Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: vfbcQk1iAx0g/CiCpr78rhs/0/IA5fZVnXrrK1R2/eg=
Subject key identifier: 43:99:45:70:9F:BE:63:26:74:87:4A:94:A1:D6:46:14:BB:DD:7A:7F
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 0196783194E0EA0E33D58D5C4AABD3197C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 05D7
Signing time: Sun 27 Apr 2025 17:00:37 +0000
Manifest this update: Sun 27 Apr 2025 17:00:37 +0000
Manifest next update: Mon 28 Apr 2025 17:00:37 +0000
Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=)
2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: 0ECZZQI0XVGF7oQjk7lmYDOpMuCm2FRJe14tN1Snz4k=)
4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:94:e0:ea:0e:33:d5:8d:5c:4a:ab:d3:19:7c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Apr 27 17:00:37 2025 GMT
Not After : Apr 28 17:00:37 2025 GMT
Subject: CN=439945709fbe632674874a94a1d64614bbdd7a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:60:1c:f2:47:f3:22:55:46:b1:15:68:1d:
86:b7:e4:56:bc:ca:85:ea:b9:04:8f:f6:e0:2c:8e:
d7:c1:0a:93:71:9f:29:ff:98:e8:70:f6:27:4f:31:
e9:c9:99:cf:70:80:a6:17:2f:1a:0d:0a:04:21:c6:
52:fc:53:eb:e2:c0:29:cf:e2:32:8c:26:a0:8c:4e:
b9:9a:14:7f:80:cb:72:e5:bb:10:8d:62:d7:bd:22:
63:a8:cd:60:e9:e3:93:cd:05:ec:d8:c7:98:80:09:
99:eb:0b:16:74:c4:17:c1:db:0f:1e:6b:02:2f:14:
a8:60:8e:1b:43:7b:94:7e:79:d2:c6:17:12:a0:d5:
83:60:6a:75:a3:0f:d6:1a:29:71:d0:38:1d:dc:3d:
aa:c6:2a:9e:a9:58:5c:32:50:b6:c8:68:42:35:bc:
3a:87:e9:e1:97:a3:8f:3e:77:ad:51:b3:0f:78:d6:
a9:42:01:46:30:5c:3c:a4:84:55:7d:6f:fa:6f:73:
e1:2a:02:51:a5:19:38:38:16:68:75:ae:ed:c4:3e:
3a:89:0c:df:ef:2f:63:eb:ed:0c:57:fe:9a:87:ee:
b3:4b:f3:05:33:48:75:b6:b4:84:6c:3c:0c:5e:24:
f7:7e:22:58:ad:c4:22:05:2a:70:df:89:1b:29:97:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:99:45:70:9F:BE:63:26:74:87:4A:94:A1:D6:46:14:BB:DD:7A:7F
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fd:47:35:e6:12:82:5b:89:d1:b5:0c:97:1d:af:ac:01:54:
3e:3d:25:ee:71:df:53:0d:83:34:17:0a:55:03:57:cb:9c:84:
86:c3:3b:07:f8:3e:b9:6b:69:3f:e2:e4:bb:93:4b:fd:f4:f0:
9e:dc:6f:0a:4e:f1:21:e6:6d:88:7a:e6:03:55:b1:9d:df:f8:
c4:c9:25:fc:6b:5d:b7:29:7d:29:9d:e7:a9:03:85:78:ab:26:
57:01:05:f0:0b:5a:37:11:2c:bd:2f:31:5e:d3:bd:87:b9:ce:
4b:51:1f:75:8e:d6:2c:bc:f5:8c:9f:1c:c2:d4:05:f8:79:69:
d1:97:9a:1a:2c:ce:64:51:80:53:11:0d:e1:81:53:18:fe:89:
c9:f8:f0:63:f4:0a:36:d5:a2:e5:74:07:b9:26:4d:00:67:7f:
1e:2a:40:7b:ef:4a:f5:f7:e0:a1:5c:a6:8d:fc:d4:4a:2d:ef:
e3:63:36:be:a6:40:3d:ff:68:88:4c:e4:3b:93:2a:e0:34:9e:
73:a2:6e:aa:0e:4d:94:cb:94:60:fd:58:15:f4:8a:32:54:3d:
1c:62:65:17:b5:07:80:61:55:19:6a:d2:28:c5:42:c4:d0:67:
fe:79:d9:45:c4:c0:39:b9:03:f3:0a:b0:f4:58:37:9e:b9:51:
f5:7e:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:06 2025 by rpki-client