Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: WDeJ0omdIUqZw2l0azoCEuLjMuM7GWCDPZc0kHcrzag=
Subject key identifier: 19:E1:F7:9D:A0:AD:88:B9:AF:3F:C2:EC:27:A7:0D:97:90:54:60:13
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 0196C1945AD962553DA48C8E2D4C6B14FB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 23:00:47 +0000
Manifest this update: Sun 11 May 2025 23:00:47 +0000
Manifest next update: Mon 12 May 2025 23:00:47 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: EmrmWBczE6wUQwE5278S4c+Pwy06sWjuZZhEFdY2rIs=)
2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:5a:d9:62:55:3d:a4:8c:8e:2d:4c:6b:14:fb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: May 11 23:00:47 2025 GMT
Not After : May 12 23:00:47 2025 GMT
Subject: CN=19e1f79da0ad88b9af3fc2ec27a70d9790546013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:74:50:ff:51:3f:80:cf:ac:55:2f:cf:82:
a4:7c:51:9c:71:cd:4e:0c:88:83:a1:f7:8a:7d:6d:
df:74:ff:de:d1:bf:33:6e:97:00:44:29:c0:26:e0:
d3:c5:b1:be:c1:03:f3:a1:24:4e:e3:56:6a:91:5d:
e5:a5:b6:0e:9a:0f:8a:19:11:b4:a6:37:3a:e6:91:
f8:70:3d:a8:a1:0d:61:a2:4c:75:81:24:c0:c4:cf:
99:fb:f2:4c:31:52:76:64:30:0f:44:f2:e0:fe:6d:
ce:cc:6e:5e:26:85:dd:e9:64:8e:01:b6:c3:31:18:
78:79:61:68:b1:bb:15:7d:89:10:55:da:f0:05:ec:
14:78:2b:0a:c2:41:3b:2c:80:6c:85:6b:8d:76:ed:
46:44:d7:4f:74:14:7c:e1:1f:a8:56:ac:2b:a1:2b:
b8:7b:22:e0:b6:70:88:af:74:49:2d:10:10:fc:8e:
b0:62:12:03:49:4d:fb:44:62:ff:7e:f0:a8:f1:bf:
52:ba:21:00:57:a0:c7:aa:39:fd:89:99:86:f9:e8:
90:4d:83:09:7c:52:83:5a:9b:a7:f5:6b:28:9b:71:
44:8a:0a:bb:30:56:9b:9a:77:99:8c:22:92:86:c9:
44:bf:f5:a3:f4:cb:39:03:c3:92:43:b6:b8:c4:f6:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:F7:9D:A0:AD:88:B9:AF:3F:C2:EC:27:A7:0D:97:90:54:60:13
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ea:9d:86:9e:32:36:ec:57:f1:cd:0a:e9:0f:be:61:87:e8:
bf:4d:af:02:f6:47:a9:5c:a2:97:f9:8f:89:33:58:cb:d9:10:
28:b1:fc:4b:f0:80:2e:2a:70:88:1f:92:dc:97:e9:41:6f:ed:
94:63:9f:4f:12:f8:4a:53:40:b0:96:1d:c9:cc:4c:79:5b:1a:
b6:2f:fc:5f:a0:f0:7a:3c:a6:32:04:f7:2d:3f:6d:30:5a:f0:
a0:83:15:af:74:ae:d6:62:b0:c4:e5:91:34:a0:1c:88:65:28:
84:8b:26:27:d2:3c:af:e1:a3:54:46:cf:f5:f7:c7:49:44:bd:
0b:c8:9e:be:3e:49:bc:cc:4e:07:ef:78:c7:d9:b8:df:95:3a:
35:ce:28:27:7e:db:69:1b:c2:6f:5e:f5:9f:e5:cf:f7:60:81:
ec:ee:f3:3e:74:a8:b2:59:ff:21:fa:ca:e8:2f:11:ba:2a:09:
07:4b:13:a2:6c:28:0d:cf:bd:36:14:71:b2:00:ac:4b:58:ba:
18:b7:8c:84:d6:85:84:49:1c:e3:4a:e5:1c:20:3b:6c:9f:8d:
91:3b:53:31:57:8b:04:4b:34:ca:58:59:49:bd:04:8f:77:c7:
be:9e:f2:94:b2:c2:9f:54:09:cf:dd:19:c5:91:a7:ec:6d:3f:
7c:98:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:12:05 2025 by rpki-client