Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: fKFmaduJyZJArdR2IUWJkJxDqz/di0FWkvGxKeqfzaU=
Subject key identifier: 63:92:6D:61:43:06:16:22:6B:E1:01:67:87:7F:25:5F:D2:C0:17:80
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 01968CCB006913226EBFA755F9B5575C736F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 016E
Signing time: Thu 01 May 2025 17:00:36 +0000
Manifest this update: Thu 01 May 2025 17:00:36 +0000
Manifest next update: Fri 02 May 2025 17:00:36 +0000
Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: RojMJ2Yp9krSzSbkTSJ96vhjke61/skKhYRz8IxRWus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:cb:00:69:13:22:6e:bf:a7:55:f9:b5:57:5c:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: May 1 17:00:36 2025 GMT
Not After : May 2 17:00:36 2025 GMT
Subject: CN=63926d61430616226be10167877f255fd2c01780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:65:75:4e:d9:e1:6d:f1:82:66:e9:08:04:
dd:e4:7e:3e:46:7b:95:45:02:1f:c3:93:3f:a1:e1:
1f:ef:d6:e6:dc:23:44:c7:06:77:a9:f0:0e:30:7f:
dd:40:28:26:f8:fb:10:7e:53:7f:c6:a7:2a:5c:bb:
b1:25:39:75:e2:dc:e7:e5:ba:cb:48:f0:33:6b:3b:
f9:7a:ca:79:0f:60:a2:07:23:e0:24:67:58:6c:05:
3d:f1:7e:9b:f3:e1:0e:0a:61:cf:cf:b3:5f:99:21:
d2:32:5e:e5:8f:a2:51:1c:e6:62:65:c8:ad:ec:3f:
82:52:76:ab:93:2c:94:31:4d:f3:59:21:ec:91:fc:
2e:d4:7d:54:ab:ff:bc:11:25:1f:5f:b4:f5:67:35:
71:2c:99:fd:dc:c3:ba:c4:d7:5a:b4:23:a7:cb:05:
0a:0f:f3:38:dd:44:6e:1a:f2:e7:22:16:7b:6c:3d:
8c:d8:f6:18:ac:8b:45:85:22:22:fb:d9:ed:3a:af:
db:35:37:fa:1a:ce:c6:4e:71:10:7d:82:8f:70:78:
7f:fc:4c:6a:2a:60:27:ac:c8:cc:89:b9:62:ed:f4:
ce:08:ab:83:a4:1a:46:d0:a8:8e:f7:3d:80:21:81:
ca:85:e8:3b:78:c0:54:83:7d:09:04:01:4e:a9:86:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:6D:61:43:06:16:22:6B:E1:01:67:87:7F:25:5F:D2:C0:17:80
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:25:34:94:2c:24:b7:3e:ae:9d:9e:62:a9:ca:77:92:96:05:
f9:37:14:32:b4:38:2d:81:e1:66:c2:8b:2e:4b:ce:cd:37:7f:
80:fd:48:64:85:70:10:98:13:8a:a6:5b:d7:c8:4e:3b:77:7b:
35:9b:6a:3a:13:20:c5:ef:8e:84:dc:e5:f9:8e:d4:23:5f:d7:
d5:0c:63:9e:70:62:57:5d:e1:11:f1:d6:b5:2e:8e:5b:4e:77:
e5:e7:3b:3e:75:c9:0e:c4:2b:95:83:b0:89:5a:54:70:42:91:
38:46:cf:94:56:12:de:c9:e9:e3:39:e9:f5:74:53:a4:4b:bd:
df:33:60:78:80:eb:5d:5c:58:96:e9:71:ba:b6:6d:5c:11:50:
da:3a:d2:a8:6a:c7:1d:84:39:fd:55:fb:32:33:7e:0e:41:a2:
36:fd:2c:c1:8d:40:26:4f:1d:f9:73:7d:8e:16:c5:98:22:ca:
9a:12:fa:f1:e2:79:cc:74:df:27:4b:3c:91:35:6e:51:d6:0f:
30:44:26:66:a3:03:6a:25:5f:90:24:16:1f:bc:bc:3d:98:f6:
65:57:c8:67:62:da:11:2d:bb:56:00:e7:29:d5:72:bc:a1:ce:
04:8e:0b:9d:82:7a:ea:c6:38:a0:0d:ae:ff:3b:86:8a:13:23:
2f:4a:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:37:50 2025 by rpki-client