Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier: aeBCZ17lzaGaQnlpzsN4mnhG7lXk5pYd890INPUy8pI=
Subject key identifier: C4:0F:17:3C:13:2F:C4:F7:A3:2A:D0:C0:6D:F4:72:FA:60:A1:25:8D
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial: 019682B50FD2BD0204FC86ABDF5DFC006DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number: 0406
Signing time: Tue 29 Apr 2025 18:00:26 +0000
Manifest this update: Tue 29 Apr 2025 18:00:26 +0000
Manifest next update: Wed 30 Apr 2025 18:00:26 +0000
Files and hashes: 1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=)
2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: HsxkSIgSuM1w95/pHu7Ra4NwE9W5PZ4yTCTePCSBrKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:0f:d2:bd:02:04:fc:86:ab:df:5d:fc:00:6d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Validity
Not Before: Apr 29 18:00:26 2025 GMT
Not After : Apr 30 18:00:26 2025 GMT
Subject: CN=c40f173c132fc4f7a32ad0c06df472fa60a1258d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:a8:d2:ab:a6:b4:05:f2:9d:90:36:2f:b9:
17:f8:98:c4:63:59:fb:aa:a4:c1:7b:d8:dd:39:04:
9a:e5:a3:95:50:21:24:e8:82:41:be:fb:1a:bf:57:
fd:89:b5:d5:ff:c4:ec:14:09:92:4b:aa:f2:3e:98:
fc:fd:96:8d:0d:4e:e7:57:12:58:5e:64:35:36:1b:
c2:92:d9:40:9f:69:5f:58:c6:b3:42:7e:bc:5a:b9:
df:cc:f5:00:58:cf:0b:1a:2a:ce:f2:92:03:36:48:
78:1c:a6:ca:ed:ae:fb:c7:77:fe:2d:3f:16:49:95:
03:8a:50:d7:4a:7d:a9:b2:d0:cb:00:e0:19:74:06:
9d:33:e8:9c:5e:fd:90:1a:a1:69:13:d9:94:54:5d:
59:7b:f3:32:48:86:7d:4a:01:21:0c:b3:31:6c:3c:
17:00:5e:a5:9b:ee:3d:ad:44:11:2c:3f:55:ea:61:
2c:0d:96:e3:6f:cf:81:23:5a:16:8f:d6:6c:b2:dd:
0f:a1:23:aa:cf:27:3e:df:53:7d:8a:9d:98:e8:7c:
65:82:44:c3:17:60:31:e1:de:aa:10:74:32:ff:64:
1f:03:df:eb:a1:29:af:6f:73:56:a5:aa:da:8d:aa:
5f:4f:49:ba:06:70:9c:38:a8:23:35:ca:cd:fd:d9:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:17:3C:13:2F:C4:F7:A3:2A:D0:C0:6D:F4:72:FA:60:A1:25:8D
X509v3 Authority Key Identifier:
keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2b:d8:3d:66:69:57:30:0a:c3:df:d9:c8:5d:c2:00:53:83:
29:51:23:99:9d:71:40:f0:b2:77:61:7b:c5:d9:9b:73:98:31:
29:6f:f4:fb:eb:b1:3a:3a:2d:87:96:44:a3:41:f6:46:33:89:
23:77:53:0f:fe:51:21:2d:92:e9:78:be:6f:f5:0f:89:02:64:
b4:62:40:d1:6f:8e:30:cd:e3:7f:eb:e7:87:04:6d:0d:61:5f:
38:a7:6c:5a:fb:74:e3:dc:d0:67:ee:eb:65:e8:85:de:7e:7c:
da:4c:e5:f4:0a:be:17:0d:57:2c:36:4d:17:5f:75:65:3f:70:
1b:08:3c:41:6e:e4:01:c8:64:ba:12:41:9e:d1:0c:64:f8:42:
29:40:18:6d:28:86:52:65:26:bb:cc:23:a2:f8:a8:68:34:50:
87:a6:4d:39:8a:a5:6c:ef:f2:d4:df:d3:12:da:e6:53:66:a4:
10:11:61:09:76:8d:ab:36:aa:03:8f:5c:55:d9:57:3b:c7:aa:
e0:18:f9:09:5d:be:d2:36:6f:da:43:6a:fb:3f:2a:5c:ad:de:
1d:e3:93:31:5c:31:86:6d:75:a9:d3:e7:df:24:c5:b2:d7:f4:
7b:aa:d3:6b:4e:3a:95:f9:5e:87:b2:6e:04:b6:7b:06:73:d5:
2f:a2:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:19:00 2025 by rpki-client