Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: 57Pt9vwvEBiUl+SIe5WhaJmeKXfRy7eDVneOu33GpTk=
Subject key identifier: E5:BD:C7:A8:0E:FA:68:DC:7F:5D:DF:7B:CC:08:E0:68:AF:29:34:3B
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019746302F0A6253BCA8E2534E1653720596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 14D3
Signing time: Fri 06 Jun 2025 17:00:52 +0000
Manifest this update: Fri 06 Jun 2025 17:00:52 +0000
Manifest next update: Sat 07 Jun 2025 17:00:52 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: yJHTB/D6zJzaZp/9M6i7GbdVhQwcOODZLKpEji68MKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:2f:0a:62:53:bc:a8:e2:53:4e:16:53:72:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Jun 6 17:00:52 2025 GMT
Not After : Jun 7 17:00:52 2025 GMT
Subject: CN=e5bdc7a80efa68dc7f5ddf7bcc08e068af29343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6e:b5:dc:d3:fc:93:6f:e4:c1:3d:00:ca:45:
fe:d8:14:09:2a:3f:3f:d6:07:90:01:58:c3:7a:39:
77:45:f4:15:1f:df:20:e3:b4:02:d9:f3:44:f5:64:
5e:2f:82:ac:6a:7c:4e:11:37:69:20:c8:0f:3c:87:
d2:b2:eb:98:d1:25:9a:71:ac:a5:f0:06:9a:ab:29:
81:21:a2:e6:fe:75:e2:a5:61:63:c4:51:e7:a0:1b:
c5:3a:ec:95:f3:42:22:05:23:b8:b9:aa:12:52:ff:
7b:80:a7:d5:69:da:1c:bb:ea:6f:b8:3e:95:49:29:
ea:d3:96:65:42:92:b8:bc:34:57:8c:c2:8d:55:86:
fe:82:96:a7:a7:a5:5f:52:17:45:39:45:12:7e:60:
b5:5b:5e:80:05:19:96:86:5f:0f:a0:39:d1:19:aa:
9c:6b:3d:f4:49:5c:a7:7f:95:1e:2f:27:ca:12:6d:
b5:d7:9c:af:74:4d:40:2e:7b:1c:da:60:08:3e:91:
61:c6:92:4c:49:cd:c3:79:15:66:95:10:ea:39:e8:
98:df:71:a2:21:33:ec:b5:94:52:45:f4:c9:eb:5a:
e4:40:10:cd:7f:59:6e:f6:40:8e:d3:31:e2:71:e3:
50:de:a9:4d:64:93:01:28:de:3b:12:61:aa:12:86:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:C7:A8:0E:FA:68:DC:7F:5D:DF:7B:CC:08:E0:68:AF:29:34:3B
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:75:ce:5b:8a:d2:b4:d7:c2:9d:d8:08:4d:42:78:d6:bc:
6d:bf:ae:93:50:0c:7c:db:37:6f:27:68:17:57:02:2c:e7:29:
d6:19:4f:88:79:d8:86:2c:ea:c9:23:50:a7:eb:05:f9:d8:65:
81:3f:0a:de:8a:db:2e:3a:ec:9b:96:61:55:58:ca:10:1b:68:
1a:10:e0:3a:5d:de:b3:60:3a:a8:ee:8f:c5:92:bd:7e:f5:6a:
78:8c:7b:19:7f:55:75:12:80:cd:17:08:8d:db:97:b3:fd:2c:
72:56:cb:90:bd:3f:d4:e0:25:bc:96:82:33:c0:d0:a0:00:b5:
93:1c:33:3c:0e:5d:cf:69:17:f7:06:c7:7b:24:fb:71:29:b4:
54:44:c6:a0:09:49:0e:ac:6e:2f:aa:97:99:d2:3d:92:9d:2d:
6f:c9:f1:86:64:16:93:13:ce:22:7a:d0:c1:b8:c5:9e:9c:18:
26:b4:7e:5d:4b:e0:b9:6f:79:86:3a:ac:c3:d2:2a:d8:40:58:
84:ce:14:59:6a:bf:29:5b:22:61:00:a8:0d:ab:f4:1f:83:6d:
ba:eb:7e:b4:1d:50:3c:82:ab:08:53:5d:75:9e:25:d4:99:8f:
ee:f2:37:36:22:18:ce:42:87:d4:39:61:87:e8:8f:9d:0c:a6:
ef:15:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:29 2025 by rpki-client