Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier: U1f2nD2z2rlhmdkXDpxllQQlh/v/qdz5G/+800V3YCY=
Subject key identifier: 74:59:95:29:48:16:13:13:64:8E:8C:7C:E1:96:45:ED:60:43:1E:5A
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 01958B84805AB78B0FE95EE941324B4CFEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number: 1493
Signing time: Wed 12 Mar 2025 18:01:11 +0000
Manifest this update: Wed 12 Mar 2025 18:01:11 +0000
Manifest next update: Thu 13 Mar 2025 18:01:11 +0000
Files and hashes: 1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: NKITDYECk8+Q8TM9oc8d1eWkqhRAub/Jop/fp2QXsIs=)
2: 8foZPawfC4Bge_VpnjQP50GOAg8.roa (hash: GRqVhwrx6ASLBDj77rYjcJvDM0QCQ1bVWMj8DIm3F+M=)
3: Qvc8RSbEXXaKTVJ-2F_YzL6RWqQ.roa (hash: a+7CPhduNeCdLfwErr+aJ4N+Kny/SpDPIbHNdyGUm+I=)
4: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (hash: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:80:5a:b7:8b:0f:e9:5e:e9:41:32:4b:4c:fe:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Mar 12 18:01:11 2025 GMT
Not After : Mar 13 18:01:11 2025 GMT
Subject: CN=7459952948161313648e8c7ce19645ed60431e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:46:56:1f:bc:09:88:74:73:50:03:7b:da:
36:00:be:e9:d6:69:b8:e3:09:b5:e9:32:fa:0b:9a:
fd:42:cf:87:bd:30:18:08:83:8f:f8:0e:bd:2d:58:
bb:f2:b2:db:59:5d:0c:7f:5f:de:88:19:9b:73:98:
eb:98:5b:5c:c4:8f:a6:ef:b8:c9:5a:90:7a:60:f5:
36:70:cc:8c:02:4a:a9:81:0e:3c:fa:dd:e6:b8:6f:
27:36:d6:e4:b1:c1:80:36:bd:12:88:d7:f0:af:b8:
9f:74:44:65:55:c8:b4:40:4d:ca:a2:a1:11:cc:e9:
36:b0:30:e7:24:4d:71:e6:32:78:29:d4:24:ed:79:
3f:0d:31:bc:9e:c6:34:1a:9d:cd:2e:df:13:ff:7b:
fd:e5:13:09:f1:19:f1:fa:e9:8a:18:dd:8b:f3:fc:
37:a1:66:24:9d:76:47:f1:84:7b:98:e5:ca:08:4b:
fc:fe:59:ea:7e:50:a9:d0:75:02:10:d1:bb:d0:2c:
77:c7:4d:73:ac:ab:ee:91:2b:fa:d7:f5:a6:ae:01:
a5:f8:af:63:5a:51:8b:13:7e:96:71:7a:ed:5d:64:
b2:14:2f:44:45:7f:d3:38:a0:e4:d0:e5:09:12:26:
7a:d5:3e:86:32:4b:5b:fe:02:6b:e2:ba:6b:ed:51:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:59:95:29:48:16:13:13:64:8E:8C:7C:E1:96:45:ED:60:43:1E:5A
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:16:92:46:4d:5b:46:0d:4c:8a:f2:5f:79:6e:47:00:be:2a:
b7:6f:fd:88:f6:f2:2c:eb:b9:f1:14:78:66:d6:2d:b0:81:80:
7e:a5:a1:21:d1:98:25:cb:7e:5a:0c:99:36:09:a0:a3:18:ec:
6f:34:2c:44:1f:7b:21:e5:d9:a9:79:2b:16:59:fc:89:46:c3:
88:42:8d:78:39:2d:76:58:ab:3e:ff:d0:b9:55:e1:2d:55:41:
f9:a7:92:e2:6d:90:6f:41:fe:64:7c:73:b8:21:2b:e2:6d:12:
2c:f1:c0:3c:86:c2:bb:1c:c1:92:81:a9:13:3e:f1:fe:32:24:
96:4c:76:3e:59:6c:85:b3:a7:de:a1:79:0d:ef:63:a3:d1:bb:
20:25:73:42:83:11:9d:ee:0f:e2:2b:97:0a:1b:3b:81:7b:b4:
1c:cd:08:a0:0d:cb:de:d6:c6:23:2d:5b:3c:fb:8b:13:24:61:
57:bd:d6:92:1a:be:99:2a:54:50:91:f9:69:75:f2:dd:73:fb:
a1:09:a8:76:c6:b5:c6:cf:41:32:3b:14:d4:0e:56:93:17:9b:
3b:78:e7:c2:61:35:19:f2:cf:e7:05:94:9c:3f:72:94:af:7a:
15:81:2c:ff:7d:9b:e4:92:71:2c:ef:f8:48:a4:18:ec:c0:60:
3c:2c:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:41 2025 by rpki-client