Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier: l6eCE+IG+bEuoUPmFLJ+POmIzUKxzZOcg7csgVeG/mg=
Subject key identifier: 5B:0B:94:47:5F:4E:64:D0:0D:65:92:73:25:BD:88:11:09:0F:22:25
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 019614A20950AFB4E2A3435847B73296D54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number: 0441
Signing time: Tue 08 Apr 2025 09:01:25 +0000
Manifest this update: Tue 08 Apr 2025 09:01:25 +0000
Manifest next update: Wed 09 Apr 2025 09:01:25 +0000
Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: zUmNS0GlwBdF0VgM03FB2H1sLc6v2pXT/D61x0Ob9Wo=)
2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:a2:09:50:af:b4:e2:a3:43:58:47:b7:32:96:d5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Apr 8 09:01:25 2025 GMT
Not After : Apr 9 09:01:25 2025 GMT
Subject: CN=5b0b94475f4e64d00d65927325bd8811090f2225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:47:e5:0c:a3:a1:29:9f:b7:0b:0d:7d:8d:
85:0c:fb:68:db:3d:db:35:34:07:a2:86:6b:cf:7d:
b0:8f:cd:04:c6:05:77:2b:79:40:94:e3:d6:69:53:
36:24:c2:7e:60:40:63:b8:05:69:72:35:0f:b9:2e:
7b:d6:47:87:be:1e:52:55:cd:fc:02:a3:7d:f4:97:
b2:ac:cd:8b:8a:43:47:eb:29:33:21:b5:02:6d:40:
5a:56:92:81:60:1e:47:4e:29:86:5f:12:55:a3:e7:
db:77:a2:a3:a5:29:71:99:c1:48:8c:69:67:64:24:
27:3c:7b:2e:e3:a1:54:18:45:11:63:0d:dd:7d:94:
74:ad:5d:4c:d3:60:be:5f:0e:50:e6:39:5c:55:48:
75:89:97:f9:e1:91:67:c8:02:df:6f:94:df:a5:f3:
25:fa:b6:8c:d7:35:f2:67:43:dd:81:84:ae:c0:26:
67:c2:be:b7:fa:5b:33:16:ac:f7:2d:a0:29:26:76:
29:03:7e:a7:d3:fe:3e:a1:47:df:d0:cc:c0:26:52:
b9:37:8a:1c:1b:d1:31:cc:7c:54:ce:5e:9b:bc:74:
2c:30:87:c5:e0:9d:94:19:fe:8c:34:8f:09:dd:f4:
69:07:24:a5:b0:e8:7b:62:c5:53:35:e6:c6:b4:b8:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:94:47:5F:4E:64:D0:0D:65:92:73:25:BD:88:11:09:0F:22:25
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e1:1f:92:4b:8c:9d:76:0e:1e:1d:94:17:d6:04:d0:85:98:
0d:ac:ae:3d:9e:b6:ec:6e:6c:e2:e9:51:b3:da:19:10:df:5d:
c9:87:73:36:ca:df:b7:d7:86:79:83:7c:59:57:b5:f0:11:99:
1c:1c:d5:00:ad:85:b7:9c:ab:e9:f2:2a:e5:ef:34:cb:96:34:
44:b0:29:0d:83:f4:c6:0f:91:69:47:3a:49:c2:f0:6d:21:81:
b1:41:46:f0:8d:22:17:26:42:36:f2:28:b3:78:22:bf:0d:48:
09:95:c8:32:f8:17:27:b3:f5:43:ad:dd:cb:b3:a3:16:b2:be:
75:38:72:08:39:7b:ef:1d:26:43:a7:4b:b9:6c:53:0c:94:02:
d3:32:4e:12:2b:05:b0:3a:65:2d:19:3d:e0:b8:7a:db:95:6b:
cc:e6:6e:96:28:ae:6e:15:c8:0f:87:ae:b6:52:e0:8a:f2:26:
eb:45:06:e4:3d:e7:20:5d:cb:d5:b9:09:fb:fc:73:c4:a7:5d:
67:19:c2:d1:06:29:ff:9f:69:fd:4b:70:d3:e0:00:19:f8:11:
b6:35:95:af:65:f3:8b:d0:f9:1b:f1:06:8a:01:00:a3:06:3b:
ab:44:43:df:97:46:fe:d3:77:a7:46:63:4b:63:69:aa:36:d2:
c8:54:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:50:31 2025 by rpki-client