Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: gE8fguzHfJrkN64tVy+rjF7HIWmmzR+/qawYQNJ6L5E=
Subject key identifier: BD:33:12:94:77:BC:35:7B:64:2E:D6:47:80:71:A5:8B:15:A9:CA:E4
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 01967E341E3C665A41C6AA5643C337C42C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 0138
Signing time: Mon 28 Apr 2025 21:01:06 +0000
Manifest this update: Mon 28 Apr 2025 21:01:06 +0000
Manifest next update: Tue 29 Apr 2025 21:01:06 +0000
Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: EZVbHcFXmouxeMExmy5Eusbnr8qCmS2KDmgetp88Ru0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:1e:3c:66:5a:41:c6:aa:56:43:c3:37:c4:2c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Apr 28 21:01:06 2025 GMT
Not After : Apr 29 21:01:06 2025 GMT
Subject: CN=bd33129477bc357b642ed6478071a58b15a9cae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:45:7f:09:3c:7a:78:6f:4d:31:e6:a6:8c:
15:1e:74:0d:ca:db:7b:9a:dc:04:b3:12:30:a2:4a:
d6:73:5e:00:7f:50:e3:57:2c:29:1d:57:34:d3:82:
a9:38:3d:3c:bc:2a:1a:f8:57:72:b8:6a:86:81:a5:
5a:6e:40:43:de:cc:7a:f5:2e:ef:b8:ff:1a:77:ac:
3c:25:ac:f6:06:ab:c0:96:e4:5a:1c:f5:69:b3:67:
6a:40:5d:b4:81:c8:d2:5e:45:4f:02:16:cb:7d:6a:
d2:fa:ec:2f:4a:cc:84:c6:56:75:75:4a:57:17:ed:
1e:ff:7a:32:cb:bb:90:7f:ec:8c:e7:00:5c:81:a2:
1f:4d:a4:cd:4f:9e:34:a5:59:f8:3c:3f:ea:2b:69:
28:07:7d:1a:90:d5:bf:1b:24:64:04:c6:2c:3f:95:
32:92:ee:01:81:3c:ae:6b:2c:34:de:f3:2e:a3:c1:
63:be:3c:af:5a:19:e2:ff:1d:90:12:67:1b:bf:4f:
ae:15:9a:7d:5d:b2:10:d9:35:db:3d:52:c9:37:57:
69:18:70:81:57:6c:0e:4d:37:d0:25:46:2d:63:b2:
97:42:88:79:46:2a:38:f5:00:9a:6b:b9:38:dc:d6:
1c:18:1e:e2:b4:3f:36:9a:26:f4:ce:55:3c:b6:ae:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:12:94:77:BC:35:7B:64:2E:D6:47:80:71:A5:8B:15:A9:CA:E4
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:05:9a:c5:f7:41:a3:90:91:fb:ae:ef:de:f7:c5:56:84:00:
e1:12:a7:80:01:6a:d6:75:51:b8:97:4c:7a:25:1a:c3:27:3f:
40:e7:15:c4:27:09:88:25:82:d6:27:93:91:47:f5:e3:da:52:
ea:db:62:07:93:ef:7f:cc:b8:9c:f8:d3:90:71:9f:63:f0:52:
fb:71:bf:46:13:19:d3:ce:28:af:b7:e2:e2:14:85:ab:7c:97:
08:38:7d:56:75:01:f8:02:ef:0c:e9:d5:0b:fc:44:8d:ab:c3:
ea:b1:60:94:a7:dd:82:a4:37:c4:62:ab:f6:bb:fc:44:9f:4c:
30:02:8c:c1:b1:6b:e2:5f:92:e0:57:05:68:0d:39:31:c9:f3:
54:ce:74:ca:d2:b7:1f:f3:f0:fe:fa:94:a4:89:5f:8c:df:eb:
0e:21:52:6b:f2:3f:e6:25:09:20:d9:4b:76:99:5a:c2:a7:f2:
b4:c4:ab:fa:bb:dd:44:fa:77:31:09:9e:36:5e:1b:b2:f5:e6:
c4:98:ea:c9:07:a5:f2:16:eb:fb:2c:5d:97:f5:8c:6b:8f:be:
87:e6:a7:77:25:a0:b2:17:bd:54:76:16:9d:08:ae:96:0f:30:
1f:88:e6:71:57:41:c8:32:dd:c8:1a:49:bd:f3:fa:29:ad:e9:
47:0d:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:43:40 2025 by rpki-client