Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: XIjlLw2Ylk0nL2aLC/+/iZPkZxGzqqs/LdVlurk/aag=
Subject key identifier: 66:D7:5F:59:DA:AE:F1:5B:42:53:7D:E5:AA:10:8C:05:46:46:E2:F9
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 01958B4DFA581F50D90D3EE58FA9E172CB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 11DE
Signing time: Wed 12 Mar 2025 17:01:38 +0000
Manifest this update: Wed 12 Mar 2025 17:01:38 +0000
Manifest next update: Thu 13 Mar 2025 17:01:38 +0000
Files and hashes: 1: TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa (hash: Nd8DGSNjI4U6VllZfkdb3mT7nzYndNyfiOfx/EMJxwE=)
2: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: GIPiydGYCRVFiRZxoP16RgZ/PaevNzkEuj1wcu1iuYo=)
4: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:fa:58:1f:50:d9:0d:3e:e5:8f:a9:e1:72:cb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Mar 12 17:01:38 2025 GMT
Not After : Mar 13 17:01:38 2025 GMT
Subject: CN=66d75f59daaef15b42537de5aa108c054646e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:aa:1b:b8:49:28:a1:fe:fc:e0:51:72:0a:
68:0c:b9:55:fb:bf:a3:12:4a:32:2f:b1:87:b2:b4:
de:f4:3e:95:a8:54:7b:a3:5a:ae:cc:a8:95:f9:84:
51:f8:c6:62:0e:03:05:80:00:9f:b1:26:e9:98:1d:
04:a1:8c:d8:85:39:35:d1:ca:5b:e0:fa:be:2a:31:
41:4f:54:02:89:44:20:02:4c:0f:39:06:bc:bc:12:
9d:3d:2d:2d:79:91:cd:f3:00:91:59:a6:dd:d7:82:
a5:33:57:5b:e3:41:7b:c8:72:ab:1c:96:c1:9d:81:
26:9d:ed:21:fe:aa:35:ec:fa:fb:00:9a:65:d5:dd:
29:77:d1:ed:38:25:a4:43:8a:5f:8a:27:16:da:6e:
af:6a:1b:ce:cd:41:d7:24:74:ca:28:e0:da:77:2c:
e6:6d:de:b3:d0:4f:6f:a7:5c:4b:80:ea:42:72:da:
ff:2b:b7:5b:47:23:d0:7d:d5:da:45:4c:a9:e5:9a:
6d:55:57:fa:08:94:f1:e6:ee:62:d1:c6:2b:cf:db:
ca:e2:71:8c:ee:1b:25:0b:96:04:49:1b:4b:9d:65:
b5:ef:6f:63:0b:fa:9c:88:ff:bf:ea:cd:e9:cc:53:
08:d2:78:88:40:ba:66:5f:a9:04:34:3c:9d:22:48:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D7:5F:59:DA:AE:F1:5B:42:53:7D:E5:AA:10:8C:05:46:46:E2:F9
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:42:46:73:59:ba:74:7d:a6:9d:cf:5b:7d:89:d9:87:ef:e9:
9d:ee:ac:55:57:fe:fe:b2:3b:ae:b9:4e:58:9a:30:dc:be:ec:
f1:11:55:73:eb:36:42:54:5d:fd:da:cd:ad:e5:8e:cf:d3:b1:
11:0f:35:d0:e1:d6:25:e0:c3:00:b1:62:85:9a:5e:6a:d9:de:
af:37:5c:7f:7a:67:69:54:58:db:d2:55:a3:a1:83:a2:93:87:
e4:21:55:83:1b:e2:4a:01:a4:29:2c:4f:8e:57:93:1e:99:c7:
78:8d:77:d4:06:c8:49:59:5e:e5:cc:2d:13:bb:10:ef:19:ab:
a5:42:68:7a:f6:80:2e:f8:cd:68:d4:95:78:1a:3f:58:1f:53:
47:3e:ab:1a:f1:2c:5a:06:59:61:84:9d:4f:4b:16:27:9b:a8:
a9:7b:27:1f:a5:94:48:0b:33:be:1e:11:93:3e:c5:db:1b:15:
97:17:c7:3e:ac:4b:ec:5d:2c:60:45:9c:df:08:1a:3c:a0:3b:
bd:88:d7:79:ff:e7:83:33:36:e7:a9:ab:14:3d:ed:33:a8:06:
fd:11:16:8e:f9:67:88:c1:3e:16:24:61:93:19:c5:16:6a:4e:
40:17:87:a6:66:41:c9:04:0d:8c:da:2c:bf:c5:0e:fd:2b:cd:
f2:1f:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:59 2025 by rpki-client