Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: qY0bwtZot+E9Rs4ZSt3MFlA6DLl/twOLBJVYQJdeCnA=
Subject key identifier: 74:36:B0:50:E2:1E:27:19:EC:42:8C:87:1B:FA:53:2E:C9:82:DA:B9
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 0196ACFAF10EAEFEB0BDE91361C98FBFE2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 12A4
Signing time: Wed 07 May 2025 23:00:48 +0000
Manifest this update: Wed 07 May 2025 23:00:48 +0000
Manifest next update: Thu 08 May 2025 23:00:48 +0000
Files and hashes: 1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: icfVxuA3Er0bVUX5YVjpkWFRo75+a2UsI2w0+3egSyY=)
2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:f1:0e:ae:fe:b0:bd:e9:13:61:c9:8f:bf:e2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: May 7 23:00:48 2025 GMT
Not After : May 8 23:00:48 2025 GMT
Subject: CN=7436b050e21e2719ec428c871bfa532ec982dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:9e:1d:4d:d6:4d:58:16:76:59:b3:03:f5:
c9:37:75:9e:25:e6:c8:16:53:9e:23:74:7f:b0:35:
1e:55:df:e0:8e:3d:a1:7b:73:91:0e:3b:f5:2f:e7:
80:d9:e2:f2:77:6c:77:ef:2c:41:77:c1:6f:4e:95:
6f:80:ac:83:04:91:38:80:96:1f:26:77:cb:18:32:
ea:a3:c3:8c:0d:4e:9b:5e:34:ec:ab:af:4b:f9:59:
b3:55:0a:1a:e5:09:b3:b4:22:d3:9f:15:79:0e:bb:
03:1f:e1:c9:b2:a5:d2:90:2a:5d:82:d4:29:9a:c7:
ca:7a:3c:2c:8f:a4:63:58:32:97:9a:76:84:d0:c4:
05:5e:ea:60:af:48:7b:82:77:41:64:1e:f0:20:cf:
b9:16:68:be:c1:40:66:4f:10:d8:a4:1c:21:61:16:
75:9a:92:f3:c2:56:99:cb:e1:50:17:e2:27:ad:aa:
f1:40:25:79:1d:43:3c:57:14:1b:7f:c6:53:75:d4:
d9:b4:bc:1f:47:d6:16:8a:88:91:2f:ee:33:6a:e4:
7c:8a:7e:f0:a3:f2:ae:3f:fc:75:b1:59:7b:01:e2:
c9:bd:ef:43:9f:ba:11:1d:77:b7:99:b4:b2:80:0a:
51:82:9d:c2:00:d9:2c:2a:ea:0d:9e:28:38:63:55:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:B0:50:E2:1E:27:19:EC:42:8C:87:1B:FA:53:2E:C9:82:DA:B9
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4b:17:83:42:a9:e5:08:48:0b:42:61:34:9e:0c:e7:b8:71:
c2:2c:95:fe:c8:ab:0a:4e:e9:cd:6e:40:06:fa:72:f7:0b:f9:
dc:98:07:23:33:05:75:76:9f:41:c7:89:0b:95:0b:58:77:5d:
f7:4d:bf:69:c3:68:cb:c5:cf:76:72:0c:0f:e9:2c:6c:05:b6:
dc:f2:44:fc:d8:44:fc:3c:08:16:2f:b0:5f:62:0e:c1:72:39:
9a:ce:0d:45:6e:d8:fe:6f:08:2a:10:04:ca:99:5e:4e:f3:31:
6e:09:7f:ba:7a:14:c1:67:c9:e8:f3:01:a4:63:d1:8b:d1:f9:
90:1f:03:cc:cb:98:af:45:cb:db:c9:80:e8:ac:c9:00:38:b2:
45:66:41:d2:83:ca:83:1b:96:db:fd:9e:a9:0f:2a:d2:ff:27:
65:e8:1d:f0:f0:68:0f:6e:1d:31:33:60:e3:24:27:c8:f8:4e:
2c:f0:5d:6c:bc:ff:ac:40:d4:ac:cb:ac:81:7e:29:29:7c:83:
88:75:26:9a:f0:42:b9:c1:71:27:7f:51:f2:ab:d1:cf:a9:7f:
57:61:f7:34:b7:93:81:8d:0a:69:96:33:e4:ef:1b:66:46:f4:
51:68:9e:e3:27:d5:2b:51:c0:22:5e:ab:33:1d:f4:48:64:bf:
7e:7f:d8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:40:37 2025 by rpki-client