Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: 6VMQ8MgT9wkDnLrA+vhYLiWMmJBDViM8HFQ6mrwSIwY=
Subject key identifier: 4D:72:BF:37:31:EB:71:37:B4:8D:07:54:41:86:25:22:1B:0D:2B:FA
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019678D697457D1335C1175F4BBE260F6863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 20:00:51 +0000
Manifest this update: Sun 27 Apr 2025 20:00:51 +0000
Manifest next update: Mon 28 Apr 2025 20:00:51 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: 6No7xoxPLdCY358tFY30IqPs6DTLbCAJMRInwvu3xuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:97:45:7d:13:35:c1:17:5f:4b:be:26:0f:68:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Apr 27 20:00:51 2025 GMT
Not After : Apr 28 20:00:51 2025 GMT
Subject: CN=4d72bf3731eb7137b48d0754418625221b0d2bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:69:31:bd:fd:e9:7d:19:bf:79:37:a0:c5:
0b:95:c4:45:2f:48:3a:81:6f:d1:fa:f8:12:46:ce:
63:ed:ea:a7:ce:6f:1f:c7:66:5f:01:40:50:49:06:
0f:0e:6d:9c:96:51:5b:64:c9:d8:08:53:1f:49:5d:
da:96:02:78:6e:c3:d5:4a:39:86:35:eb:b1:9d:2b:
97:4e:f7:a1:60:c7:2b:7c:7b:6d:df:dd:2e:91:6f:
bf:18:92:e8:69:6c:14:2f:99:41:86:1a:7d:5a:0a:
3a:bf:88:92:fa:94:be:4c:d9:0a:65:ee:de:c1:b1:
1e:2d:f9:f9:40:6d:9d:8f:3a:6b:97:25:50:1d:eb:
a4:51:e4:34:cc:18:7f:e8:13:bb:c4:4a:ee:44:12:
0f:c8:56:c8:e0:4d:ab:50:0e:0b:81:d2:91:c7:9f:
5b:a8:57:61:9a:c8:ac:fe:30:a5:b0:a6:8e:37:47:
13:b9:8a:0d:ed:c2:ff:fd:0e:c8:2a:0c:41:ac:99:
23:32:d3:84:4a:a7:c7:61:df:95:d2:f1:3c:9d:a9:
66:b4:0e:c9:4d:0c:72:f6:eb:6b:f3:e0:8c:9e:84:
a2:ae:da:e1:e7:cc:8d:69:47:bc:84:fa:fe:23:fe:
ca:f0:58:54:1e:9f:4f:98:e5:dd:64:d3:9f:ea:d9:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:72:BF:37:31:EB:71:37:B4:8D:07:54:41:86:25:22:1B:0D:2B:FA
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7a:ad:98:44:6b:7e:04:57:d0:2a:21:a1:54:16:d7:68:f4:
8d:69:7a:80:bb:6a:04:88:b5:f6:7d:3a:14:02:53:62:ac:c9:
e1:ea:95:9f:a9:6e:ae:de:e5:27:49:95:73:e7:61:c6:c2:c4:
1e:cd:77:10:e8:40:51:3e:fc:e1:98:83:98:4c:f5:e9:9d:df:
ad:14:0d:59:55:75:c1:90:83:f0:a7:5a:69:7d:c5:c5:d3:63:
35:9d:d2:12:ba:74:eb:45:33:d3:62:90:94:11:47:4f:77:96:
e2:84:1e:64:71:6a:48:47:3e:df:6c:e0:e9:3a:23:f3:1a:1e:
a1:7e:e0:1e:d8:83:13:e8:77:0a:ca:03:91:7f:fb:29:b0:73:
3e:ea:5d:a6:5d:2a:64:21:ed:ca:30:ad:35:40:21:ee:e6:40:
38:5d:47:19:b5:2e:6f:8d:98:ce:80:5f:b1:bc:a2:b8:35:80:
12:03:71:6b:89:f8:bc:a3:d2:05:05:1d:ae:bd:ed:3f:f9:0e:
40:3f:cb:13:26:7e:ec:44:10:31:86:b2:ae:34:95:1b:6d:70:
82:9c:71:a2:3b:92:6e:12:d6:b4:93:1d:4d:5f:9f:7e:85:3d:
d7:aa:79:d1:b1:e4:e3:83:30:a2:ee:d7:84:c8:de:3b:b3:61:
f0:e3:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:00:34 2025 by rpki-client