Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: unHtGDS45S5DNYOMKLv5SG4RRwybMbghoP7i/qIqwmc=
Subject key identifier: D6:95:1E:8C:56:FF:98:C2:93:47:BF:81:57:AB:43:7E:77:08:CA:0A
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019645FB7A96CAB5F7B17D337B746A64F892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 13BB
Signing time: Thu 17 Apr 2025 23:00:30 +0000
Manifest this update: Thu 17 Apr 2025 23:00:30 +0000
Manifest next update: Fri 18 Apr 2025 23:00:30 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: IboMA2cFObs5HSXoNXj4pill+AddlMUZhelNsVCS0G0=)
2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:7a:96:ca:b5:f7:b1:7d:33:7b:74:6a:64:f8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Apr 17 23:00:30 2025 GMT
Not After : Apr 18 23:00:30 2025 GMT
Subject: CN=d6951e8c56ff98c29347bf8157ab437e7708ca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:b3:64:06:ad:0c:46:ed:6c:b5:5c:31:5c:
32:ca:55:21:48:3e:fd:3d:4e:b2:bb:0f:c6:ad:62:
a5:9f:67:00:50:a1:f3:d5:40:9d:a0:04:3d:28:7c:
33:84:11:9e:1c:c1:07:46:bc:73:0d:71:af:ba:74:
40:9a:cd:ab:95:b6:12:7b:f7:c8:f8:94:52:bc:52:
b8:57:90:73:ed:ff:ff:c3:2f:78:41:3f:21:62:40:
75:bd:62:82:6d:0a:31:9c:f9:bb:26:cd:1b:0b:b7:
76:c9:cf:15:95:36:a2:e7:03:36:fd:11:85:e8:cc:
c8:8c:61:42:d3:5c:4d:2c:c3:53:d0:81:50:3d:2f:
af:39:69:8d:da:cb:d9:80:ab:a4:4e:0e:e1:de:f0:
23:2f:0e:a0:da:7b:3d:3f:62:1e:52:d2:ab:00:85:
a7:0e:31:7c:3b:4b:6e:87:8e:d4:c1:f1:c5:60:d4:
52:da:1c:73:fe:f3:8d:75:3c:35:fd:99:12:8e:64:
13:36:65:3b:93:35:42:3c:83:85:72:bf:6c:3e:5a:
33:80:26:1e:33:51:a2:37:dc:27:94:9a:e9:7a:e5:
51:98:e7:49:40:79:4c:21:fd:a9:a4:59:88:7e:98:
3b:dc:55:d4:85:2a:0f:b4:f2:ff:2f:0f:2d:3f:5a:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:1E:8C:56:FF:98:C2:93:47:BF:81:57:AB:43:7E:77:08:CA:0A
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:08:f3:64:44:8e:f7:15:db:b5:15:96:9e:af:df:53:e2:04:
a7:26:42:0c:75:e6:fc:e7:51:1e:62:56:4f:d7:09:87:a5:19:
b0:7b:81:df:62:6d:88:4c:f8:bb:5b:13:e0:ef:59:ac:64:4d:
09:ec:d3:1c:f9:d8:66:bb:8a:86:18:65:48:d1:4a:42:7c:63:
e6:be:05:98:bf:08:62:c3:9c:e6:7e:dc:6b:40:01:38:6b:46:
19:59:6d:08:8a:fc:b4:5a:0e:f3:e5:4b:31:d3:00:35:71:56:
d2:5e:e9:9a:77:e1:09:29:81:e2:ee:ea:c9:6e:b8:b4:76:59:
4f:52:02:01:e6:79:e2:8e:53:30:2f:45:fe:1f:6f:f7:83:51:
47:6f:d1:e8:f6:d3:a6:3f:09:44:40:74:a2:12:d1:b1:a8:48:
c6:d4:24:5a:a5:b6:55:3e:bb:bb:58:93:57:04:2f:df:21:7c:
e5:b1:83:e2:a9:16:9e:be:ec:cd:64:f2:74:bd:ad:e2:be:a3:
9c:26:c9:00:e9:d0:d5:89:d0:f2:e2:0c:ad:18:79:dc:e2:ce:
ca:8d:a6:e2:98:95:36:dd:53:ee:d0:c2:be:ae:53:70:7e:a9:
88:bd:1d:ed:cf:18:7a:71:d8:85:f4:8c:0a:90:52:a6:08:05:
0d:13:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:29:20 2025 by rpki-client