Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: GCpttL5RsJ6htFCuUrCkb88zimw9ISjvEOe5mzNYaIk=
Subject key identifier: AB:CE:CB:5D:E7:6F:BB:FE:1E:22:74:A3:01:3A:F0:E9:FC:00:4B:F4
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 01958CCE2FDDFE34E391D9DD60A323C94FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 149C
Signing time: Thu 13 Mar 2025 00:01:17 +0000
Manifest this update: Thu 13 Mar 2025 00:01:17 +0000
Manifest next update: Fri 14 Mar 2025 00:01:17 +0000
Files and hashes: 1: UzSEdJBP2Gqr1z-0qx79WTsLauw.roa (hash: vl1ow4mOIeKlrrAdbJAJQJmVxWS6mp39VC/9XaCz00U=)
2: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: /Z+1PmLIGibuvgLcSzj6EodNJzar+TjtAGYuayblluQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:2f:dd:fe:34:e3:91:d9:dd:60:a3:23:c9:4f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Mar 13 00:01:17 2025 GMT
Not After : Mar 14 00:01:17 2025 GMT
Subject: CN=abcecb5de76fbbfe1e2274a3013af0e9fc004bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:b0:e1:a2:0e:f5:4b:c1:8e:23:31:72:ac:
cf:c9:61:ea:bd:aa:f6:e4:7b:4a:10:8b:9c:8d:89:
a9:6f:5c:02:49:04:34:81:6d:d2:b4:69:98:89:af:
bd:2f:4c:4c:a5:bc:15:4b:ac:55:2d:b3:83:d0:01:
34:cb:32:59:35:34:f7:be:19:c5:88:4c:0f:a2:68:
b6:bb:91:0b:58:6c:fd:c1:97:4d:0c:5e:0e:a0:08:
ca:c5:7c:bf:1e:fa:6c:20:e2:81:dc:a5:64:6a:2c:
dc:30:a6:c1:4c:c6:a3:68:e7:49:54:d5:be:9e:f7:
3f:64:4f:75:13:5f:e1:44:3f:88:80:7d:54:89:4f:
0a:bd:6a:8e:4e:99:7f:cf:94:77:a3:70:db:43:1e:
db:dc:52:e6:c4:3c:7d:98:93:16:2d:ec:86:1d:b2:
ca:ce:a9:7a:ed:fc:f6:cb:d6:71:96:51:d3:91:97:
46:ca:e1:93:96:4c:0d:e5:7c:49:27:0e:fd:5a:f1:
64:ec:74:6e:b1:5a:5d:4a:e3:6a:ee:48:b6:ac:a0:
72:3a:cb:21:ed:1c:3d:46:9b:4c:a6:66:3b:91:b8:
13:69:9f:b3:9c:3e:fd:d8:47:38:07:de:8d:51:ec:
59:8c:bb:66:00:ad:b7:ba:f0:5d:4d:1b:72:29:12:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:CB:5D:E7:6F:BB:FE:1E:22:74:A3:01:3A:F0:E9:FC:00:4B:F4
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8f:b2:c0:d0:ab:3e:e4:52:d0:50:55:82:42:9f:15:a7:7a:
dc:ed:f5:47:d4:72:e5:0c:22:ed:04:4d:f0:38:d8:97:91:58:
01:fb:26:eb:ea:32:88:eb:21:97:f0:c7:ba:68:aa:0b:b3:13:
00:a2:e7:21:e2:07:26:3c:4c:da:51:37:a9:96:1b:00:ea:c2:
d1:34:5f:3d:be:dd:5f:48:ec:db:1d:f9:45:c9:ef:a7:9e:a9:
21:ca:87:fb:53:09:aa:34:2c:a1:63:a8:92:b3:5b:22:ff:35:
8b:8b:29:0d:96:35:9a:13:72:e4:b3:e0:e6:8d:b0:0d:a1:55:
d9:76:2d:ff:f9:3b:d1:26:b4:64:45:f6:fa:3d:7d:d6:ef:f9:
00:c0:b5:46:c8:72:7b:50:9f:06:10:e9:18:fd:00:7d:f7:2d:
ab:92:dc:40:22:63:42:af:d1:db:96:dc:68:3f:d6:36:1e:c3:
0b:87:68:93:a6:7a:0b:13:65:ff:09:dc:14:e5:3a:98:41:92:
8e:82:61:64:34:c9:80:64:3b:7c:cd:01:f2:7a:a0:3d:5f:92:
f4:60:84:4c:df:63:81:e1:eb:db:c8:29:38:42:91:f4:ca:cd:
ed:d5:25:f3:f6:f6:27:e1:6a:f4:f9:39:90:c7:ce:5e:e0:2a:
cf:24:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:32 2025 by rpki-client