Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: bW3xzkTPRS6ET88QuhWEp26i4J+pyG2UnnZxPFvfsLw=
Subject key identifier: 2B:B4:8A:FD:B4:80:04:C9:01:92:15:E6:46:B4:D1:B8:A7:5C:D0:98
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 01960C440828AB04675B4E4222CA67360623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0B87
Signing time: Sun 06 Apr 2025 18:01:47 +0000
Manifest this update: Sun 06 Apr 2025 18:01:47 +0000
Manifest next update: Mon 07 Apr 2025 18:01:47 +0000
Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: GWvdfNLdiplYR0sG6whvGzZEEHsk0Lhng3cr41Xv0VY=)
3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:44:08:28:ab:04:67:5b:4e:42:22:ca:67:36:06:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Apr 6 18:01:47 2025 GMT
Not After : Apr 7 18:01:47 2025 GMT
Subject: CN=2bb48afdb48004c9019215e646b4d1b8a75cd098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:3d:b2:e8:ba:4c:d4:b0:0b:49:66:ab:99:
df:8c:ac:6a:07:e3:75:15:b9:6b:68:f4:a1:68:e8:
db:e7:19:3c:86:bb:ca:5a:f0:0a:ad:ce:e5:04:4d:
9f:d4:0b:7e:2b:85:a1:35:19:ed:0f:d3:85:23:0f:
d6:ec:cf:c9:39:16:29:fa:e2:11:78:a4:a0:d5:e0:
d1:9b:40:d6:96:7b:71:bb:09:86:f4:f1:8f:8f:c2:
ad:70:ae:8d:d2:24:a9:f0:93:8b:c8:8f:a6:8d:a3:
62:9e:65:1c:a7:a6:42:96:1b:fe:d6:d0:02:e9:e6:
fa:a2:dc:b0:5a:5d:4f:29:67:e4:1b:06:02:6d:af:
07:65:35:bc:25:56:e0:ea:8e:a6:f9:c0:b7:69:5e:
87:db:35:fd:2c:31:ed:4f:4a:24:2b:97:f0:0d:cb:
36:1b:c8:4e:e4:29:59:ff:ef:d2:8b:21:50:69:e9:
94:28:6f:15:3a:c3:8f:c1:15:74:90:6e:30:6a:94:
ce:c0:20:e8:d6:84:de:a8:2a:14:ae:56:30:96:4d:
e1:f6:ef:4e:04:86:73:9b:0b:c9:82:bb:1f:97:2a:
9d:c0:e1:00:b9:a9:b0:e5:ce:a4:12:d4:2e:cd:43:
15:0f:6d:34:77:a6:1e:e7:51:4e:3a:91:a9:1c:11:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:8A:FD:B4:80:04:C9:01:92:15:E6:46:B4:D1:B8:A7:5C:D0:98
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:52:64:9b:a7:8b:97:ed:ed:d7:8a:4c:1f:97:6e:90:7c:29:
83:77:60:ea:db:d3:b4:b8:d1:af:cf:f8:d2:b3:40:c0:41:c9:
58:a4:52:e4:42:40:d6:1e:44:13:80:69:d1:e2:6f:e1:74:8a:
c8:cc:59:cf:ab:c1:71:bb:50:a2:63:e3:8b:59:71:15:d4:74:
e2:6f:5e:9b:94:16:1b:a4:16:cc:d6:fa:08:c2:68:23:35:c7:
d0:80:42:3e:d2:ee:c3:f6:99:bc:e6:44:3a:d0:14:21:80:bf:
e1:2a:22:1d:0a:c9:b2:62:79:1b:c7:65:d5:93:fe:a7:4b:cf:
54:ae:d9:0d:d7:63:51:cd:be:d0:94:6c:be:79:b3:cd:cf:46:
1f:b8:38:c6:ca:08:90:f9:29:31:38:f8:34:ce:48:a3:44:36:
37:b8:fc:c7:06:f3:20:18:03:9f:a7:35:98:17:1d:67:c6:e2:
ee:79:82:1b:a0:bc:d8:57:34:73:e5:80:9a:a9:f7:7e:6f:c4:
e9:f0:84:90:53:dd:ff:11:ff:cc:bc:22:35:ab:b0:d1:1d:bd:
33:ae:9c:a5:f1:de:a8:36:71:c2:de:cb:b7:c1:56:c2:60:5e:
ce:db:f3:40:b0:e8:e7:f5:4d:c3:81:ed:74:03:de:ba:c7:29:
1b:e1:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:27:24 2025 by rpki-client