Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: 3kAefNfFDcYj0ADZjkr7cgUbuFFEpaJmbbWgGP+clFU=
Subject key identifier: B2:E9:17:26:E3:A9:5C:02:35:B3:F7:C7:F6:41:3E:4D:DE:C9:20:51
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 01967831680CD33EC664448F2487FB3CDBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 018F
Signing time: Sun 27 Apr 2025 17:00:25 +0000
Manifest this update: Sun 27 Apr 2025 17:00:25 +0000
Manifest next update: Mon 28 Apr 2025 17:00:25 +0000
Files and hashes: 1: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: uXghD0sgzGlIOt8G2SKsVLzr5JnGNIFJH4sDcD7OQLA=)
2: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
3: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:68:0c:d3:3e:c6:64:44:8f:24:87:fb:3c:db:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Apr 27 17:00:25 2025 GMT
Not After : Apr 28 17:00:25 2025 GMT
Subject: CN=b2e91726e3a95c0235b3f7c7f6413e4ddec92051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:92:13:b1:a3:e1:6b:c8:26:81:88:81:df:
69:da:cb:8e:02:a4:40:3b:72:79:b0:70:a4:16:c2:
a5:99:7b:f8:78:71:45:12:2a:bb:fc:71:4e:8d:75:
9b:6b:40:3b:f8:80:39:e3:c8:d8:58:ca:89:5e:2e:
ca:33:7d:b3:05:a6:22:bd:20:26:1d:bb:e9:a1:b1:
53:ab:87:9f:27:ec:05:39:1e:81:24:31:30:20:5e:
4d:d1:a3:5a:ac:46:62:59:e8:31:fe:7d:10:78:b2:
5e:ba:0b:bf:38:a1:6d:ff:1f:b4:1c:f5:40:4b:a6:
ba:0e:82:fc:58:9c:a5:bf:2c:5e:78:3a:5b:0e:13:
fb:11:f8:b1:d7:31:1f:0e:ea:48:57:7b:b8:44:08:
2a:8d:8a:8c:38:b8:29:97:be:f8:5b:ff:66:04:d5:
53:b8:2f:13:e0:c5:0d:ed:e4:5c:4f:a7:cd:54:d3:
ad:68:c9:9f:c3:26:ce:a1:c7:4e:cb:f1:e9:5e:87:
aa:22:7a:52:a0:82:2c:4a:51:59:fc:ab:6a:f4:c2:
7e:94:9a:09:7d:27:8e:34:dd:f2:49:45:08:09:2b:
c4:44:4e:31:9b:63:8a:e5:72:95:14:7e:8f:89:19:
fd:44:a9:8b:dc:97:74:3f:c5:aa:b9:c5:15:54:78:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:17:26:E3:A9:5C:02:35:B3:F7:C7:F6:41:3E:4D:DE:C9:20:51
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1d:a0:43:49:9c:da:fe:b7:5d:6e:6f:7e:92:9f:a5:8e:2a:
71:df:26:b0:41:e3:63:3e:db:c4:90:1f:f8:d7:22:bd:a4:00:
b5:59:c3:05:22:86:ab:b1:21:08:e1:43:a7:db:19:f4:ee:a9:
37:ec:88:4f:67:94:4a:a1:9a:fa:32:f3:ff:f4:d6:5b:5a:11:
16:30:bf:7f:49:88:b3:94:ae:96:02:76:97:88:2e:73:92:ff:
b9:57:7a:44:68:f7:7a:b1:03:dc:b2:79:e8:d2:11:b1:9f:b0:
1a:88:05:1d:83:49:d4:0d:8f:ab:8d:e2:d7:60:c4:5c:18:78:
a3:d5:bf:3e:2f:d7:d3:00:6a:94:e0:99:21:bd:87:1f:4c:97:
4d:10:5c:31:64:84:22:ed:b2:13:ca:e2:a6:09:91:f5:8b:24:
c2:1c:ff:b9:6a:38:e1:c2:08:43:eb:eb:14:e8:d8:81:c5:65:
b8:23:7b:e7:76:77:24:a9:97:52:e5:d0:8c:01:3e:39:09:08:
c1:05:df:2e:cf:ac:3d:63:d7:a4:c9:f9:9e:0d:e6:d0:1c:77:
38:ef:46:8d:d0:b2:ee:a6:4c:2d:fb:fa:fd:d7:5b:68:67:8d:
b7:d9:d1:08:3d:69:08:50:5d:d2:51:45:25:9e:18:4b:96:af:
b2:64:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:40:18 2025 by rpki-client