Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: 8WJfejvMlXiJhr2ROzoFE/gGjNwx9o2ktVe4bRrvPfU=
Subject key identifier: 7B:71:4C:52:70:A3:A1:E0:9F:D2:D2:6A:74:E0:C3:63:AF:E8:37:5D
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 0196CD988B67654106E31B0068DBBA0EA89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 07:00:48 +0000
Manifest this update: Wed 14 May 2025 07:00:48 +0000
Manifest next update: Thu 15 May 2025 07:00:48 +0000
Files and hashes: 1: 1-9Z39awtCUNqeCcuYwIOQubEoEY.roa (hash: AJvelHrJ42adBWeCqNbgdbqaGB/A4YMI32J/x3+LlBI=)
2: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: T+KfJDcBKmNVsGd3SS1kqvdqQ+Vmm7LCshTx6gcpF/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:8b:67:65:41:06:e3:1b:00:68:db:ba:0e:a8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: May 14 07:00:48 2025 GMT
Not After : May 15 07:00:48 2025 GMT
Subject: CN=7b714c5270a3a1e09fd2d26a74e0c363afe8375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:0a:0d:5b:4e:4c:b4:9f:4e:ba:12:24:57:
bf:61:ae:f9:35:78:bd:50:f3:75:c1:47:db:ed:f3:
28:21:81:f2:87:55:3a:5a:10:b4:34:b5:f6:d7:7a:
ff:d7:89:7e:c0:5d:bd:39:3e:36:46:d7:91:d4:14:
1c:ec:a9:9b:ce:60:40:ab:c6:d3:39:94:d6:be:1b:
14:7d:0f:fc:01:f6:c8:c3:cb:a6:00:30:94:f1:b3:
78:e7:d4:7d:02:2f:49:0a:94:9d:ee:fa:df:ec:fe:
eb:86:0f:a6:50:16:70:60:51:75:f0:a0:cf:16:e3:
ce:cf:1b:19:5f:2c:ef:5c:44:c3:a1:f6:5d:65:f6:
b4:48:86:81:b6:63:e5:42:aa:93:20:0d:68:2f:b2:
4d:fb:bd:04:6f:e0:2b:35:7c:fb:68:52:3a:cf:ca:
fe:d8:6c:73:80:6e:68:fc:67:44:33:97:fd:3b:e1:
50:e2:1c:19:4c:37:ae:d1:88:9b:f6:45:02:95:16:
f5:dd:17:99:9b:59:23:8c:32:01:ef:b7:ce:ef:cf:
f8:e1:3a:74:3e:52:3c:53:8b:2f:23:06:4c:0b:a6:
2c:b6:e3:a2:ef:e3:9c:63:cc:13:ae:1a:ee:36:69:
47:20:f6:ef:33:52:c3:58:7a:43:de:17:bb:39:96:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:4C:52:70:A3:A1:E0:9F:D2:D2:6A:74:E0:C3:63:AF:E8:37:5D
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ed:d9:21:98:4a:3f:55:b6:ae:b5:2d:44:97:26:a1:f3:80:
1d:e1:fa:42:d8:90:6d:c3:a5:0c:f9:77:28:01:1b:bb:89:55:
f4:36:3e:d1:d6:41:8b:65:37:b3:54:a6:d0:7d:c9:8e:fa:9a:
78:9e:2a:ad:7d:32:b1:69:68:f1:99:ac:7e:fd:f9:f0:43:1b:
24:e0:0b:51:83:9d:9e:bf:3a:e7:3f:5d:a9:16:36:11:57:32:
b8:df:7c:83:33:77:4c:31:b8:99:5a:d1:bb:bd:b8:b0:89:84:
29:59:96:27:c1:44:a2:f4:f9:aa:04:a4:9c:75:2b:f0:cb:f6:
df:2e:11:1e:d4:e2:08:cd:c6:70:2e:23:ee:2f:7b:4d:b9:73:
72:5b:cd:fb:16:54:6c:ba:2c:aa:0f:6b:dc:8d:13:33:37:31:
24:3a:34:0d:6f:13:97:28:5b:ac:89:b4:e0:cb:8f:31:85:c5:
78:44:68:e6:d2:52:0e:b3:b9:27:7f:a3:2a:7f:82:5c:3a:2a:
47:fd:f1:fb:e1:40:74:22:92:11:17:92:fa:89:47:8c:85:5d:
9a:73:5c:f6:3e:b0:d0:d6:74:39:45:29:68:52:f7:c8:79:7f:
d9:98:37:a8:e7:31:39:65:d6:5f:e4:da:fc:a3:6c:7a:27:48:
0c:4c:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:34:35 2025 by rpki-client