Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: m79jw49v16kwCAkVAfF4ffBhWutxscVOY+IIUojfoAo=
Subject key identifier: 1B:5E:6E:76:FF:22:42:95:B4:7E:03:0E:04:38:B2:B7:46:2E:FD:98
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 01958BF24CD5CA1103E196E717B5DCEAE15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0CC4
Signing time: Wed 12 Mar 2025 20:01:07 +0000
Manifest this update: Wed 12 Mar 2025 20:01:07 +0000
Manifest next update: Thu 13 Mar 2025 20:01:07 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: ztVcxaUAr05AATRbM9wBzXULiSlFhF+ycSMBJgkAGBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:4c:d5:ca:11:03:e1:96:e7:17:b5:dc:ea:e1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Mar 12 20:01:07 2025 GMT
Not After : Mar 13 20:01:07 2025 GMT
Subject: CN=1b5e6e76ff224295b47e030e0438b2b7462efd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:d2:15:b6:de:92:9d:fc:6e:2c:59:78:17:
67:e4:c3:d8:c4:33:23:c7:87:6b:2e:c0:87:ae:00:
47:65:77:81:d9:37:22:0c:f2:39:f0:3a:c7:49:df:
2f:17:b0:d5:49:af:dd:2e:24:2e:22:ee:ac:b8:bb:
ff:5b:37:78:65:e1:a9:a1:22:73:13:3c:15:59:69:
4a:06:38:50:9c:0f:98:66:5d:97:75:84:eb:ff:b3:
4a:56:9c:6f:bd:28:9a:64:1f:36:5e:49:65:f9:ab:
8b:34:a9:32:73:21:09:3d:11:21:26:e8:db:fa:49:
43:0b:16:15:6e:06:23:a7:18:d8:47:6d:54:2f:cb:
f7:46:3e:41:25:e9:4a:93:c4:ad:5e:31:10:10:fe:
fa:fa:04:05:83:79:67:d7:05:d8:19:06:bb:06:d8:
64:3f:8d:18:0b:d1:f4:e7:f2:f6:16:85:7c:80:b3:
0b:dc:e3:32:48:99:a5:49:4c:9f:87:a7:0c:92:32:
62:75:6b:13:d9:c5:62:d7:a2:74:15:9f:ed:ed:2d:
39:35:6c:58:29:b1:9d:37:ad:f3:12:b5:93:aa:34:
a0:3a:5a:82:75:7d:63:e5:14:12:4f:ff:e1:13:cc:
48:a4:54:6c:cb:06:71:07:c1:93:d2:8d:ff:1a:6f:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5E:6E:76:FF:22:42:95:B4:7E:03:0E:04:38:B2:B7:46:2E:FD:98
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:99:6d:4d:21:bf:41:bf:56:28:83:b8:d2:2e:bd:8e:7c:6b:
58:68:32:a2:75:73:c2:09:ef:30:24:47:e5:00:29:d2:8b:a5:
f1:3e:a1:b6:20:7f:fe:ef:b4:45:a6:c8:da:2d:14:95:e3:e4:
1e:0c:52:f6:95:24:81:ba:9c:58:ce:57:c9:ce:11:77:3c:cf:
2a:71:2f:b0:40:4b:89:03:e5:27:4b:6c:de:9f:81:04:9e:5c:
c2:d4:be:cf:e6:96:0d:fc:b3:d1:c0:9b:91:b2:76:97:56:70:
e9:a5:a6:79:11:5d:f0:72:80:db:2d:e7:e3:40:c0:5c:6d:ae:
23:b0:1e:ca:53:aa:24:27:b7:3e:21:21:2f:be:58:9f:c8:8f:
4a:2a:1a:49:a4:4e:6f:94:fb:43:2b:a1:c4:ae:3b:6c:78:71:
c2:55:50:f9:3c:23:e4:b6:1f:8f:7c:c9:67:d9:4b:0d:40:f5:
83:6a:7f:73:7e:73:87:57:b3:eb:a3:4e:39:2e:7b:10:69:24:
9c:48:51:b5:32:c4:30:24:92:9f:7b:b0:e4:59:74:af:ab:8c:
76:2e:84:1f:da:1f:de:79:5f:08:f9:e7:38:47:32:5e:5c:dd:
29:75:6a:e6:b2:59:9e:8c:1c:df:ff:ff:99:3d:82:34:5b:cb:
3f:aa:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:03 2025 by rpki-client