Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: l/diX3vfk7pQifRv9zoD3xYHSfEiiLvcMqMzqi8PPTk=
Subject key identifier: AD:AC:2A:87:C5:6B:FE:53:9F:BA:78:75:4E:6C:8D:78:01:F9:57:CA
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 01968390A15A0275BF9A46CD382CA1C59B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 02DE
Signing time: Tue 29 Apr 2025 22:00:15 +0000
Manifest this update: Tue 29 Apr 2025 22:00:15 +0000
Manifest next update: Wed 30 Apr 2025 22:00:15 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: +/XfBF3drA0W/eMYCwt7zcuerhYoK5C9gVVYHZD9b+s=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:a1:5a:02:75:bf:9a:46:cd:38:2c:a1:c5:9b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Apr 29 22:00:15 2025 GMT
Not After : Apr 30 22:00:15 2025 GMT
Subject: CN=adac2a87c56bfe539fba78754e6c8d7801f957ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:d9:96:af:31:a4:59:7f:c0:a3:07:ff:61:
cf:d3:9c:d1:92:26:c7:99:11:8f:57:82:58:10:25:
fe:18:eb:5f:41:bb:49:25:8e:9b:45:d4:cb:e3:f0:
8d:c1:f0:f4:ea:c2:b3:53:d4:df:58:db:dd:90:30:
d4:31:0c:95:4e:74:60:72:1a:d4:37:28:62:bd:6c:
b6:e4:4d:55:3a:79:36:28:63:e0:a3:71:b6:40:42:
7c:d7:ef:eb:4e:bd:d8:31:67:c4:be:2e:23:6e:38:
5f:a0:cd:4a:90:4a:d9:a3:99:c8:2c:60:e3:21:41:
72:68:2b:9e:1f:42:90:ae:a4:de:22:97:8f:ba:e0:
ee:74:36:d5:7c:41:ba:c3:67:c3:6b:dd:c1:31:78:
2a:37:59:b4:2b:02:47:58:34:76:cd:ea:6f:82:f0:
ed:db:b0:55:a7:25:7f:62:c8:bc:85:3d:b1:e5:51:
fa:17:0f:59:6b:99:a4:42:90:69:d2:16:2e:7a:1e:
f9:b7:67:18:74:5f:f8:45:93:1b:27:ae:c1:da:5f:
e3:43:69:a2:c9:1c:8e:3d:0c:89:dc:fd:3f:49:67:
e6:a0:02:2c:8f:1b:91:73:8e:46:f7:0f:18:54:bb:
cb:95:57:fc:0d:5f:53:0e:06:a4:a4:10:14:39:c7:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:2A:87:C5:6B:FE:53:9F:BA:78:75:4E:6C:8D:78:01:F9:57:CA
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6d:a0:03:a4:50:c8:82:94:65:c2:b6:54:25:10:70:14:9d:
ac:c1:4e:b5:cd:3e:2c:82:ac:1b:c2:22:07:b8:a0:d7:5f:44:
ce:ae:c2:18:7b:14:90:ed:b0:71:30:04:f4:8c:94:32:7c:e4:
f5:85:54:12:e1:66:b4:b4:35:d1:d0:dd:b1:d6:02:10:91:8f:
ae:f9:49:70:61:a2:61:07:ed:be:da:03:07:54:5c:e7:5c:06:
bb:b3:7b:22:c4:a5:fd:06:5b:17:de:45:f7:8d:44:f0:04:64:
0f:c1:30:83:08:ca:72:f8:02:a7:e4:fc:b7:12:93:0a:ce:b4:
46:fa:bf:48:5a:d1:61:d7:9f:6d:45:87:66:43:9e:22:90:99:
5a:a5:c9:c1:41:0b:e2:41:e4:79:a9:90:6b:bf:ad:ae:8d:85:
dd:8f:a4:ef:61:80:fd:04:14:b5:e3:98:68:12:cb:21:1c:7a:
d3:f5:e1:3d:f7:ab:b8:9f:d1:a9:2a:9b:e3:c7:07:91:f7:1b:
ce:e6:c6:68:d9:9a:16:69:fc:80:3e:e2:49:f1:c3:8f:db:ee:
8f:7f:d2:b1:a1:84:fa:8b:48:74:c2:88:ea:0f:91:6d:77:52:
f4:a5:f6:7e:10:8d:de:8c:a9:55:35:e1:5d:18:26:73:23:2c:
b5:8e:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:12:31 2025 by rpki-client