Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: 59b7WXEig95ZpBUR8CQoZY5i3hVH9Od/ijUDK5oRsSs=
Subject key identifier: 5F:01:09:E5:79:54:85:17:68:BC:23:06:8A:01:7C:02:EC:00:AE:9D
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 01958B16D21DD8CFB7B8B4A06CC4697F9C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 16:01:23 +0000
Manifest this update: Wed 12 Mar 2025 16:01:23 +0000
Manifest next update: Thu 13 Mar 2025 16:01:23 +0000
Files and hashes: 1: acvvT5q-PVeUjsCLlPVuoTE00po.roa (hash: MQoBLU//Irn0dEBmlINyAJ8ehIRD+2s0D9hVDHRZB5A=)
2: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: WnFtWw5ChM0IYGqBhvVIUelrj19xH49s/GPDXlxC2K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:d2:1d:d8:cf:b7:b8:b4:a0:6c:c4:69:7f:9c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Mar 12 16:01:23 2025 GMT
Not After : Mar 13 16:01:23 2025 GMT
Subject: CN=5f0109e57954851768bc23068a017c02ec00ae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:fb:38:31:7e:73:3c:87:de:ba:5f:38:b6:
91:44:45:05:7b:41:fb:63:8d:8c:f8:da:93:b5:62:
cf:dd:4c:70:47:81:5d:e2:70:6d:e0:12:a0:df:d8:
18:76:de:37:98:ff:ac:45:f0:e5:aa:c9:34:87:53:
b2:97:29:e4:a0:c5:73:52:3c:9a:d8:99:d2:a8:8f:
94:9d:81:91:79:28:76:e8:5d:10:29:90:4d:e9:ed:
82:3d:d3:33:81:24:9c:e7:54:1d:3a:12:29:66:be:
b6:cd:1e:a8:bc:79:4e:fc:e8:51:2b:ce:d2:13:7d:
c3:c3:97:55:95:b0:eb:41:94:56:41:85:26:43:4d:
e0:2b:42:92:12:a7:e7:ab:ea:ab:d7:24:17:ce:c9:
01:57:2c:27:5f:8e:53:06:d0:2f:b5:d4:1c:f9:f0:
81:cf:09:dd:44:8f:29:32:b4:b1:64:8f:fe:35:9b:
ad:b0:fe:35:9b:14:ae:d8:a8:b4:0e:f2:95:e7:42:
78:bf:4d:d5:3b:7c:02:3c:88:40:24:35:3b:ac:43:
5f:43:cf:3b:e2:67:15:46:9b:43:cb:14:9a:5e:64:
00:ee:e1:b1:a8:b7:37:64:fe:ed:a0:ea:6d:31:d0:
19:3b:84:58:66:ee:68:e3:38:f3:c2:02:51:3a:e5:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:09:E5:79:54:85:17:68:BC:23:06:8A:01:7C:02:EC:00:AE:9D
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:58:29:8d:49:96:9f:a4:f6:3e:d5:49:d9:a6:08:95:94:04:
6b:e0:5e:c6:40:85:0d:57:40:c5:e7:7f:4b:ce:09:18:21:e4:
50:bd:5b:2e:cd:17:18:5e:b5:d7:92:b7:88:0e:e9:88:04:3f:
2c:ae:9c:25:62:15:e9:27:9c:3b:57:39:cb:38:49:39:eb:4a:
84:86:16:d6:8c:b5:18:34:41:7c:8c:64:53:ee:30:e0:3d:85:
b6:0c:1d:fc:d5:dd:9e:fe:c6:3a:50:10:67:5d:c1:60:3a:01:
6e:de:ca:92:30:97:91:e2:18:e6:ad:f0:01:62:4a:b9:34:40:
5e:f2:c2:39:70:a6:85:29:ee:a8:1a:38:d6:1d:9d:ef:84:e9:
f6:0a:06:19:60:64:5a:8c:61:b6:3f:86:5a:70:2e:55:31:92:
ba:6e:92:11:ad:02:d5:d5:db:e4:26:9d:59:ce:87:8e:1a:ac:
a9:c6:40:8d:ec:91:a9:df:6b:c4:d0:7b:38:90:1e:62:0e:a9:
e1:74:42:74:23:53:02:14:32:b8:49:34:d4:c8:1d:f2:81:13:
fa:5d:94:4c:d2:5f:17:6c:9a:b7:3b:3b:87:54:f9:fc:cf:8c:
18:69:32:4d:23:7e:cc:fb:86:6d:26:c0:7f:a9:27:91:31:81:
7e:d6:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:36 2025 by rpki-client