Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: f5WwbgE8pCXGYMLvkHvIuYThoNj+Ua9m6quPeC8E9iM=
Subject key identifier: E6:D6:B1:74:65:A8:98:34:47:5A:BE:C1:61:F9:43:1A:7C:04:C0:9A
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 0196B3D86AB9A9262D94923089C932F81887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: BD
Signing time: Fri 09 May 2025 07:00:26 +0000
Manifest this update: Fri 09 May 2025 07:00:26 +0000
Manifest next update: Sat 10 May 2025 07:00:26 +0000
Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: w/vykscawEDkXVzD1Kwk7NIH+SC6EIxx1U9P48+4/vQ=)
2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:6a:b9:a9:26:2d:94:92:30:89:c9:32:f8:18:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: May 9 07:00:26 2025 GMT
Not After : May 10 07:00:26 2025 GMT
Subject: CN=e6d6b17465a89834475abec161f9431a7c04c09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:fd:c8:6d:d4:74:bd:7e:9b:cd:41:36:4e:
cc:3f:63:bb:b8:5d:8f:c7:f0:70:77:35:2b:ef:a1:
11:d0:96:a0:4a:bf:55:3b:60:df:86:ba:13:e4:9f:
46:94:d5:c1:0c:1a:29:0a:7c:17:c8:ce:a2:22:8b:
7c:49:15:fe:21:14:80:da:85:1b:f9:2a:75:60:e7:
92:e2:fc:b2:6e:75:70:9a:1c:20:5d:98:fb:37:7a:
0c:d5:b2:f3:03:6f:84:8a:44:dc:da:8f:28:3c:7e:
a4:63:67:02:1e:ef:6f:50:d9:f4:36:01:68:7c:d9:
a5:04:63:5e:3a:a7:5c:d2:04:4c:99:20:ae:7c:4f:
79:4e:e9:d1:b0:4d:f8:46:b5:a3:f2:a0:11:d7:db:
96:5c:7b:24:39:c2:43:e2:08:dc:4c:83:16:02:9e:
77:08:98:03:85:0a:7b:13:16:39:d4:87:e1:1e:6a:
1e:f4:a4:7b:b0:ea:8e:df:ad:87:66:1f:37:88:b7:
f3:cc:99:62:21:25:f6:29:58:31:3c:33:26:f5:4e:
67:be:88:96:96:f4:68:3b:a8:fe:7b:7b:81:73:03:
7b:49:ad:30:e8:23:21:47:81:a2:4d:5b:11:fd:89:
8a:47:39:60:6e:22:89:89:64:4e:ce:c9:eb:1b:31:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D6:B1:74:65:A8:98:34:47:5A:BE:C1:61:F9:43:1A:7C:04:C0:9A
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:28:33:c7:67:97:8e:46:ad:ac:25:02:3c:cb:05:66:20:05:
43:6c:1e:6c:d8:02:30:b1:81:b2:56:62:96:6b:a4:6d:c4:f5:
bc:69:4a:11:b5:a1:4c:de:a4:fd:9b:32:79:9e:c1:75:03:98:
79:d9:ae:27:17:7a:2b:d5:ed:86:49:37:5c:ba:30:49:e8:52:
a5:17:89:0b:c6:3b:4d:c7:42:4e:b1:d6:ab:a9:aa:20:3c:47:
bd:8f:aa:2b:c7:06:57:8f:d9:de:91:8e:4e:f3:23:28:30:11:
8d:7e:fc:dc:ef:61:c5:24:8d:c5:5f:20:2d:53:47:70:de:e9:
cf:a9:01:9a:a0:40:fb:09:05:1d:6c:ef:d1:a9:8a:d5:b7:ed:
5a:19:71:f7:de:78:4d:7a:e5:bf:4f:bc:26:11:62:8d:76:92:
38:4f:44:5c:3e:3a:4e:6d:9a:89:ef:86:7b:af:51:5d:71:bd:
29:56:c0:80:0c:38:fc:e0:f1:aa:94:cf:ce:13:b3:88:ac:fd:
b5:0c:a5:5b:2d:f3:36:6f:22:bb:4a:00:78:0f:aa:2c:f6:ed:
0c:9e:a3:6e:5a:ad:b8:e0:0a:44:be:80:1d:09:a3:bb:27:fd:
d0:43:a1:4e:24:b7:2c:2f:40:dd:e9:8d:fd:d1:9d:c4:17:2c:
40:60:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:51:13 2025 by rpki-client