Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: xdXsKMji8OypCeheLWcnlH2YHtAPxyiMHx6r/ld4G7Y=
Subject key identifier: 2C:E9:8D:76:C5:DB:2A:3A:D9:49:19:B1:D3:73:8E:97:87:7E:FC:64
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 01958BF248E23291B66F06F0722BE2CDB12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 0558
Signing time: Wed 12 Mar 2025 20:01:06 +0000
Manifest this update: Wed 12 Mar 2025 20:01:06 +0000
Manifest next update: Thu 13 Mar 2025 20:01:06 +0000
Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: /gZNdDAj7djPkX/6babehc/N94QwHtig/zVJp8MluJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:48:e2:32:91:b6:6f:06:f0:72:2b:e2:cd:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Mar 12 20:01:06 2025 GMT
Not After : Mar 13 20:01:06 2025 GMT
Subject: CN=2ce98d76c5db2a3ad94919b1d3738e97877efc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:52:d9:8f:74:10:e0:d5:ba:cd:42:a5:67:
80:e1:8c:82:0e:14:3f:0c:23:72:1f:e4:db:96:11:
6b:fc:5f:ab:85:ad:42:51:cc:8f:d8:0a:2d:30:cc:
d0:d5:e7:53:d9:87:88:b0:a9:13:08:00:44:a8:7b:
41:3a:98:6b:45:d4:d1:8c:6b:0e:3f:42:74:8a:d8:
00:ba:56:7f:7c:ef:62:c1:10:37:99:65:4d:a3:fc:
a2:08:8c:65:a4:94:a0:51:c6:cf:10:00:d1:2d:d4:
06:50:40:27:52:6b:1b:81:a4:18:ae:50:32:81:10:
c2:74:1b:75:d6:27:99:25:40:4e:ab:c4:d2:0f:98:
f1:fc:71:38:ef:c7:50:8a:9b:c1:61:8a:8d:23:55:
be:60:2b:5f:ef:6b:f2:c0:01:be:1e:d5:0b:0c:62:
12:f6:fa:06:13:18:2b:38:d9:c6:25:fc:60:b2:c5:
ba:ba:11:2b:b0:db:56:5c:07:fd:f3:0c:1b:11:6f:
0a:d5:44:d2:f5:aa:be:ce:92:74:e8:2c:c6:5f:4c:
74:65:fa:bd:1e:0a:5e:b5:31:69:87:39:75:ff:bd:
b8:aa:6a:84:11:66:bd:72:c0:69:c8:56:95:3b:e7:
5f:d0:d6:a9:1d:09:cc:97:33:d5:89:8b:6b:e7:cf:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E9:8D:76:C5:DB:2A:3A:D9:49:19:B1:D3:73:8E:97:87:7E:FC:64
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0b:68:e1:f0:ea:4e:8f:7d:fb:03:9c:f1:ad:d8:0f:40:eb:
ce:c7:0d:f4:fa:6c:e5:80:84:a8:42:23:9b:b4:a8:9e:8d:89:
87:2b:d6:a0:73:25:2d:9f:8c:a4:68:c9:87:6e:ff:14:5c:ee:
14:3c:2d:4a:1c:f6:2a:78:12:22:d2:fe:04:c8:01:4a:9f:29:
8c:53:41:e0:a0:c9:7f:5e:f7:96:b9:d7:8d:bb:92:16:55:e6:
79:5f:09:61:56:67:e4:6a:6e:64:10:54:26:3f:68:92:d0:6c:
80:82:67:ec:0d:a3:11:92:61:9f:92:f0:97:66:9d:ad:ca:38:
ea:d7:cb:ab:38:3c:56:b0:04:4a:f2:b2:a4:27:32:34:26:ea:
aa:91:1a:cf:e0:6c:53:c5:0e:da:37:f8:cc:d9:07:ce:cf:a9:
83:72:97:cf:6e:84:a7:63:11:58:99:68:c1:89:05:94:ef:30:
3d:8b:f2:4f:af:15:f3:bc:50:b7:aa:8f:5d:a2:13:68:87:29:
b0:99:45:05:32:67:7c:a3:65:fe:2f:5d:fe:08:fd:28:d3:b8:
5d:21:28:40:05:d3:3d:86:7d:17:5f:5a:82:9a:f8:57:76:aa:
0a:a7:85:80:1c:5e:bf:9b:8c:d6:fe:b1:3d:35:39:41:83:e6:
69:00:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:12 2025 by rpki-client