Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: efmLfYQ9LdVDJ5M9o9D7OT+HNoSccFYar55TMZFj4gY=
Subject key identifier: CC:8C:ED:5E:FE:7C:D2:AB:D4:82:AE:3C:D3:7E:8E:A6:03:A3:E2:59
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 0196C8A8D85448A26B6BA9DAB3E6390EC3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 1205
Signing time: Tue 13 May 2025 08:00:30 +0000
Manifest this update: Tue 13 May 2025 08:00:30 +0000
Manifest next update: Wed 14 May 2025 08:00:30 +0000
Files and hashes: 1: ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa (hash: f+ETlYVDvmS9d48p0ZYmqykWIOKGSt0JzwDEXRuMaVs=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: +R15nA0a6MJlPsa6wUYa6b6KD2FDlpps6uezBMi12Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a8:d8:54:48:a2:6b:6b:a9:da:b3:e6:39:0e:c3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: May 13 08:00:30 2025 GMT
Not After : May 14 08:00:30 2025 GMT
Subject: CN=cc8ced5efe7cd2abd482ae3cd37e8ea603a3e259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:cf:03:67:0e:06:ce:04:5c:a3:74:97:60:
ee:65:17:13:ec:e3:7d:74:7e:fe:26:2b:74:1d:94:
e6:f6:c6:ba:1a:a3:0f:0d:c5:bf:71:36:cd:3b:ce:
7d:6d:f7:07:ac:e1:d4:69:dd:a6:f5:4b:ed:67:d9:
2b:74:56:72:92:da:89:49:3b:26:3b:89:15:cf:dd:
a3:36:39:b0:3d:1f:ce:e8:5a:0e:f1:20:5a:be:bb:
51:cb:17:dd:56:a7:63:8d:d0:61:f5:06:24:b5:b5:
73:f1:5b:3b:ee:af:fd:66:45:df:8b:08:1c:46:d9:
46:e5:19:43:91:62:46:96:30:21:b2:a8:05:9d:12:
7c:1e:a9:d9:61:8f:93:1b:b1:9c:34:16:e4:2b:3f:
0a:11:66:aa:e4:9e:91:97:53:6d:55:32:2e:23:ad:
84:fb:79:60:61:4d:4d:0d:80:0f:56:23:bf:91:82:
03:44:e0:90:24:e0:d2:e7:f2:6c:62:58:58:02:dd:
b3:89:7e:57:6f:14:cd:c9:00:5a:22:c9:f9:15:a9:
cf:f1:46:50:50:7e:80:f1:dd:eb:75:80:5e:9c:1b:
bd:a3:97:26:cf:97:3c:19:19:6e:f6:22:3f:60:3f:
fe:ae:aa:14:8a:f9:48:2c:78:cd:83:a8:f2:59:b1:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:ED:5E:FE:7C:D2:AB:D4:82:AE:3C:D3:7E:8E:A6:03:A3:E2:59
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:38:f5:88:f4:ed:47:3b:89:4e:d1:0d:08:3a:22:51:99:
36:48:21:d6:52:86:de:e7:3d:c7:17:b1:8f:c7:ea:20:e9:09:
59:42:ce:18:56:a8:64:b4:42:c2:2b:58:88:b1:3a:3e:ac:f3:
44:aa:7f:e7:69:63:07:31:ff:2c:bb:83:cb:ec:a8:23:69:78:
aa:21:22:c4:61:d7:72:22:c0:44:c0:17:5d:65:06:d9:3e:f5:
f8:ad:f8:0d:4a:e5:b1:c4:40:ca:61:4d:79:0e:28:56:d8:63:
bb:cd:0c:93:b8:59:94:51:0a:da:83:47:6e:c2:a4:c5:fd:7c:
90:2a:2e:56:b8:82:92:9e:c1:f3:cb:f6:4f:63:a0:51:0a:39:
c6:4e:93:41:58:27:3e:e9:5c:d9:ca:e4:26:3c:e7:d5:4a:b2:
50:66:33:94:bf:43:8f:d4:1f:6f:65:49:03:ce:1a:30:9b:27:
45:28:d8:d7:ab:04:98:2a:0e:77:ed:fe:58:8f:f8:9f:c5:41:
6c:b9:f0:08:30:fb:df:f0:2b:fe:0f:ce:ca:73:a5:59:25:67:
85:14:ca:e5:8a:a3:47:89:ff:6a:d3:c2:71:4b:ea:39:f1:a0:
57:50:cb:f3:4f:22:ea:84:f9:2c:6c:d6:c3:10:77:4a:d6:77:
ce:89:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:34:49 2025 by rpki-client