25:80:69:10:84:13:5c:f8:26:c7:ef:ff:b8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Validity
Not Before: Apr 21 03:00:21 2025 GMT
Not After : Apr 22 03:00:21 2025 GMT
Subject: CN=fe2df685dfc644e25aa8d204bd4a85f855dc61e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:b0:c4:92:74:94:90:54:64:7f:88:7d:a4:
7c:35:9d:b7:0a:a5:16:2a:9a:a7:a1:8e:43:6e:f4:
2d:90:10:35:9c:e1:f2:b7:ed:59:8f:45:16:56:31:
ce:4d:88:ab:d2:8f:71:d7:af:5f:ab:49:e6:cf:99:
fa:c1:ae:32:85:93:4e:6a:5a:e8:2e:5f:c4:7d:b1:
a8:33:42:c7:a5:8d:35:1e:e5:49:39:77:a8:5d:de:
b9:f9:5e:fb:1b:37:6d:2f:85:76:cc:f7:eb:5a:b3:
6f:4c:28:03:07:59:ae:0d:a1:69:79:f4:73:ca:73:
6c:a9:ab:8a:09:e9:09:18:41:fb:04:49:b3:47:ab:
c4:ff:f3:a6:c9:1d:80:d7:5d:48:d4:b0:32:f6:a0:
5f:af:d9:84:18:0a:62:20:14:d9:64:12:0f:39:5e:
b8:1f:eb:0c:0e:e8:9e:10:4e:cd:ba:9d:0c:35:09:
0c:1d:93:52:ab:ca:eb:d5:8e:c9:6b:04:62:2d:a3:
dd:43:38:cb:ca:68:25:5e:35:ba:27:ab:97:0f:00:
05:e6:7f:32:c1:05:c5:8f:f2:97:eb:31:7b:3d:a2:
a3:59:cc:26:66:e1:06:95:93:33:3a:02:47:7c:2a:
92:46:8d:a2:ea:82:91:6c:68:94:aa:82:74:48:ca:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:F6:85:DF:C6:44:E2:5A:A8:D2:04:BD:4A:85:F8:55:DC:61:E0
X509v3 Authority Key Identifier:
keyid:A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c9:bc:af:78:41:98:81:5a:00:cc:02:ac:fd:16:c5:59:21:
9a:6f:7b:52:45:a5:5a:44:2d:10:7e:1b:f2:f1:f1:3d:69:c7:
5d:8a:a7:f4:e8:32:86:d3:69:b5:bb:ad:cd:74:08:e4:34:ca:
52:96:f7:d2:83:f7:1b:c9:ea:58:08:b5:1f:d6:29:49:de:8c:
cd:8c:b4:a3:39:8f:5c:00:d6:8c:93:6f:10:f2:6e:e1:2a:bd:
96:54:42:5a:a5:f2:f9:d6:54:b5:9a:56:eb:d3:3a:eb:ff:f8:
68:b4:60:d6:0c:01:2b:05:99:98:46:f9:03:d3:84:cb:2c:30:
84:7a:82:5c:ad:c4:7c:7c:72:ee:68:0b:2a:a7:db:80:d1:b0:
90:77:e5:19:b9:5a:bf:6f:57:70:e6:64:37:f0:81:99:ec:14:
6b:ff:02:3b:c1:e0:57:f0:85:1d:a0:78:7e:39:42:67:c7:62:
7c:89:dd:06:9d:40:9d:a0:12:18:ec:65:5f:bc:45:0f:25:47:
18:6c:7b:64:c2:59:23:78:48:d5:6b:d7:83:f8:e7:65:9b:f0:
dc:27:bc:b1:bf:fa:a7:a1:f8:26:e6:f5:07:9a:55:cf:45:74:
ff:44:65:40:9b:e7:92:b4:0e:59:0c:ef:42:50:54:51:de:74:
95:15:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:48 2025 by rpki-client