Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: ytRxPh/kXnr4j0AoyDU+WDkDmJW0rC7NDNyAwUbiWz0=
Subject key identifier: BF:1D:48:29:28:9F:0F:19:E8:B5:E5:EC:1D:ED:E4:F6:73:30:AA:F0
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 019636BF4B77184BD303922E48C7BAE6D609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 096F
Signing time: Tue 15 Apr 2025 00:00:28 +0000
Manifest this update: Tue 15 Apr 2025 00:00:28 +0000
Manifest next update: Wed 16 Apr 2025 00:00:28 +0000
Files and hashes: 1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=)
2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: 1qbHJqMEZQHhUd1m70UGr1COMgzh+4YjzHCgIMLPsdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:4b:77:18:4b:d3:03:92:2e:48:c7:ba:e6:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Apr 15 00:00:28 2025 GMT
Not After : Apr 16 00:00:28 2025 GMT
Subject: CN=bf1d4829289f0f19e8b5e5ec1dede4f67330aaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:54:29:e0:fd:6a:48:a8:00:23:d7:02:59:
0c:32:9c:f2:35:28:20:ca:d6:68:29:a2:9f:65:e5:
16:8a:e7:d4:d5:2f:2c:36:8e:d8:7f:66:fe:bc:f7:
96:4e:29:e5:68:22:b7:4b:60:9d:a3:22:c6:77:26:
d3:af:64:d5:d3:08:36:ec:04:d9:9e:f9:c5:09:f0:
8e:f1:b3:2d:5d:d7:32:28:3b:8a:fa:96:fa:0b:8e:
8f:4b:3c:a1:4f:13:60:53:99:97:4e:3f:18:2a:7e:
b2:0b:2c:23:ca:df:34:4a:b9:61:3c:3c:13:5c:b8:
79:e3:9d:e1:16:29:73:04:78:37:af:21:74:91:b2:
9c:99:18:58:44:19:52:96:06:7a:cf:dc:95:c1:fe:
43:6d:a3:70:dd:ae:57:46:51:29:a2:fe:93:b2:67:
2b:f7:cb:7b:7c:5c:04:b8:7b:b9:e5:1d:a5:65:52:
b8:ed:e7:0f:e8:79:96:6c:19:25:13:ed:db:47:12:
83:d5:3a:0f:d3:d4:87:e3:7c:03:7e:cf:25:6a:94:
fd:f6:06:81:ff:76:7b:a3:75:39:ee:be:c1:c2:bc:
6f:3d:b6:d5:cc:9b:4c:4d:c1:55:bc:46:19:c2:5c:
2d:7e:be:e9:36:7e:65:1a:7c:d6:de:3a:58:5c:1c:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:48:29:28:9F:0F:19:E8:B5:E5:EC:1D:ED:E4:F6:73:30:AA:F0
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b3:09:34:54:e0:7d:ba:4f:0d:b5:74:40:ff:00:07:8a:91:
1e:53:34:7c:ba:c1:cb:78:81:1e:b2:77:c0:f8:01:cd:6d:63:
2d:72:02:35:01:0b:c5:92:18:ca:f2:3e:2b:58:0c:3c:52:01:
65:fd:33:b9:a3:58:64:91:ea:2f:20:14:e8:47:89:11:60:a3:
6c:ad:0a:e1:16:7e:4b:62:20:e2:6e:c3:6b:a4:7b:a5:7a:c7:
68:74:10:76:c4:6a:1b:db:29:e3:08:46:6d:c8:7e:6b:d1:8f:
95:ab:e3:53:53:fc:91:23:44:6b:d4:70:43:30:08:dc:e0:82:
61:4e:de:da:49:71:77:9d:7b:f3:5c:7d:e1:81:97:95:b3:71:
fc:bb:14:3b:77:88:76:c0:ff:88:0f:e1:df:47:18:c0:3a:4d:
e2:02:5d:9f:a9:55:ab:86:f9:bb:ee:93:16:6c:b7:16:7a:fa:
5f:9c:07:fb:d2:dc:0e:f0:9d:c0:2b:7e:ff:6e:f5:86:c1:f7:
b1:d5:9a:35:f5:3f:7d:18:09:37:cc:17:90:39:8e:a2:cc:b0:
99:d7:41:74:dd:69:c1:7b:be:c3:6e:64:37:c8:8a:16:3b:69:
e3:02:b9:73:1d:ae:23:02:55:2f:86:73:36:f1:59:e7:59:22:
0c:7c:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:49 2025 by rpki-client