Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier: f9xStAKduN1xtqCLUZwM/eWl/nOrel55MuqZg37ljIQ=
Subject key identifier: D5:BD:6F:47:0A:95:A3:7A:04:63:52:55:C7:7C:A5:2E:C2:64:69:01
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 01968F95A927CBCDB7EBAF9AB1AD0C8339C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number: 0159
Signing time: Fri 02 May 2025 06:01:11 +0000
Manifest this update: Fri 02 May 2025 06:01:11 +0000
Manifest next update: Sat 03 May 2025 06:01:11 +0000
Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: rfmKKoKA48sPdwWNLLGJNDzQFXEM7RL84Mh1edA7zfw=)
2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:a9:27:cb:cd:b7:eb:af:9a:b1:ad:0c:83:39:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: May 2 06:01:11 2025 GMT
Not After : May 3 06:01:11 2025 GMT
Subject: CN=d5bd6f470a95a37a04635255c77ca52ec2646901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:e6:97:18:42:ff:ab:4e:25:07:58:65:e5:
69:f4:bd:ab:be:0c:9b:98:a5:3b:bd:c0:06:53:b4:
99:fe:f7:11:ea:a7:22:40:42:dc:00:18:85:bc:0b:
b4:1d:3a:4f:22:8f:f2:7f:4b:5b:dc:62:89:32:fd:
83:dd:71:fb:9d:c8:99:d9:b6:43:e3:84:a7:14:b4:
06:bf:08:7c:9c:3e:7e:f4:39:a3:52:50:6b:7a:f7:
11:56:35:1c:0d:a1:6b:0e:cc:3c:95:9c:a7:5f:2c:
eb:3d:71:f3:a9:fe:19:fa:1b:e4:da:2f:ba:a7:ce:
b9:c0:9c:ec:c5:43:2f:7a:5d:a0:97:1c:69:37:1d:
bc:f7:2b:c7:bb:47:2f:81:c3:98:c9:80:04:2b:d0:
e6:70:d4:5a:88:71:c4:37:7b:d9:3d:76:77:a2:09:
16:f5:63:cc:74:0b:64:23:d6:b7:74:de:75:f8:6b:
d5:61:0c:6a:40:40:62:24:70:48:9b:e9:12:71:9d:
4f:db:64:50:c5:74:d8:e1:2c:68:a7:12:86:5a:ca:
76:62:ad:cb:b2:e9:5b:a6:35:2f:c3:0c:9c:27:f0:
84:54:78:94:5f:31:59:42:52:80:62:26:78:d6:4a:
3c:85:4e:e7:36:16:50:f9:f3:7a:d6:ca:19:d8:3e:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BD:6F:47:0A:95:A3:7A:04:63:52:55:C7:7C:A5:2E:C2:64:69:01
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ae:93:aa:a8:a2:f7:b1:2c:70:4d:91:fe:c0:e7:09:54:56:
d4:66:c5:3e:c0:59:57:ab:4a:3a:74:9e:b6:80:5c:bf:4f:cf:
2b:7e:52:52:54:4f:c1:7d:d7:4d:98:b3:c6:0b:a7:1d:3e:27:
f1:51:cc:ca:0c:2c:de:f9:ef:d1:b1:a4:6c:bc:b0:f5:92:13:
de:12:4a:25:b9:d4:a8:74:f6:1e:6a:97:5e:eb:fa:78:3d:c1:
d1:5d:e4:ed:8e:8e:2e:d3:af:a8:52:bd:c8:93:69:fd:88:dd:
fd:55:52:35:ca:5b:0e:f6:5d:fe:f5:e2:df:1f:de:3a:d1:af:
a7:85:14:e4:7a:8c:bc:4f:0e:ba:45:4e:ea:cb:d6:3a:50:4b:
be:ab:82:0f:41:c2:55:9f:cc:da:21:08:c7:a7:68:eb:ba:87:
9e:bb:c0:0e:72:9f:64:60:74:ba:77:08:1e:c2:66:db:f8:45:
3e:ee:51:fd:7e:23:eb:eb:7f:7a:37:d3:91:95:99:a1:ff:c7:
44:30:ad:8d:23:d9:c1:37:c5:e9:cc:32:b4:0b:46:00:f5:3d:
2e:87:68:13:3a:80:38:52:15:ad:94:86:d5:31:83:84:b0:63:
41:c5:b8:ce:4c:7c:85:57:ef:41:82:ca:fc:3c:bf:16:5d:f3:
1f:de:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:59:12 2025 by rpki-client