Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
File: oV32zYKdlfY9kx1dz5HMi6UPkLA.mft (raw, json)
Hash identifier: /gK1o+aj7GGL0NXkdcLrKSzCMMThKUnggNKnCwIqLvI=
Subject key identifier: 5C:0E:AA:E9:8F:C9:0E:98:BB:BB:01:E2:43:D1:1F:78:C6:4C:E8:C3
Authority key identifier: A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
Certificate issuer: /CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Certificate serial: 0196DB8AD294E548A08163A693B34E1832C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
Manifest number: 126C
Signing time: Sat 17 May 2025 00:00:30 +0000
Manifest this update: Sat 17 May 2025 00:00:30 +0000
Manifest next update: Sun 18 May 2025 00:00:30 +0000
Files and hashes: 1: VuAYChzgVwA9U2Q6Uxu9DF2BLPk.roa (hash: 2ErjMaikK9MO12otuKOE97QoF/tRVc9Xenat/2fnwAc=)
2: eCInIDJljc296hyYtD5W8TkDML4.roa (hash: 748KveIKW32FuAoa2IrqedX1Io3eRBGbUpfsqc8GK+g=)
3: oV32zYKdlfY9kx1dz5HMi6UPkLA.crl (hash: e7bdQBdEY95AxyLeI7G7qybwSQvSZxqClh4iJuIv8cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:8a:d2:94:e5:48:a0:81:63:a6:93:b3:4e:18:32:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Validity
Not Before: May 17 00:00:30 2025 GMT
Not After : May 18 00:00:30 2025 GMT
Subject: CN=5c0eaae98fc90e98bbbb01e243d11f78c64ce8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:b5:dd:82:61:d7:ae:1c:3c:b5:a3:64:3d:
0c:0f:6f:1f:0f:3c:1b:7c:0e:0b:f0:21:76:49:9c:
f0:41:e5:d9:56:d9:46:df:07:58:81:c0:14:9e:2a:
51:ff:cd:9c:96:85:26:79:52:f0:1d:e2:59:97:2d:
53:25:66:bc:1e:34:03:92:88:a3:8d:e5:ea:eb:b7:
91:11:ad:97:74:d7:1c:a6:69:af:33:d7:27:ed:42:
18:35:18:7a:75:12:c3:01:53:da:cc:98:f4:9d:29:
09:8a:0f:ea:ef:05:06:72:6a:8e:63:48:36:3c:95:
f3:7e:1e:47:98:3e:32:5e:36:ad:c5:98:54:6d:38:
ba:c6:0a:51:34:8a:4c:36:0e:85:e3:48:4f:33:88:
b3:e4:0c:89:b5:8b:45:82:ae:52:d4:14:df:d0:c5:
3b:9e:e8:06:57:7f:e0:d5:0e:c9:7a:a9:31:6a:f5:
c9:2c:95:03:d9:ea:df:1f:f5:46:a8:6c:3b:4a:67:
63:ef:5f:e6:58:b3:50:1f:02:f2:d0:57:74:62:0c:
8f:52:c2:a8:96:e7:e8:20:d8:f4:2e:c9:c2:0d:00:
fd:c1:1e:bb:ac:ce:be:e2:a9:f2:aa:80:15:48:ae:
7e:db:8c:00:6e:41:d7:63:98:99:9e:17:a0:39:3e:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:AA:E9:8F:C9:0E:98:BB:BB:01:E2:43:D1:1F:78:C6:4C:E8:C3
X509v3 Authority Key Identifier:
keyid:A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9f:f1:49:c5:0c:b5:4b:8f:68:ba:35:ee:0b:3f:ba:92:b5:
db:e9:a9:bd:cf:00:40:6b:2d:68:4f:63:41:c1:54:2e:ce:c2:
7f:39:2b:f5:d0:85:36:94:9e:d9:24:b7:b0:94:94:77:e0:bf:
63:95:37:c3:ac:39:92:5e:b6:20:68:7e:17:ae:c0:7f:76:2d:
71:6f:25:4b:ea:12:cb:f7:e0:94:93:66:ce:f0:14:5c:96:4e:
45:0c:1f:45:cc:06:fb:de:62:a0:a4:f9:4e:80:56:bd:68:c7:
c9:d4:3c:33:3b:29:5f:c5:c7:99:a4:7a:1d:36:fb:7c:5c:ef:
fc:e4:39:a9:4a:2d:7d:1c:42:d4:9b:ef:75:7f:4d:a9:8a:8a:
51:df:90:8d:7a:9c:62:cf:47:a2:64:f4:3c:bc:89:be:27:0f:
37:6f:6a:2e:4b:a7:18:d8:5a:b5:0f:a3:3e:22:45:e7:7f:29:
a5:f9:d3:4b:b9:7b:97:d7:f3:85:f0:e3:1b:39:81:bb:3f:60:
4e:76:1b:42:90:d0:cc:fd:8d:9e:bb:ed:24:85:9e:50:fc:a8:
58:47:48:1b:7d:62:75:2e:72:9d:6a:e9:46:a0:00:ab:cb:ae:
5d:d9:b9:d7:58:11:3f:a5:03:ed:8f:ea:3e:49:38:fa:7b:a2:
a0:f2:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:26:58 2025 by rpki-client