Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: ViBFA0yO6nRJNPMGS7wpkTmqiUW89Inx1cMkQCdI4PA=
Subject key identifier: 17:96:C3:E4:EC:97:FC:EB:92:7D:41:E4:CE:3F:44:C1:08:91:4C:23
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 0196A0F70B11E8FA63A1520FEFA8B3EC3984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 0868
Signing time: Mon 05 May 2025 15:01:06 +0000
Manifest this update: Mon 05 May 2025 15:01:06 +0000
Manifest next update: Tue 06 May 2025 15:01:06 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: rpxyHP7aOhefjDoRFXgs1xQV1UAly1A7sFJ85vvqKis=)
2: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (hash: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f7:0b:11:e8:fa:63:a1:52:0f:ef:a8:b3:ec:39:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: May 5 15:01:06 2025 GMT
Not After : May 6 15:01:06 2025 GMT
Subject: CN=1796c3e4ec97fceb927d41e4ce3f44c108914c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:71:0a:53:38:50:a9:38:3f:ba:7f:f9:98:
c8:47:96:00:fd:28:3c:f1:fb:61:b7:14:1b:e3:4a:
e5:d8:b2:ac:f8:b3:9d:16:f7:d7:11:5f:97:2d:bc:
f1:ed:b0:8c:f1:41:55:8f:df:71:2c:ce:49:17:cc:
1b:02:22:f4:4b:60:28:28:1f:e3:c5:c7:13:5d:b9:
4f:84:3c:bd:c3:c4:74:3a:2b:26:39:a9:7b:c8:f6:
03:61:e9:3d:c9:ea:40:88:d2:68:72:61:c2:07:54:
08:b4:fd:44:c2:04:2d:b6:fd:2c:e0:a3:32:48:74:
aa:98:6b:25:20:2a:68:75:9f:73:4a:94:47:99:fb:
b7:fe:72:c5:ed:b4:25:70:5d:e9:99:43:69:ee:16:
84:2d:53:65:bb:c3:48:0d:a1:01:d5:6d:9c:59:57:
08:37:be:ac:a0:be:12:f7:f3:51:e9:9e:04:5e:bd:
e0:33:c8:34:81:89:3f:2e:3e:e8:34:af:eb:d2:92:
73:bf:68:65:3b:94:2a:71:db:54:20:7a:41:9c:b4:
dc:20:36:69:81:dc:35:6b:ec:a4:04:32:98:8b:0d:
fe:d7:67:d3:8e:84:38:19:a2:4c:6d:54:c2:63:14:
e5:c1:80:33:f0:06:d2:b5:a9:19:91:3d:11:3b:0a:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:96:C3:E4:EC:97:FC:EB:92:7D:41:E4:CE:3F:44:C1:08:91:4C:23
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:29:0d:07:41:e7:ac:0c:27:4f:82:45:b4:3d:66:5e:f8:d5:
56:74:c0:8a:b5:84:98:91:3f:24:7c:77:cf:1c:8f:9c:d4:a0:
09:3a:69:73:16:17:98:c1:49:34:a8:f7:df:bb:66:02:f5:a2:
a6:66:18:b2:1d:76:c2:d7:8b:45:05:75:3a:28:6b:57:fe:f7:
a1:3c:6f:7f:7d:6f:04:11:34:ab:91:81:96:a1:8c:37:70:0f:
36:7c:ad:6a:b5:8c:bf:12:47:7a:72:d3:80:59:6f:df:3a:d9:
72:ed:98:54:9a:6a:ad:0a:1e:a2:34:02:4c:2f:34:08:99:86:
a9:53:5b:31:11:4e:a8:2d:7a:3b:71:d1:73:1d:b2:84:84:0a:
aa:45:6c:f3:b0:f6:cb:4f:96:ed:d2:6f:47:c5:8b:16:ef:1d:
25:d0:a2:b5:e8:a8:a9:c1:c6:f3:34:fa:98:1c:de:28:af:70:
17:d2:a3:86:a6:06:b4:f1:91:26:97:58:7f:70:6a:2a:05:6f:
96:54:b7:df:a9:d2:ef:05:72:e6:0b:57:8f:dd:ef:e9:1f:6c:
59:a1:1f:61:9c:11:0a:bb:49:10:12:bb:63:bc:12:71:9a:97:
0f:bb:ef:a4:b9:b5:06:19:ea:b0:30:24:e4:f0:80:75:fa:c7:
2d:0b:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:12:50 2025 by rpki-client