Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: 51O3anxlR9YDC0nwGINgtNqLXwHQJDQu2xyebCfU7io=
Subject key identifier: 68:45:70:F4:D4:FB:D5:40:AE:17:74:48:47:A8:32:0F:C4:E7:43:E3
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 0196B0698AA21A3CDDF24470A3B6B1D05C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 1458
Signing time: Thu 08 May 2025 15:00:28 +0000
Manifest this update: Thu 08 May 2025 15:00:28 +0000
Manifest next update: Fri 09 May 2025 15:00:28 +0000
Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: sxYNfc3CFbMSqLDqnYQUIg9tUyiy/HOK667MG+YXInk=)
2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:8a:a2:1a:3c:dd:f2:44:70:a3:b6:b1:d0:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: May 8 15:00:28 2025 GMT
Not After : May 9 15:00:28 2025 GMT
Subject: CN=684570f4d4fbd540ae17744847a8320fc4e743e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a4:f3:ec:0f:c0:9a:ce:fb:8d:6b:0f:48:e3:
27:0b:e2:41:43:64:c3:98:2c:84:45:bb:32:ce:8a:
60:59:ac:12:7b:7f:b7:1c:b2:11:53:51:b8:c3:46:
36:0d:4d:75:c0:38:bc:8e:d8:f3:b7:ac:ef:52:b4:
06:d5:ac:eb:3c:dd:75:0e:2b:0d:7b:c8:13:40:3f:
cb:9d:2e:d6:cf:03:50:e4:a0:08:d2:75:0b:72:5a:
4c:6d:cb:a9:92:37:1e:0e:47:17:31:a9:e3:ae:33:
27:1c:43:ad:51:1b:15:77:9d:11:73:8f:69:30:d4:
38:55:1d:ef:56:8a:8b:7a:2e:93:ad:46:51:c3:6a:
71:86:1b:2f:26:c6:dc:d0:06:fd:f2:a0:94:ac:0d:
4d:14:58:5b:72:c1:47:25:2e:f4:10:1b:43:3d:42:
7f:df:cc:c0:cc:76:0c:da:f3:db:52:b7:03:10:5a:
53:fa:f9:4e:5e:ad:24:23:67:c5:1a:71:cc:1d:5b:
b8:eb:5b:40:b4:b7:bf:33:f8:6a:a9:9c:51:aa:6e:
67:c4:ad:9e:3c:a8:b6:71:bf:29:ec:1e:af:93:d4:
b5:58:f7:61:08:63:a2:bd:e2:3e:af:18:8a:d3:75:
0b:3e:fa:32:b4:56:bc:de:f7:1a:fc:a2:9d:19:3e:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:70:F4:D4:FB:D5:40:AE:17:74:48:47:A8:32:0F:C4:E7:43:E3
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:79:64:83:c3:5c:d1:76:1b:7b:26:c8:52:d5:bc:cd:cf:61:
ed:52:c5:a9:33:53:f4:05:a0:0a:17:45:f4:ba:e5:b1:4a:54:
87:b5:23:8f:95:59:f9:55:50:2a:fe:3d:65:93:16:ff:5c:ae:
e9:78:25:99:3a:94:c1:ef:33:9a:09:dd:6b:5b:00:90:54:7e:
0d:b0:16:d6:1e:bd:bd:80:ed:75:f0:15:76:42:8d:75:bd:da:
69:07:2a:10:c2:37:ac:c7:53:56:b0:57:16:36:25:67:32:ea:
ab:27:ed:4d:84:1e:b9:05:41:d2:4f:2f:a2:12:19:58:e7:c9:
40:d5:93:5e:52:83:1c:a0:9c:ee:7f:21:6b:a3:dd:3f:69:c9:
f2:0f:3f:ab:50:dc:7d:4a:4c:5b:6b:c7:d8:3d:18:cc:f9:73:
41:06:00:8f:b2:b4:39:bc:dd:b8:f7:e2:13:2e:93:df:2c:18:
70:4e:c2:45:cf:34:f0:f4:27:8c:e3:75:ba:0f:aa:f7:2c:1c:
d3:36:22:b8:dd:99:5c:ec:12:d4:2d:ee:31:12:f6:08:28:35:
a5:97:0d:80:b2:24:68:86:f2:9a:8a:37:42:34:b1:20:31:1c:
d2:fb:0d:de:a0:aa:1f:fe:11:e0:c1:f1:3d:39:2c:bc:6c:85:
a2:dc:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:26:22 2025 by rpki-client