Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: jdhDvgVkIHCbE9hIMSfueFtui/9zNYVBSNPWxGHpMw4=
Subject key identifier: BD:8E:92:E2:B5:8D:3F:DF:14:92:2C:78:5C:D8:C7:44:67:E4:99:34
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 019686C88AC824CB8DDCD5DB7A687EEF6779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 02E8
Signing time: Wed 30 Apr 2025 13:00:11 +0000
Manifest this update: Wed 30 Apr 2025 13:00:11 +0000
Manifest next update: Thu 01 May 2025 13:00:11 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: nQE1iLYB47aGgSXmYZMWS3YKublRWoxcXVVoS1+UNzE=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:8a:c8:24:cb:8d:dc:d5:db:7a:68:7e:ef:67:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Apr 30 13:00:11 2025 GMT
Not After : May 1 13:00:11 2025 GMT
Subject: CN=bd8e92e2b58d3fdf14922c785cd8c74467e49934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:e1:87:54:39:35:18:a2:65:ef:e2:0c:2e:
df:4c:ff:5f:25:26:5b:9e:98:9a:f3:da:43:f5:a8:
70:08:5a:9a:54:87:de:ae:13:3d:c4:5c:9c:ed:c9:
c9:81:2c:af:34:79:c4:24:a9:68:9a:41:a4:a4:f7:
25:0e:b9:ce:46:81:84:b0:17:da:8d:df:1c:8a:a4:
33:e5:0c:c2:00:0c:f3:3c:6a:3d:cd:3a:fa:95:9b:
cc:83:89:60:60:57:3e:b9:c8:0e:ef:35:00:bf:f2:
e6:b2:ab:72:2d:bf:86:d8:8f:c2:c4:98:d6:55:66:
d4:fd:ef:b1:db:c9:43:fe:01:47:8e:67:3e:e9:b7:
8a:e3:f5:19:b3:ba:ad:40:fa:8a:21:06:2e:59:6b:
fd:4e:ad:d1:c6:65:95:02:7f:4f:3a:6d:ba:c1:7e:
b0:95:60:05:ed:15:fe:9c:8b:04:3d:4a:2a:b9:3e:
d1:17:bb:6d:0d:0b:90:3e:6f:af:c8:d5:5a:a4:51:
17:d7:fb:8a:be:da:8a:51:4e:b2:4d:20:ea:fc:8a:
fb:9f:89:35:2b:cc:86:44:78:97:a6:ae:57:7c:b4:
57:54:64:0b:37:9b:05:71:ac:cb:29:4c:95:a8:77:
4f:9f:cd:54:eb:a4:98:b8:ba:bc:10:29:bb:d4:26:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8E:92:E2:B5:8D:3F:DF:14:92:2C:78:5C:D8:C7:44:67:E4:99:34
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c6:e4:f6:fb:3b:08:66:9b:f2:b8:47:d2:ab:f4:68:7f:90:
11:7e:b1:18:87:2c:bb:6b:4e:a4:15:e0:2d:76:11:60:6d:3e:
a2:d2:e3:e8:ec:c5:35:f7:cf:25:6c:16:15:34:2c:f1:6f:25:
ab:d9:fd:78:47:d0:de:53:ba:c5:2b:e0:7a:bc:5c:c8:d8:40:
d2:e9:e1:e8:e5:1f:c5:1d:10:75:39:15:62:ef:d6:40:79:17:
1f:63:9a:9d:1d:7c:37:54:77:a7:19:04:dd:ec:cb:d1:7b:39:
0c:c2:07:ed:8f:d6:0c:da:50:dd:55:5c:c2:f4:c7:41:7c:d3:
76:0b:5c:78:95:30:cc:94:ba:0e:dd:af:bc:54:0a:d5:01:2c:
65:4d:9e:4b:c1:2b:a9:61:8e:11:21:2e:47:87:d1:7f:22:95:
87:46:97:6a:eb:81:03:83:13:c0:9f:4e:26:7b:b5:b3:c0:22:
78:42:73:4a:f3:39:07:c6:d0:a6:c2:66:2c:47:33:be:4a:66:
9c:03:9f:89:87:bb:33:b4:78:02:c0:cd:00:57:7f:ce:3f:ef:
44:f0:0d:e9:91:d4:12:b4:d6:b6:c4:5a:44:89:c4:05:e9:d6:
f0:39:c4:40:ae:bf:b9:f0:93:4f:bb:a9:95:33:22:fe:c8:fa:
1c:dd:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:51:50 2025 by rpki-client