Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: O+B0dEXMdO3KB6HMTl+Q5BzzyB+99lfgZVboDmGD3hs=
Subject key identifier: 1B:F1:A8:2E:8A:E1:86:C2:CB:E0:9F:BD:4A:03:3D:AA:0C:4C:9B:F8
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 01964AB3C672E45B939F295E383557B96EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 21:00:17 +0000
Manifest this update: Fri 18 Apr 2025 21:00:17 +0000
Manifest next update: Sat 19 Apr 2025 21:00:17 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: FZXQAhzDxVbvyJPuASWBnN1c4IUgiydSl/05oiSYffo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:c6:72:e4:5b:93:9f:29:5e:38:35:57:b9:6e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Apr 18 21:00:17 2025 GMT
Not After : Apr 19 21:00:17 2025 GMT
Subject: CN=1bf1a82e8ae186c2cbe09fbd4a033daa0c4c9bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:0b:97:ba:bd:95:6c:51:61:a1:a2:2a:13:
27:ab:af:05:e1:85:b3:53:1e:18:3c:c9:6d:0f:d4:
7a:62:5d:1e:46:c8:e0:e6:1b:2a:9f:7e:ae:8c:20:
9e:49:15:fd:23:a8:66:e8:09:5e:42:9d:2a:3b:03:
e5:25:d8:26:f4:b7:ca:c8:6d:61:b8:61:c4:ac:73:
3e:85:a8:f4:42:14:0b:6a:d1:58:7d:88:ee:59:e4:
d2:7d:c3:8a:a9:bd:8c:e5:a9:3f:cf:f2:ee:bc:a2:
35:a1:3d:f1:5f:cd:19:aa:16:14:ca:47:40:d4:ab:
27:57:37:e1:09:21:b5:2a:2a:94:67:46:39:1e:08:
82:b1:dd:c2:db:86:15:a7:ee:f5:65:d3:63:ec:9f:
5e:a6:cf:d9:8d:f2:41:61:39:56:21:73:c1:a9:b2:
b1:33:20:3f:39:47:1d:a3:99:65:dd:ba:b9:90:d2:
8b:73:aa:9b:20:9d:0f:0f:59:82:a9:3b:65:7f:68:
30:0c:c2:bf:bf:34:18:24:f0:8b:4a:b2:9d:af:62:
44:24:08:fd:35:5b:66:32:ec:dc:91:db:20:4b:e2:
04:67:92:b5:21:d2:be:9a:81:0f:df:07:52:ec:11:
61:70:cb:18:8d:d3:e7:cc:cb:cf:9f:e5:22:1b:dd:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:A8:2E:8A:E1:86:C2:CB:E0:9F:BD:4A:03:3D:AA:0C:4C:9B:F8
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:26:75:5d:d1:41:ba:e9:c4:f5:47:e4:ff:ee:ca:dc:0d:8c:
50:a2:d9:3b:56:9b:cf:df:24:d4:73:40:15:45:2e:66:b5:37:
bb:ba:53:bb:54:1d:ab:e2:18:ca:b6:86:7f:f4:9a:92:0e:65:
61:0d:3e:0b:0b:9e:de:82:e2:3d:fc:ef:bc:f5:bd:60:45:37:
df:14:bf:3b:d4:64:f5:52:fe:c5:85:32:bd:7f:de:1a:ef:4d:
ca:7d:68:c5:a0:16:14:f1:f4:a4:28:f4:b6:41:fe:a9:d0:d0:
7c:47:01:37:49:f5:2d:54:24:42:f7:2f:1a:37:74:56:ee:30:
c3:b2:3b:db:ab:32:5c:a1:bb:6c:10:13:04:bd:8c:81:08:69:
e7:37:9e:60:64:f3:16:b9:2a:7b:f2:29:48:70:e4:d2:f2:6f:
dc:b7:21:83:8b:f4:13:9c:e9:1f:5d:ee:f3:78:86:c0:2a:81:
2e:1a:33:39:66:ab:f9:1e:e9:03:3b:e7:2d:3a:d6:bd:03:a0:
9b:ec:f9:4a:dc:af:99:e3:47:cb:9b:e1:c2:36:68:5d:5e:2f:
1f:03:a5:40:3d:45:1a:3c:fc:b9:61:ab:f9:b4:28:d0:fb:fe:
71:dd:73:06:34:41:ea:08:38:73:58:d0:10:1c:92:3a:c8:22:
1d:52:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:42 2025 by rpki-client