Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: gxYyWgri28XZNiK9l/Ce/sdMfhymR/zu+ICEllG29/Q=
Subject key identifier: 1E:1D:DB:06:55:F9:E7:D0:41:39:31:68:7B:AB:47:86:A6:E9:9D:73
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01967C0DF34D7BB59F8294032B6F0D97FD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 03B4
Signing time: Mon 28 Apr 2025 11:00:11 +0000
Manifest this update: Mon 28 Apr 2025 11:00:11 +0000
Manifest next update: Tue 29 Apr 2025 11:00:11 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: MEpOllsXUxzHFq0EnQespSc36JYTuiNODP1tHEzmXC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0d:f3:4d:7b:b5:9f:82:94:03:2b:6f:0d:97:fd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Apr 28 11:00:11 2025 GMT
Not After : Apr 29 11:00:11 2025 GMT
Subject: CN=1e1ddb0655f9e7d0413931687bab4786a6e99d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:78:85:e7:53:f8:a7:45:c3:07:f2:d8:71:
7f:80:07:87:20:7e:07:ce:b2:09:d8:93:ce:71:01:
94:68:48:36:14:c5:b3:f2:df:9d:00:30:fa:a7:df:
6e:22:9e:9e:bd:e3:2f:84:41:e9:24:9b:e0:91:09:
11:be:5b:b0:d6:c3:00:e6:40:f2:5e:ea:40:d7:31:
63:2c:c7:ad:8a:07:5b:77:ba:30:c8:6c:57:a1:07:
45:20:0f:16:18:d8:66:ca:0c:6a:94:8f:5b:de:c9:
9f:7b:75:c9:47:d7:99:73:bd:9e:e8:9a:42:03:19:
d7:5b:72:0b:ba:d0:f0:28:e6:dd:b5:61:82:fd:61:
2e:12:5f:75:99:5e:3c:a1:ab:dd:96:99:a1:1c:48:
6d:11:ff:88:c6:37:4b:f6:29:62:64:4e:eb:b9:ca:
d2:70:41:ec:ca:5d:e2:a5:f0:27:82:b9:e3:b6:f0:
2a:7e:0b:c5:05:ab:1f:17:c7:0c:56:40:db:96:e1:
05:f5:45:c1:e5:7d:2b:08:ab:3e:f9:88:14:99:e9:
62:f4:81:51:df:c2:73:50:6c:e3:8f:95:34:02:1b:
eb:55:66:a9:c0:4e:ed:73:30:d3:80:69:e3:53:24:
4e:24:12:e8:81:00:7d:c4:65:c8:c0:15:8b:cd:7c:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:DB:06:55:F9:E7:D0:41:39:31:68:7B:AB:47:86:A6:E9:9D:73
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4c:4e:5f:76:50:72:6b:2a:12:f2:8d:9a:43:68:05:e1:1d:
3f:b9:61:7b:5d:d7:d4:ec:6a:3b:70:17:6f:0d:15:cd:93:a5:
a0:80:d7:84:3d:6a:3a:d5:6c:46:c9:93:2b:66:80:08:31:2e:
45:81:fc:10:e1:4b:8e:99:e6:59:db:7d:77:42:ea:47:dd:64:
e9:7f:1b:cd:b7:11:24:a3:a9:e0:56:e9:cc:e4:36:62:b1:f4:
7d:12:05:43:d4:09:5f:55:2b:69:88:f2:11:ee:72:fc:a8:37:
e6:9d:4b:3e:8c:fe:50:2d:ca:ab:5d:2c:6e:6e:a1:44:41:44:
7d:b7:e1:bc:35:2b:b2:7e:80:c5:4c:e7:7f:36:b1:ce:50:bd:
cc:43:67:6e:95:a8:ef:72:b0:a4:44:72:8a:b5:c5:02:29:1d:
3d:55:52:6e:67:94:1f:1e:12:3e:83:4e:83:e0:01:01:92:3f:
55:cf:64:bd:2d:16:7d:ca:04:e1:7b:e7:af:f2:bc:c5:de:ba:
ec:9a:ea:7c:46:6b:3f:d1:4c:c8:de:0f:23:14:1a:a8:07:79:
0e:46:df:3c:c8:e4:ca:21:17:9f:5c:8f:f8:04:8b:82:03:dc:
0d:d0:6f:d4:c0:fb:05:34:39:97:43:e2:fc:f4:20:ab:78:a8:
1a:fb:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:37:06 2025 by rpki-client