Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: xifjuAR0sckyEBy41tyHNGr7a3RAiHI5rh5Vd4nQel0=
Subject key identifier: A1:C1:9D:A5:9E:8C:8F:0D:70:2D:B8:26:6D:A4:C5:4D:90:6E:78:16
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019689CA1A21D5D49CE3C22A29CB4B0C1497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0BC8
Signing time: Thu 01 May 2025 03:00:45 +0000
Manifest this update: Thu 01 May 2025 03:00:45 +0000
Manifest next update: Fri 02 May 2025 03:00:45 +0000
Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: +47t2QO5/D5R8mMsdbMO8AWAvFsQa0WXZl+p+BKPCO8=)
3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:1a:21:d5:d4:9c:e3:c2:2a:29:cb:4b:0c:14:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: May 1 03:00:45 2025 GMT
Not After : May 2 03:00:45 2025 GMT
Subject: CN=a1c19da59e8c8f0d702db8266da4c54d906e7816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:37:ca:ce:52:71:dd:d0:9c:55:37:c7:8b:
01:96:36:4a:bc:29:de:0d:80:c2:86:fc:9f:b6:20:
c4:b9:ad:e5:b0:63:0f:62:aa:b5:7a:5a:a5:b7:ff:
5a:63:2d:74:c4:80:ca:0f:1c:d2:fe:29:66:b2:1c:
0c:e0:7c:8c:49:df:6d:fd:22:7e:2a:12:43:61:2e:
b0:33:f2:c4:cc:2b:27:19:5d:09:b8:92:f6:32:b4:
6f:a8:15:8b:29:9e:8d:30:e6:7a:27:9d:13:74:2f:
a5:d2:b6:ed:6c:ab:ce:23:77:24:74:5a:72:88:a1:
d9:43:fe:59:0a:d8:a6:12:61:f6:b8:36:e1:94:20:
8b:53:2e:8e:04:0b:32:78:5d:d4:ea:88:f0:2e:b5:
92:3f:40:b0:1a:8b:30:b3:2b:24:f7:eb:47:da:c6:
3b:cf:4d:d5:83:e4:9e:dd:4e:ff:7e:ce:ce:c2:07:
62:2f:26:fd:ba:6f:31:29:95:df:dc:52:e2:80:cf:
5b:8f:f1:9e:7f:9b:b0:58:b6:74:32:c7:cc:fc:5e:
3b:59:da:4e:22:7c:30:ee:d3:78:48:34:f6:c0:e4:
23:a6:c5:17:ba:09:af:f9:a6:b6:f9:66:fd:2a:b0:
18:82:97:07:93:55:66:51:31:e1:a7:4c:a8:e9:73:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:9D:A5:9E:8C:8F:0D:70:2D:B8:26:6D:A4:C5:4D:90:6E:78:16
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a3:ee:7f:f8:1f:81:dc:a1:bb:5b:5e:52:6a:67:2f:a6:e3:
7f:34:f6:2c:54:13:7d:3b:61:f6:ed:34:68:4b:0b:5f:f4:08:
71:b1:f2:29:7c:89:27:5e:c7:b5:4f:11:65:0c:72:9a:e9:a1:
67:f6:48:b9:89:9a:a3:3d:32:7e:4d:1e:40:50:24:5d:7a:8c:
c3:09:d2:91:7d:ee:08:8a:04:7e:66:f7:5b:2b:dc:38:3c:79:
af:0a:c8:10:a4:9d:7a:46:79:39:3f:7c:0a:65:bb:b1:16:b3:
77:26:14:63:76:0a:11:40:58:91:44:69:62:76:1a:1f:02:d9:
09:56:9f:07:45:1d:7b:03:83:64:d8:dc:1e:1a:e1:1f:86:3e:
a1:1c:7d:06:cb:bf:64:65:56:4c:8d:a2:cf:0d:06:f7:ad:89:
ae:4f:67:9b:a6:1f:29:a2:4d:f3:5d:e1:e4:23:ca:e0:c8:9d:
99:44:1b:92:96:23:27:fc:56:ec:2d:18:17:0d:95:76:3b:ff:
64:e4:4b:46:9b:18:09:c9:fd:c5:b5:ae:68:51:ed:c8:de:ef:
00:95:42:0f:bf:b9:14:f9:a6:d9:e6:e0:45:63:17:2d:4e:54:
c3:eb:fb:5c:45:53:aa:b6:bb:04:e0:6e:b1:f0:3c:7f:14:25:
ad:85:98:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:08:10 2025 by rpki-client