Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: iTUdPRYU6zf7V5SGVlymGyOAxLkUChlC4iFevALp0p0=
Subject key identifier: B3:5C:F7:40:B2:DD:21:84:2D:DD:EE:A9:83:3E:0B:C3:C1:68:20:C7
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 0196A0F71E4E6C0883155F2C9A2B79BD83DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 0356
Signing time: Mon 05 May 2025 15:01:11 +0000
Manifest this update: Mon 05 May 2025 15:01:11 +0000
Manifest next update: Tue 06 May 2025 15:01:11 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: YTj7fRmxjL67bKofN8i2csS4nzgfYI20mcIvpUfR2y4=)
2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f7:1e:4e:6c:08:83:15:5f:2c:9a:2b:79:bd:83:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: May 5 15:01:11 2025 GMT
Not After : May 6 15:01:11 2025 GMT
Subject: CN=b35cf740b2dd21842dddeea9833e0bc3c16820c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:8d:d2:65:de:9e:d0:e2:81:54:df:86:6d:
fd:c8:1f:b7:1d:25:ec:88:65:f5:bd:a0:e2:ba:bf:
40:f7:9b:bf:c7:b4:2c:a4:8b:52:a7:d1:50:58:6a:
21:28:3f:98:4a:fd:65:86:fc:cd:bf:74:99:a7:41:
31:28:e4:fd:21:fd:ee:a2:78:81:e3:5b:7e:37:9b:
ac:a2:83:28:74:d6:9a:5e:11:12:98:2e:b1:d6:c4:
5d:cd:0a:b6:5e:d3:f2:a5:b1:eb:3e:ae:dd:f7:f3:
eb:d5:5d:a7:25:2c:33:db:d5:43:a8:bb:d9:fc:b1:
6f:bb:c2:d1:d6:4a:7a:21:db:b2:0d:fb:6b:19:47:
41:c8:c8:9b:1e:22:c8:65:19:e6:a3:0e:27:51:84:
b8:9a:57:20:95:f4:c8:d0:42:95:51:ea:a2:9a:90:
a0:ec:8e:bb:cd:26:9d:ab:7c:fa:65:17:28:cc:f6:
3a:1a:82:1b:9f:b2:f7:c8:80:cb:11:84:27:55:ec:
38:ab:fc:b7:ec:38:b7:4c:eb:ca:fa:ec:9d:ee:19:
d8:26:09:ea:ff:6c:9d:20:3e:08:5a:8f:10:f7:38:
e2:62:33:34:45:59:e0:38:2d:84:73:50:ec:66:de:
14:ac:36:f2:7f:3f:c1:ed:a7:da:f1:cc:ad:42:4e:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5C:F7:40:B2:DD:21:84:2D:DD:EE:A9:83:3E:0B:C3:C1:68:20:C7
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4c:63:9f:2d:37:6f:0c:fd:f7:c0:d8:b5:a5:3e:7d:f4:7b:
4a:80:4a:9b:61:4a:1c:2a:cf:c7:61:d8:4e:0d:0a:df:e2:d3:
29:2a:95:b1:73:31:c3:54:61:6b:c7:80:38:16:84:16:f1:ee:
ee:9e:5c:61:19:7c:d0:10:bf:e3:b1:25:c3:70:5e:09:94:ee:
84:e6:81:6a:98:68:38:dd:a1:ee:b6:d4:f0:1a:36:8f:e8:a1:
a0:a5:ac:33:c6:2c:69:f9:94:7e:72:d6:c0:10:b6:c0:95:7b:
ad:db:2c:d1:94:d9:7e:fe:16:b1:bc:d0:12:eb:da:9d:78:f1:
a4:22:7c:98:e4:b9:29:48:af:d7:a9:96:c7:c1:3d:da:49:ca:
15:2e:8e:55:9c:52:3c:52:ae:cc:cb:e3:c3:db:75:cb:a1:16:
80:56:97:ad:79:13:3e:08:6c:01:4b:b9:fa:27:a0:8f:58:c5:
28:3d:cd:67:18:27:0d:62:24:da:00:67:26:15:17:29:e9:4e:
5a:fb:7a:1e:35:0b:be:e7:a3:ef:68:39:41:d1:87:71:ac:87:
f1:14:1d:ab:2e:cf:0c:26:31:98:43:df:48:a3:6e:67:90:13:
2c:5a:70:d6:39:97:a9:8c:a4:d6:7d:cf:47:12:cf:01:59:a2:
f3:9d:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:18 2025 by rpki-client