Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: S4q3ZQ1cxD5fqUAyLueD/9YaM3wic5/QWQbGO6vyr/Y=
Subject key identifier: 3E:15:06:97:E0:48:20:0A:18:A4:DB:87:8C:15:32:D9:62:78:3A:F4
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 0196759E687E9D672958B3E4EC9004698D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0D3D
Signing time: Sun 27 Apr 2025 05:00:37 +0000
Manifest this update: Sun 27 Apr 2025 05:00:37 +0000
Manifest next update: Mon 28 Apr 2025 05:00:37 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: xATIWlfJvl1nIDk2VcdAILZdCI26Bo5wmrWsvhm7Vfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:68:7e:9d:67:29:58:b3:e4:ec:90:04:69:8d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Apr 27 05:00:37 2025 GMT
Not After : Apr 28 05:00:37 2025 GMT
Subject: CN=3e150697e048200a18a4db878c1532d962783af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:0f:74:21:33:18:f8:2f:9d:66:0b:c3:7c:
0e:f4:f4:13:31:0e:20:1f:58:78:09:4d:72:e0:90:
e6:3e:4e:1e:6f:82:6f:91:03:7a:ae:84:ec:15:f3:
94:e0:44:ca:26:75:eb:76:3f:1c:a4:8f:51:63:11:
01:25:1e:fc:2e:87:4a:e9:be:81:fa:c3:d1:19:7d:
13:14:20:4a:97:02:4c:91:18:f9:13:bb:32:6d:78:
92:bb:ef:27:71:6e:2c:d8:39:9e:f0:52:ff:e9:9d:
81:6a:c6:09:7e:bb:cc:fa:27:2e:52:2a:24:e9:eb:
10:1d:42:2e:25:e0:8c:f9:f4:68:9b:61:df:89:10:
26:6f:8c:3e:6f:48:7c:e8:c3:4e:98:54:3e:7e:e9:
f4:8f:db:c6:af:72:7b:34:93:e3:ee:63:2c:01:5b:
1f:4c:16:ad:53:c9:2d:88:2a:08:f7:26:b0:e2:b6:
51:bb:e4:c7:25:65:10:ca:35:5c:9b:11:02:7d:8a:
0f:c3:e4:b7:f4:1f:64:31:25:de:42:5a:ff:1e:97:
61:52:69:f2:9f:4c:0c:2c:0d:73:9f:9b:93:49:6c:
e6:49:b5:e5:18:a1:5d:45:40:05:e4:fc:cc:b7:f5:
64:35:af:8a:65:73:19:2d:20:87:31:99:0f:e9:11:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:06:97:E0:48:20:0A:18:A4:DB:87:8C:15:32:D9:62:78:3A:F4
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:21:2a:0b:7a:95:67:eb:3c:c5:88:d6:50:ad:38:4d:8a:c7:
7b:8d:8c:53:79:fa:d8:cb:77:94:3f:d5:71:cf:4c:04:70:d9:
03:46:30:e5:8c:6d:b3:a3:e7:6e:06:96:56:dc:44:3e:a6:ae:
66:28:3d:83:23:51:44:04:8e:e3:28:d4:85:69:bf:70:c3:1c:
be:20:50:18:98:d1:28:19:bc:f4:52:4b:b6:69:62:93:c9:30:
5d:f3:aa:5e:55:3e:b8:1b:1f:6f:24:f7:6c:a5:7a:22:55:e0:
83:ee:fa:78:c0:1e:d5:40:b6:b5:34:2e:42:c1:b5:d5:29:89:
8a:3c:14:80:6f:d1:00:15:4d:01:0c:ae:6e:6f:c2:1d:19:38:
96:3d:57:92:f9:36:d5:83:43:91:44:c8:1b:e2:18:d9:59:d4:
a5:d8:e5:48:fa:0f:89:11:a3:e3:22:3b:55:7b:ce:32:8b:d8:
91:31:10:1f:c3:20:ce:bb:cc:92:9a:99:f8:5e:bd:ec:63:52:
ce:47:85:59:8e:dd:d6:4c:28:4d:05:f4:e2:71:6a:6c:c5:3d:
71:89:23:79:10:f4:41:6f:35:72:47:a1:94:2d:7b:a0:36:9b:
dc:52:c2:97:b1:a9:af:14:48:2b:84:69:fd:20:a6:6e:86:b5:
c2:51:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:53 2025 by rpki-client