Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: qnKTXkzD9vUufj0CsG+D6e49tDr+P1FzrgyWp+dfU+g=
Subject key identifier: 9C:AC:9A:97:41:21:03:78:34:42:07:8E:A8:C1:8E:F4:5C:45:A9:C7
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 019603094D9636A74884525AE2F130CB04C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 0D2F
Signing time: Fri 04 Apr 2025 23:01:03 +0000
Manifest this update: Fri 04 Apr 2025 23:01:03 +0000
Manifest next update: Sat 05 Apr 2025 23:01:03 +0000
Files and hashes: 1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=)
2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=)
3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: 1h8hnMC+6zR2kKR1ntlXFF5rdwy7SdZSaJlyNRUlw2Y=)
4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:09:4d:96:36:a7:48:84:52:5a:e2:f1:30:cb:04:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Apr 4 23:01:03 2025 GMT
Not After : Apr 5 23:01:03 2025 GMT
Subject: CN=9cac9a97412103783442078ea8c18ef45c45a9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:02:34:54:16:72:23:21:72:e4:3d:50:48:
49:ba:05:e7:d2:d5:a4:3e:61:2e:4a:25:89:28:05:
1f:6d:88:d0:42:c4:27:4a:95:b2:6e:d6:c5:d9:b3:
2c:9f:58:82:d2:b2:bc:fd:e2:bf:7e:9f:6a:d7:1b:
3a:8f:5e:03:17:8a:a2:c4:b5:18:6f:7a:39:82:89:
cf:fe:1b:83:3e:62:f2:fb:7e:21:b1:4c:7b:70:a2:
4d:98:5a:c6:80:81:e1:bb:ad:a4:84:c4:16:db:b9:
2e:f0:77:14:ad:dc:0f:36:df:fb:00:99:1a:35:c8:
30:37:cd:96:03:4c:1e:d6:59:28:5e:3a:c0:d4:5c:
c5:21:43:74:15:6b:75:ae:fa:58:12:6c:a3:b2:81:
59:e5:c7:05:47:d5:a6:17:44:0a:ef:d0:c7:c1:f5:
55:3a:51:ea:6a:bd:31:f2:12:6d:8e:a6:ad:05:f3:
d6:d3:80:f4:18:5f:44:f8:a7:19:33:1d:5a:da:91:
cf:6f:ef:7b:70:7f:d3:e2:1d:49:51:00:92:79:97:
be:cb:9e:15:66:18:25:8c:bb:55:f3:c0:93:28:ae:
e0:d3:15:81:8e:ba:85:cc:38:e8:98:cd:e2:4c:17:
ab:e3:b8:ed:c0:16:fe:18:4f:33:1d:79:6a:92:62:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:9A:97:41:21:03:78:34:42:07:8E:A8:C1:8E:F4:5C:45:A9:C7
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0d:af:ca:9e:c9:c4:ff:aa:78:01:4a:11:ae:25:27:a0:9e:
49:37:de:a9:51:14:7f:1a:df:d4:fa:b7:fe:9b:2b:a4:6e:8f:
77:64:13:5f:63:bf:21:22:b0:d6:b8:26:a4:ff:96:9c:80:b8:
2b:ca:1e:4c:f5:69:2f:bc:88:5c:a6:6e:04:fb:af:de:05:63:
b6:a9:ad:33:6b:73:d3:02:e6:c7:59:76:5d:d4:04:57:61:0c:
ad:00:70:a5:52:d8:38:b8:77:26:63:aa:55:b0:e3:f2:92:37:
df:8b:42:7a:c6:7f:f7:c1:f3:3b:4c:57:e0:ac:0e:90:ad:a6:
5a:74:ff:69:bb:bb:ee:0d:8a:c5:ca:19:e8:c7:a3:44:df:74:
80:0b:93:4a:77:35:93:1a:e0:43:2d:55:2f:0a:54:d6:b2:5e:
9c:06:1a:25:93:81:c7:96:29:71:9a:6f:5b:0a:e6:3b:7a:b4:
0a:82:39:90:a4:3b:13:53:2b:ac:00:35:95:ff:13:9c:51:00:
44:5f:f9:f3:1f:97:f7:4c:cc:4f:63:7f:ef:b9:6e:32:67:15:
36:72:da:54:f9:ca:d7:5f:b4:89:65:63:c0:89:c3:f1:ae:8b:
e1:a8:85:cb:6a:2a:7c:d1:d9:5e:fb:ee:6b:34:5a:e9:57:7c:
1c:2a:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:42 2025 by rpki-client