Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: lLYNJcihLzF6LYuVJFpdwmuyx52HvXWo+Q5UCQLFuhk=
Subject key identifier: FB:88:22:B2:43:26:CA:C0:5B:7E:B6:01:FF:BA:3C:B0:7F:31:CC:59
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 0196BA7F25238FEB1BCA3D0A4D5F2D353DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 0BB6
Signing time: Sat 10 May 2025 14:00:16 +0000
Manifest this update: Sat 10 May 2025 14:00:16 +0000
Manifest next update: Sun 11 May 2025 14:00:16 +0000
Files and hashes: 1: 0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa (hash: GFF2i9DOD9iNc83o9PQkrJQokdzx6TTVi4lrSIyhIgE=)
2: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: UvzCqUHXTV1VhtAoSVH6gSGt3n8Rro81vWHZ9RcGz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:25:23:8f:eb:1b:ca:3d:0a:4d:5f:2d:35:3d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: May 10 14:00:16 2025 GMT
Not After : May 11 14:00:16 2025 GMT
Subject: CN=fb8822b24326cac05b7eb601ffba3cb07f31cc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:61:ee:07:32:cb:62:8e:d4:5b:50:48:46:
0a:1e:cf:52:94:b8:fa:fe:a1:cb:8d:1a:de:73:b0:
ca:30:33:dc:8f:86:29:37:49:39:36:4e:5c:6c:88:
b7:dc:2c:7a:8b:05:19:99:97:45:d5:23:0c:c6:1b:
78:e6:4c:89:71:7e:0b:eb:3e:79:ac:b3:3a:e0:90:
6b:cd:3e:01:12:f2:95:90:a8:61:10:f6:24:a1:09:
ed:00:9c:59:93:c0:8f:67:14:41:47:94:f9:7d:cd:
51:49:5e:75:b4:65:4b:6d:6e:a1:6f:c8:13:9d:7d:
91:61:9f:4e:bd:12:04:13:ca:91:89:fa:55:91:2b:
f2:7d:0d:dd:18:70:6a:32:59:30:36:31:d4:e0:46:
f2:a8:47:5e:0f:5e:73:66:23:61:05:7c:c2:1c:0c:
87:c1:26:90:bc:2f:fc:98:28:cb:42:3c:43:a6:b4:
9c:e1:20:16:25:37:25:0f:f5:d5:82:ec:fa:a4:5b:
c7:88:e8:c0:60:dd:83:bb:87:68:d6:29:ec:2a:c9:
6d:de:b7:7f:af:4d:4f:ea:78:6b:68:12:1c:bb:e0:
4c:2a:b0:ed:1c:4e:bd:dd:db:fc:72:dd:78:ba:f1:
85:7e:df:28:9b:fa:fd:3d:d6:27:e8:82:cc:8a:9f:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:22:B2:43:26:CA:C0:5B:7E:B6:01:FF:BA:3C:B0:7F:31:CC:59
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1a:79:1d:78:e3:2f:2f:23:73:40:11:ff:20:0f:b2:6f:65:
bc:a5:dd:b1:e8:7d:6c:3c:22:17:aa:96:2e:b5:7f:63:bb:dd:
5b:db:1d:ba:4d:79:40:f7:24:da:1d:4d:09:f9:5c:83:89:6c:
92:22:74:e9:8a:80:8e:2f:ad:69:07:78:ed:b2:14:3b:50:92:
89:e1:d4:e0:54:db:e4:57:9e:29:a8:66:c5:7f:20:5a:62:b2:
86:4c:a1:d4:a0:c7:c9:fc:c2:26:50:49:29:6b:8b:04:16:70:
94:59:a5:81:1f:6c:0e:7a:16:5d:40:25:7b:54:f3:85:86:7f:
8c:d8:b4:6c:1e:fd:49:ed:d6:67:eb:58:94:49:01:c5:f5:f2:
73:0f:e0:ce:f3:c0:bc:b0:cc:60:5a:1d:d0:60:6c:7a:57:6c:
8e:40:7d:44:01:d2:0e:82:17:58:15:18:2a:ee:ef:b3:11:34:
75:3b:f4:5f:40:58:d7:71:6e:f6:0f:71:c3:bb:eb:a1:22:af:
dd:80:94:db:5c:8e:f2:19:42:17:7f:9b:9c:9a:b1:b5:ac:ed:
12:c4:97:70:af:9c:1e:a7:08:d5:3a:54:bc:b1:4b:c3:a9:04:
36:9a:6f:5c:c1:ab:f3:f2:c4:0d:25:1c:5c:a6:49:41:72:6d:
f9:7d:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:46:11 2025 by rpki-client