Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: w1aZufCBKRUBTIjgfnDMJglPMJmWsd0CUFkEYoPuM+k=
Subject key identifier: BF:B8:74:1D:E9:7C:A1:50:1D:FD:BF:8A:89:57:53:82:93:16:D5:2A
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 019694848AD8620A527099F303E11726EF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 02B0
Signing time: Sat 03 May 2025 05:00:36 +0000
Manifest this update: Sat 03 May 2025 05:00:36 +0000
Manifest next update: Sun 04 May 2025 05:00:36 +0000
Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: yjhS7rwkxVsxSKxjpIYQOo1JM9PClYXlr3VJaTHOH5o=)
3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:84:8a:d8:62:0a:52:70:99:f3:03:e1:17:26:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: May 3 05:00:36 2025 GMT
Not After : May 4 05:00:36 2025 GMT
Subject: CN=bfb8741de97ca1501dfdbf8a895753829316d52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:96:de:50:51:c5:7e:4b:5c:a6:61:7a:f8:
f7:07:02:19:56:82:66:26:a0:e3:fc:5f:78:b9:b7:
fa:69:2d:b1:7f:69:e8:67:01:36:2d:03:39:3c:80:
01:37:7c:96:04:eb:30:f1:5d:36:1e:24:70:04:01:
da:30:f1:57:04:24:7b:15:33:a6:28:28:0a:50:04:
5b:8b:8e:de:84:94:11:fc:d2:a5:1a:79:55:cf:27:
5b:17:85:e9:9b:82:4d:2f:1e:14:1e:87:0b:cf:2b:
1d:a7:3a:4c:ea:82:96:33:02:fb:2c:9e:fd:98:c4:
7e:1a:0e:e9:a0:08:50:5d:f4:53:e2:7d:0e:10:c8:
39:27:66:35:41:a0:15:2f:80:6a:96:5e:81:25:d9:
2c:e7:1b:3d:84:5c:0c:bc:bd:9f:be:98:f6:b5:d6:
99:96:19:ac:90:0e:ed:3f:3e:cc:b5:d7:be:01:49:
6e:c8:70:dc:6f:64:ac:b3:3f:98:b9:59:b5:fb:6c:
ac:76:6e:31:30:f5:39:b2:fa:66:52:32:51:fb:b9:
67:4a:d5:5f:0a:a0:b0:91:b9:6f:11:a4:39:53:de:
20:ca:84:e7:51:4c:d0:f6:a4:df:7c:20:bb:fb:77:
0a:2f:58:b1:49:a2:85:fe:a6:6b:ce:bd:dd:1d:35:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:74:1D:E9:7C:A1:50:1D:FD:BF:8A:89:57:53:82:93:16:D5:2A
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b3:83:74:c0:6f:7c:b8:48:85:f1:1c:7f:4f:a3:0a:74:52:
cd:14:1a:8d:22:ff:52:31:dc:06:0f:2e:0b:53:a7:ce:33:e3:
7f:64:d3:a6:fa:af:10:a1:78:9b:a9:57:c9:0e:73:e5:bc:af:
65:4e:76:5c:43:5d:b0:a0:92:ae:4e:16:44:a2:87:a1:16:8c:
2f:36:d7:ad:5a:98:f6:16:97:e4:d4:70:df:75:54:3c:7d:2e:
c6:f0:c8:fe:cd:8a:a1:3b:a4:ab:ec:6c:95:17:f0:1f:52:7e:
8f:33:69:6e:1f:f7:d5:f8:f2:08:67:5d:f2:ab:3c:46:04:23:
e3:e9:6b:cf:6b:44:a9:ee:d3:6a:d4:f3:44:8f:b8:c4:a3:1d:
6a:bb:f1:c9:d1:4b:ae:67:bc:29:48:44:26:10:14:f7:8d:6c:
e2:44:1c:08:81:6b:58:6a:0d:12:8c:59:30:b8:3b:95:cd:95:
02:83:cb:13:98:5e:6b:4c:76:02:d8:3b:4b:96:e4:71:53:cd:
e6:d8:ce:8c:65:24:c3:78:ee:e8:98:2e:ec:39:fd:62:f3:5e:
14:81:4b:41:36:68:5b:3f:87:bf:62:e5:f9:49:c9:8c:58:0d:
54:c2:ea:3a:c0:85:97:16:21:dc:ab:8d:97:a6:51:cf:93:58:
00:02:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:30:49 2025 by rpki-client