Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: j1OQsKqDjlR8B/wN3n0GctwMjq0980FwdkQN3IaUbH4=
Subject key identifier: DD:4A:0F:7B:AF:6C:36:93:A1:31:D7:CC:CE:B6:F4:73:7C:E3:F5:E2
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 0196CC4F193F1E0649BBB41B2BF17B895616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0809
Signing time: Wed 14 May 2025 01:00:57 +0000
Manifest this update: Wed 14 May 2025 01:00:57 +0000
Manifest next update: Thu 15 May 2025 01:00:57 +0000
Files and hashes: 1: IhFmVxbE3gn_IPAxvOuH1Dxlo9o.roa (hash: oKXrmB0pSBgjznKzRYUFbiw4D9My9SBHtgqoNaUCBKA=)
2: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: 15TD51XWW8sf20NPWIU739qy1nxKR6zCFW/wGi9zWI0=)
3: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (hash: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4f:19:3f:1e:06:49:bb:b4:1b:2b:f1:7b:89:56:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: May 14 01:00:57 2025 GMT
Not After : May 15 01:00:57 2025 GMT
Subject: CN=dd4a0f7baf6c3693a131d7ccceb6f4737ce3f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:46:98:a6:fb:9b:82:69:04:f1:ca:f6:fc:
17:29:af:fa:c1:1b:57:f9:89:ae:fa:bd:4a:0d:85:
56:4f:1d:f6:61:e8:8b:3a:86:5d:55:c7:16:d8:c3:
e6:93:36:c9:c2:02:c2:fb:27:7e:d2:42:be:2d:5b:
0f:b7:b6:81:6d:73:01:b1:30:e1:fd:72:f2:56:6e:
14:d7:bf:68:30:15:5d:ae:2a:6e:4f:e6:6b:e9:50:
ac:36:b8:04:80:c5:23:d4:bd:e6:6c:4b:ef:c2:8e:
ca:ce:b7:58:a4:62:6c:6e:4e:02:41:cd:69:07:b6:
01:b8:a9:f5:1b:2e:c7:ae:59:0c:fc:fa:4c:d3:31:
72:35:a1:4c:13:f6:42:02:7e:de:9c:b7:60:78:19:
06:56:6a:ab:ab:b2:83:76:c5:b2:44:e5:67:d0:6b:
0b:8b:32:f6:ae:65:cd:97:1f:8b:c0:e1:67:55:aa:
4f:6c:bc:bb:1c:85:61:70:2a:1e:3b:8e:c6:5a:06:
0b:a5:a3:d3:9e:fd:94:89:58:f0:18:2f:36:a3:4e:
9c:6d:92:e1:e0:5d:44:c9:b3:81:9e:37:ad:a7:07:
dc:40:e7:51:81:84:8a:cf:66:68:4a:eb:71:f1:8d:
f6:83:0c:17:a1:40:02:eb:05:2c:63:da:87:37:54:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4A:0F:7B:AF:6C:36:93:A1:31:D7:CC:CE:B6:F4:73:7C:E3:F5:E2
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8a:96:dc:ba:cd:ad:bf:32:7f:c4:07:0f:dd:89:ac:1e:d7:
b0:28:dc:3c:c2:7c:19:0d:32:a3:5a:e8:ae:fd:b9:14:bf:f9:
06:1a:82:8c:d0:21:62:63:63:c2:f3:90:43:d9:b1:e4:19:5b:
e1:d9:65:dc:1b:1e:aa:fa:0f:bd:b6:67:23:cd:80:f1:54:a6:
ad:72:42:3d:fc:a2:80:3a:70:86:3f:27:77:e0:88:20:4c:2b:
3e:34:fd:0e:5c:3b:e4:6d:da:d6:1e:24:0b:f1:89:66:32:c5:
54:59:e0:45:cf:a1:a6:51:17:90:5c:ef:17:14:0e:ac:63:d6:
22:ec:fc:cd:49:00:a5:5c:8c:23:48:df:a0:fb:fd:ea:49:10:
e1:09:61:db:63:16:cf:5a:f0:f2:3d:de:e9:b7:38:bd:06:20:
f0:87:a6:a3:65:50:a7:f3:96:ec:79:32:9d:22:0d:f1:b9:f8:
ad:17:48:b5:88:12:50:0b:70:09:63:1a:43:9c:5f:fd:95:09:
c6:98:80:4e:9d:bf:03:52:a7:fa:2a:4b:f7:16:a1:26:41:87:
7b:b5:15:d2:dc:89:99:86:da:e5:3f:82:02:9b:9e:e3:b2:91:
5d:cf:69:5b:75:d0:15:60:40:2f:fb:7c:14:5f:26:07:d8:12:
ca:6c:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:31:21 2025 by rpki-client