Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json)
Hash identifier: GlAA7ApKAPmPiIYvvhtVExwo1hAjdyaw/ibTxDAQTps=
Subject key identifier: A3:F1:F7:0F:1D:A5:D8:0E:87:0B:64:96:82:73:67:2A:3D:94:5C:00
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial: 019684DA66108411680EB60023DB6C005D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
Manifest number: 123A
Signing time: Wed 30 Apr 2025 04:00:27 +0000
Manifest this update: Wed 30 Apr 2025 04:00:27 +0000
Manifest next update: Thu 01 May 2025 04:00:27 +0000
Files and hashes: 1: HH4kNc1X7Vv3MoqhViTWK_E_VGI.roa (hash: O3Hf94Oha/v7Hh9wzuFaVr7kYXEFrWI2haBjKaDT/FA=)
2: QRWbN9gDLtiBKX0OHWitK4sar4Y.roa (hash: 9r207a3pRIUCl7V+9HyJcMsCjA45mcSFholzvZsRQ5g=)
3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: c2KOGX/XqerbPTRaFXbhoXA/cXs1g0TL4fm37cq2Gu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:66:10:84:11:68:0e:b6:00:23:db:6c:00:5d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Validity
Not Before: Apr 30 04:00:27 2025 GMT
Not After : May 1 04:00:27 2025 GMT
Subject: CN=a3f1f70f1da5d80e870b64968273672a3d945c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:fd:45:a9:89:c1:9c:76:d4:02:f9:7f:d4:
c5:7e:fc:94:47:c3:97:d8:75:2e:cb:75:1b:f7:21:
47:22:81:66:f9:34:64:11:73:75:81:9a:52:22:bf:
38:14:de:ca:b8:78:7e:f5:bb:0c:6c:ea:a8:c4:e1:
cc:bd:de:cc:4d:8b:74:44:72:95:8b:f7:8f:6b:94:
38:33:04:ef:c5:02:56:6c:13:00:cf:51:a5:81:81:
27:b7:d3:65:3b:28:54:e8:10:65:c4:ec:de:0d:0f:
c6:94:e7:1b:ab:fc:25:2e:2a:79:a8:37:ac:87:12:
2a:6f:5f:05:6b:67:2f:14:d7:ce:af:02:cd:58:cb:
ed:3d:3f:86:3f:75:87:5c:ec:21:ba:00:f2:2d:93:
25:d3:4b:a2:5e:db:fe:b7:f0:f6:07:22:db:1b:e0:
b0:b6:7f:20:ff:17:af:10:c7:85:33:6b:49:e2:a1:
3b:ae:09:ca:73:d9:56:12:4d:d8:9b:44:98:ea:5f:
01:a8:11:66:b8:5d:86:c9:e1:3c:eb:d4:e7:aa:ee:
d9:04:3c:f5:e0:5a:5a:44:34:a5:cd:47:16:39:81:
15:04:54:34:9d:4a:f5:5b:53:dc:29:ac:8a:86:83:
d8:0b:f7:a2:3a:0e:e8:41:3b:e0:de:20:85:c7:78:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:F7:0F:1D:A5:D8:0E:87:0B:64:96:82:73:67:2A:3D:94:5C:00
X509v3 Authority Key Identifier:
keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:99:95:a0:08:5e:f3:8a:89:e1:f0:13:e9:71:98:ae:52:08:
73:52:18:2a:f4:f3:d6:05:23:c6:54:49:36:1b:20:7f:6d:f8:
73:43:57:27:7a:50:24:d3:be:c9:03:95:4d:b6:c3:de:b0:1c:
a0:50:35:c9:fe:84:82:ed:fc:c5:ae:1e:22:24:62:01:04:29:
28:b3:15:96:d2:50:43:9b:8f:11:4c:2c:3b:d8:a9:3d:08:59:
fe:8f:93:ca:d2:1f:f3:ff:48:19:16:67:36:6f:aa:9f:6d:30:
18:3b:ea:97:38:78:1c:ca:61:e2:e7:b8:95:44:63:f0:e9:d5:
84:fb:d4:8f:56:13:32:f4:34:c7:0e:ce:54:ca:0c:45:96:1d:
2d:94:3e:20:c5:09:b8:5c:21:18:39:9a:3e:f8:e4:3f:78:2d:
d3:7f:11:77:de:af:3d:84:6c:21:74:08:ba:1b:57:64:a5:bc:
e1:c5:7f:72:96:15:8e:49:1f:4f:93:33:b1:f3:16:9f:18:54:
57:9e:23:11:d1:12:9f:e6:00:ce:67:7a:28:83:e2:ab:e7:83:
bb:97:c6:6f:16:3f:a1:60:90:61:05:c1:4b:e9:58:e9:ef:c9:
3b:13:bf:58:e3:a5:52:a9:53:bb:b2:05:c4:0f:68:9a:c3:6b:
62:91:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:37:46 2025 by rpki-client