Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: OjO8GJwEQhn5qr9y6PaF8K3REtxlO13pGISXlykG0+U=
Subject key identifier: A8:16:51:AA:C3:0D:5A:55:B4:BA:73:01:68:AB:A5:CA:ED:E8:B3:AD
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019680FD6E7E609E0EA744B6BF7192670ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 121B
Signing time: Tue 29 Apr 2025 10:00:14 +0000
Manifest this update: Tue 29 Apr 2025 10:00:14 +0000
Manifest next update: Wed 30 Apr 2025 10:00:14 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: rIyhz7VUq7gxAt8YrX4BpqTvr5rJKL/FMTnPTs5zCns=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:6e:7e:60:9e:0e:a7:44:b6:bf:71:92:67:0e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Apr 29 10:00:14 2025 GMT
Not After : Apr 30 10:00:14 2025 GMT
Subject: CN=a81651aac30d5a55b4ba730168aba5caede8b3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:fe:c9:22:4c:26:ca:6e:23:ca:40:e0:9d:
2f:37:2a:b3:6a:9d:16:73:dc:11:5f:0f:63:10:7f:
0d:04:c2:8a:42:8c:6d:b7:85:9f:0a:31:2b:ba:ba:
8b:76:d7:63:c1:6a:59:b8:8b:89:e9:7b:18:dd:13:
b3:ac:d6:79:9d:cf:e0:cd:30:68:70:54:01:9c:ec:
80:ad:9a:58:14:eb:1f:c8:d3:7c:e0:f7:43:97:70:
c5:27:02:38:3b:c9:bd:f4:fc:22:ab:64:6f:ec:11:
1c:58:7e:1f:21:62:c0:95:32:38:cb:7e:17:87:96:
72:22:04:cc:2b:b3:db:0e:00:65:4b:cb:64:e4:36:
f0:eb:e1:1d:1b:59:35:93:10:1d:60:df:e2:1c:4f:
e5:47:c6:8b:a0:3d:a9:b9:ad:f3:c1:f1:20:8c:83:
66:b7:45:1c:21:7f:57:a5:79:52:61:2f:80:c0:30:
c8:20:8f:5b:bd:05:8e:d8:0d:2a:25:72:fc:68:52:
f0:2d:68:ef:7a:5b:ec:00:69:41:37:3c:08:40:fc:
79:da:86:a7:20:a1:d5:9e:fa:78:22:9e:69:67:dd:
44:a8:44:42:fb:dd:ff:bc:77:b7:85:6e:64:53:11:
30:d3:c9:4a:3a:f9:f7:de:a4:3b:e9:dc:0f:3c:48:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:51:AA:C3:0D:5A:55:B4:BA:73:01:68:AB:A5:CA:ED:E8:B3:AD
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:72:7a:15:cb:57:b1:48:f7:ed:f5:4c:8e:31:8a:ab:fd:f8:
a8:0e:c5:d5:dc:09:c0:9f:f8:f4:82:3e:75:a1:0c:3c:c8:2b:
34:d4:17:9d:a7:02:d9:f9:30:bf:07:b1:12:a5:6b:5e:42:2b:
26:07:3e:93:2b:6b:85:05:15:a3:7f:54:72:35:ee:ac:d6:30:
f7:60:c5:b9:1b:18:81:93:1d:31:30:6a:89:2b:9c:6d:8f:eb:
59:28:07:bf:ab:d4:76:34:7d:fa:29:ce:48:fe:de:bc:7f:ca:
ff:b8:28:31:46:46:c5:e8:09:91:5c:9c:0b:5a:00:7c:34:5d:
3a:08:ca:23:f6:e1:29:7d:5d:ca:8b:31:e8:45:a8:7b:87:30:
49:62:ad:f8:00:90:e7:94:bf:0a:54:a7:f8:66:cb:17:cc:80:
05:f1:76:3c:45:72:c8:88:e8:51:4a:a0:b2:81:15:31:0f:f5:
1d:c8:25:60:f0:9d:86:a0:9f:b9:df:ca:52:bf:f3:32:37:5f:
12:34:0a:42:aa:78:0a:82:4c:fe:c9:0d:c6:38:3d:77:05:f3:
62:26:db:62:67:32:72:28:8b:94:84:ef:b8:f6:78:49:32:7d:
f8:aa:b3:5d:88:db:92:ee:b6:c9:cd:d3:e8:25:80:73:77:61:
cc:ad:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:04 2025 by rpki-client