Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: sK71xScvdjH4xsFFvIfD3tk3kRu53PJ2S0fAb7IaGyo=
Subject key identifier: F8:4A:D2:BF:35:EB:B4:FD:B7:08:71:EE:26:63:3B:22:91:17:83:F6
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019687370E0E1ECDA9B2B1A383445DD2178F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0877
Signing time: Wed 30 Apr 2025 15:00:54 +0000
Manifest this update: Wed 30 Apr 2025 15:00:54 +0000
Manifest next update: Thu 01 May 2025 15:00:54 +0000
Files and hashes: 1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: M/traJkRpt5mWGgy1XBTmTFtgjTjXKtfvdPlWGBy+5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:37:0e:0e:1e:cd:a9:b2:b1:a3:83:44:5d:d2:17:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Apr 30 15:00:54 2025 GMT
Not After : May 1 15:00:54 2025 GMT
Subject: CN=f84ad2bf35ebb4fdb70871ee26633b22911783f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:f2:74:60:25:6a:47:ee:25:c4:d3:00:ab:
e3:fd:8f:64:4f:47:88:fc:4f:00:9c:da:99:17:0d:
bc:67:c4:07:c6:8b:70:cf:05:ea:39:47:61:ac:48:
b4:43:85:97:67:85:c1:8b:d8:b2:39:d2:80:d5:f4:
cf:19:88:7b:de:ed:f8:d7:12:12:a0:d0:14:b2:08:
67:a0:d0:bd:85:d9:40:7f:5f:5c:f1:e6:69:93:e0:
b9:b3:47:89:9f:64:fd:10:41:8b:e9:12:19:ae:f2:
cd:76:52:1c:fd:91:72:7a:61:ce:03:9c:78:65:98:
61:37:08:09:6b:ab:f3:ef:d6:a8:a3:42:45:b0:30:
29:3b:6f:e5:19:54:ce:00:a9:0a:be:18:e5:29:6c:
05:ae:7b:f9:93:d7:e9:3c:b2:35:89:df:6c:a4:48:
8a:64:d5:81:0d:1a:2c:46:3e:ae:d7:49:f8:f5:a6:
1c:3a:be:76:33:58:50:03:06:75:94:8d:88:24:52:
73:29:1f:89:33:aa:0a:5d:10:89:41:3c:13:8f:60:
66:64:da:49:26:9e:72:f8:cb:b6:7f:4f:11:13:1f:
38:b6:ff:87:36:62:32:19:3a:b4:50:26:5c:b5:71:
9e:63:4a:8c:06:2f:b3:af:38:e6:8a:4d:2d:41:55:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4A:D2:BF:35:EB:B4:FD:B7:08:71:EE:26:63:3B:22:91:17:83:F6
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:42:6b:22:44:38:5f:18:d7:04:d1:25:42:44:60:11:0e:3f:
fc:1e:0d:5e:91:ad:20:de:5d:0d:a4:58:de:35:3c:48:47:4c:
3a:ad:45:0f:88:b9:50:c9:4b:89:64:47:d0:cb:dd:41:b8:8e:
fd:77:49:bc:e3:6d:71:64:a5:b0:ef:92:81:30:c0:d7:02:e4:
92:36:3d:4f:9d:81:af:46:e2:fc:b9:55:93:2b:75:96:8e:2b:
2c:48:b2:8d:df:a1:94:38:e9:84:df:c8:44:02:d7:10:a8:ea:
5b:6a:bb:99:38:7f:10:f8:aa:d1:aa:a4:fe:5a:f5:07:51:90:
4f:2d:54:4d:ff:1e:3b:ba:5b:b1:6e:12:4a:c6:ce:2f:0f:02:
a9:92:98:6d:d6:11:43:8e:ee:92:28:90:2a:25:10:42:f3:aa:
02:de:e9:e2:fb:eb:12:28:f0:1a:4d:4d:74:bb:70:c2:d8:34:
dc:70:6b:2d:cb:2a:ef:d1:35:48:6d:20:7b:fd:ee:22:5f:d7:
35:76:f4:30:60:13:60:02:0f:41:a1:3d:da:27:51:20:79:c0:
13:c0:80:3c:38:ed:21:2f:2a:27:48:a5:03:a6:69:23:69:d4:
d7:c8:be:19:64:9b:7b:08:1b:d3:12:cc:28:0f:7c:b6:8b:c6:
cd:7b:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:56:46 2025 by rpki-client