Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
File: oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft (raw, json)
Hash identifier: tvcbWJMwxGVbo6jMGMdrxOHifuMgWdTLs4XgB9UiUw0=
Subject key identifier: 25:F8:A8:92:F5:CE:2F:1C:17:07:5B:5C:D4:01:57:B1:26:2B:AC:18
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 0196900313FBDB60B20E1216939245D5876C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
Manifest number: 0361
Signing time: Fri 02 May 2025 08:00:42 +0000
Manifest this update: Fri 02 May 2025 08:00:42 +0000
Manifest next update: Sat 03 May 2025 08:00:42 +0000
Files and hashes: 1: WacUruZTE83WEEePnyB3KKF0YFU.roa (hash: IGW0uLOK6yIPDXD8+jDEju++6EJZMklynz//i9x70Jo=)
2: oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl (hash: RbIudMsFvPSN1K9I6N7qI7WU/uByBIuwaTlgmAqMhP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:13:fb:db:60:b2:0e:12:16:93:92:45:d5:87:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: May 2 08:00:42 2025 GMT
Not After : May 3 08:00:42 2025 GMT
Subject: CN=25f8a892f5ce2f1c17075b5cd40157b1262bac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:f2:d6:37:b9:76:9e:bf:6d:7f:0b:2b:f7:
0b:9b:eb:ca:8d:cc:e8:43:b1:d4:89:25:5f:06:89:
97:54:48:0a:61:64:3c:11:8a:7f:e2:d6:c5:f9:31:
c5:28:90:45:0f:a6:aa:f9:f7:36:04:65:77:49:9e:
73:ff:d7:e8:60:4b:df:2c:17:27:2d:b5:11:f3:77:
c3:3f:f0:98:5e:35:f0:f7:cd:be:ae:44:22:12:74:
5a:fc:50:54:b5:d6:8c:55:3c:dc:eb:11:7e:5b:0d:
a7:30:ce:5a:bb:69:88:d7:0d:06:7c:32:35:fc:17:
6d:f8:ce:cc:6d:5f:c5:db:16:3f:5d:6f:9c:ee:af:
12:ed:a0:6f:15:99:c7:5f:37:5b:e2:15:3d:fd:bf:
90:ab:14:5f:49:3b:93:7e:73:ea:36:82:e7:a8:37:
70:cf:f3:92:23:e3:bf:86:39:ce:1b:05:79:1f:8e:
b4:cb:34:d0:a7:88:9a:11:d0:87:0b:f0:2f:14:14:
19:33:65:f1:2a:82:00:1c:9b:a5:4d:f9:70:d7:c9:
9e:48:fc:f6:5e:18:9a:03:0c:35:8c:4f:91:b0:ba:
3a:46:8e:ea:4e:91:4b:29:5d:b9:c7:8c:24:c2:6d:
f1:72:7f:80:71:28:e4:eb:c4:81:83:40:57:b5:c8:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:A8:92:F5:CE:2F:1C:17:07:5B:5C:D4:01:57:B1:26:2B:AC:18
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:70:1a:97:e6:bd:1c:cc:00:dd:02:29:51:ae:77:b5:b9:42:
06:15:cd:33:60:ea:a1:12:68:bd:dc:b4:96:1b:9f:95:f2:4b:
2e:4d:ed:6a:4b:45:a8:01:4f:ec:87:6c:9a:08:5b:ca:49:2c:
5b:60:1b:21:cd:3b:bd:6a:e7:8b:18:ad:ca:72:5b:ce:d4:eb:
a6:34:c1:da:0a:d8:40:16:d2:e0:00:af:b3:89:25:9f:0b:90:
f2:e7:41:70:93:db:ea:77:25:d9:7a:50:82:81:f5:27:7f:97:
e6:9c:41:77:b0:17:c6:1a:2d:c7:03:75:80:10:dc:b8:8c:92:
27:f9:9e:d8:4b:ab:30:90:b4:0d:c4:55:17:f3:61:f9:3a:b9:
76:e0:b4:c0:bc:62:f3:d2:11:5c:ae:d3:96:22:eb:75:70:3b:
b7:29:6a:9c:51:f4:fc:96:b9:5a:31:7f:64:45:67:16:fd:72:
50:d5:aa:7c:19:9e:f0:dc:7e:cf:45:8d:e2:a6:5d:32:3c:73:
32:dd:cc:5c:01:58:70:bb:e2:f3:8a:47:e8:40:34:04:55:cc:
df:9f:28:f5:29:b3:2b:00:00:99:0b:24:7e:d0:42:ea:f9:38:
3e:cd:ab:89:02:10:b6:3a:14:c6:fc:46:32:77:70:a6:bb:0d:
a3:32:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:34:51 2025 by rpki-client