Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: aFEnfTCKQl5BxxJ+JE3lcAUIgM+W83HnaGiHwNh8iVk=
Subject key identifier: 93:08:53:3F:A1:30:F5:5D:E5:C7:5D:34:0A:A6:A2:46:D4:8D:CA:C2
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 01967E34219669B0914A05F767631C6FDBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 21:01:07 +0000
Manifest this update: Mon 28 Apr 2025 21:01:07 +0000
Manifest next update: Tue 29 Apr 2025 21:01:07 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: Xz0a/JY3jYkkH0WFYUbD4wwK0w9+gRmyKaXP7nExR4w=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:21:96:69:b0:91:4a:05:f7:67:63:1c:6f:db:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Apr 28 21:01:07 2025 GMT
Not After : Apr 29 21:01:07 2025 GMT
Subject: CN=9308533fa130f55de5c75d340aa6a246d48dcac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:e0:74:db:10:e8:6c:81:59:1e:0b:9d:2b:
a8:39:c6:c3:82:1a:db:30:ee:34:94:d5:7e:de:a5:
76:d2:c5:fb:f6:f4:46:f0:96:c8:3f:69:23:a7:af:
d4:a2:a1:e2:6a:a8:44:6e:56:f9:d5:9a:68:9e:f8:
81:80:fb:c8:21:4d:b5:65:f5:6a:64:c8:d4:51:9e:
ed:a0:0b:39:dc:90:b0:46:95:22:6f:9a:3d:3b:2c:
57:56:44:cf:a0:39:64:3c:52:5a:21:43:ea:27:1f:
dc:77:9c:a2:0b:cc:17:31:da:63:df:46:d3:79:82:
76:74:af:04:20:83:35:ea:01:09:b9:f6:9b:8e:6a:
d3:1b:6b:0d:99:14:dd:58:39:90:8d:db:02:74:71:
d5:02:91:1b:13:d7:c4:cf:8a:c8:47:76:ee:f5:19:
78:81:c6:b3:98:f7:7e:c8:aa:e7:03:79:32:71:ae:
7e:1d:eb:d9:a3:22:03:3f:5c:07:d0:fa:6a:7f:40:
d7:fc:25:99:b2:b5:77:12:5e:88:48:db:19:72:5e:
f6:e2:fc:cd:af:84:1f:f0:8d:4f:f8:bc:b3:5a:09:
3b:1e:83:ed:77:20:27:a5:0b:b3:9f:91:7f:3f:fb:
4f:b4:a2:38:99:5c:e8:41:e9:c9:e8:f1:68:b7:bb:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:08:53:3F:A1:30:F5:5D:E5:C7:5D:34:0A:A6:A2:46:D4:8D:CA:C2
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a8:96:02:7b:f7:02:29:67:e6:b4:4e:c7:3e:85:20:31:cf:
1f:be:89:b9:78:47:c0:a7:65:1c:b3:fb:19:ff:ab:38:f6:71:
d5:44:1e:31:4c:f4:85:5c:bc:80:34:c4:e0:28:29:54:d7:14:
e5:a9:97:db:f9:aa:ab:c3:ed:dd:47:a8:e5:3f:93:97:f8:bd:
e5:ef:9e:b6:17:30:b1:fe:d2:82:c7:2b:30:a6:3b:cc:b0:08:
73:2a:26:aa:9c:92:e3:71:cf:68:86:35:52:d0:c8:58:5d:63:
f4:55:c1:66:9b:f6:ff:b3:49:44:aa:e1:b4:91:40:a0:4e:89:
60:6a:bd:8e:e3:ee:60:48:a7:e0:d3:82:39:a8:b6:c5:ee:ca:
6f:26:9a:f1:37:ea:d8:b8:f0:9a:a8:31:a5:85:1f:bf:30:4f:
34:ee:06:f8:89:ee:2f:93:a4:3c:7c:b7:78:96:ad:11:62:56:
b7:f4:24:04:07:7c:92:7a:bf:b3:9b:6b:aa:79:f9:0a:ee:d6:
6c:71:08:51:2e:4f:ae:cc:f9:59:4f:ef:df:7a:e2:c5:9a:ac:
38:77:42:dd:53:2e:7b:38:11:26:78:6f:5f:f5:4f:e1:14:4d:
a4:9d:2e:01:e5:12:ad:12:6d:45:33:93:3c:2a:95:11:d5:47:
9e:be:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:45:14 2025 by rpki-client