Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: i+Mx8/0hfEER8Gqo7DfNaH6q2EN4Obz2+Tqo7opcU0s=
Subject key identifier: 40:73:79:58:07:77:B2:6C:BD:39:E7:39:24:0D:D7:7F:EF:3B:19:D0
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 01964B223B840F40CF5B8F5CE8AEC922EB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 23:00:56 +0000
Manifest this update: Fri 18 Apr 2025 23:00:56 +0000
Manifest next update: Sat 19 Apr 2025 23:00:56 +0000
Files and hashes: 1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: 8nkS29KKz2J0BLHkVxyqGI6EoAE1ZOYiFfHA8zY/MwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:3b:84:0f:40:cf:5b:8f:5c:e8:ae:c9:22:eb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Apr 18 23:00:56 2025 GMT
Not After : Apr 19 23:00:56 2025 GMT
Subject: CN=407379580777b26cbd39e739240dd77fef3b19d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:78:ec:80:b2:5d:a6:dc:4f:30:3b:ec:35:
24:d8:9b:24:b9:f7:a1:50:fe:24:d9:b7:ee:3c:0d:
85:03:8f:1c:8a:6d:88:7f:9c:6a:cb:3e:42:4c:0f:
cd:6b:16:d3:c7:8b:99:7d:c5:e2:96:21:ca:e7:1c:
71:ff:f7:f9:d7:63:5e:0d:a3:95:94:38:de:40:05:
eb:19:94:0b:9f:d0:5a:ac:4c:8d:2c:20:46:6b:a6:
e8:9b:ad:42:96:2a:aa:d0:31:b2:23:1c:46:17:49:
d6:ac:d8:2c:f4:49:ab:a4:2e:4f:95:cf:af:05:05:
9d:a0:b1:e2:48:db:07:a8:99:04:30:a0:89:05:56:
6e:b7:fe:2a:7e:74:0a:a0:5d:f5:97:80:1e:df:5b:
63:cf:30:2b:e0:57:91:17:de:fc:df:38:7e:e6:71:
23:8c:33:c7:ff:94:b2:bd:0e:06:78:7b:d6:49:24:
7d:63:61:1e:c4:d4:32:e2:7c:8a:5f:25:6f:1e:20:
29:ca:e2:96:27:cf:19:cd:1f:67:1e:c3:26:93:2d:
12:be:58:99:ea:01:64:2c:14:bf:39:cb:d7:3e:2a:
5e:0c:5f:cc:55:44:3c:6b:ef:d9:97:73:63:9d:74:
1b:b4:33:3a:3b:4d:03:0e:02:01:95:46:91:53:74:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:73:79:58:07:77:B2:6C:BD:39:E7:39:24:0D:D7:7F:EF:3B:19:D0
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:86:da:84:52:2c:63:0f:7e:50:94:ab:5e:9d:0a:3a:d9:
3b:61:e2:17:6a:3f:8b:73:fa:38:70:89:77:9b:ad:48:62:58:
35:ff:80:60:3f:14:11:6a:4c:54:79:c8:ee:20:e0:39:c2:6e:
d8:0a:b7:c4:70:2f:c9:2e:d7:56:a3:66:f6:fb:c7:af:58:d5:
66:bc:7f:42:e4:85:9a:c2:10:e6:45:8a:cb:10:2a:a6:71:0d:
33:b3:af:7d:e0:af:e4:1b:04:f2:4c:da:a4:67:ca:22:6c:18:
48:32:1d:a7:10:42:31:3a:ea:d8:02:d7:c1:88:ae:50:38:c9:
f2:8b:e8:e0:c3:fa:0f:e8:94:d2:94:2f:37:98:09:13:c5:11:
36:eb:1c:77:3b:c2:f5:c8:9d:eb:36:36:e9:55:37:b7:45:cd:
d4:a0:ba:ab:cb:81:32:c8:93:e4:f6:12:df:b9:95:ee:b3:74:
c2:b5:29:33:fa:cc:7f:f1:9d:ca:98:a6:db:87:4a:93:f1:db:
60:ca:08:19:0f:f2:da:2e:c9:99:8c:31:1e:ae:73:e7:2d:ef:
57:5a:49:b5:dd:80:b3:5c:7e:9d:83:c4:94:59:e0:23:fc:d4:
24:98:b2:1a:08:33:7a:6b:ad:1b:78:53:4d:19:43:23:45:3b:
53:00:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:52:46 2025 by rpki-client