Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier: lsxwu+rIXxMF5m5e7FQgg8rqZspo6c1XNfK0IeslhPE=
Subject key identifier: F1:C9:F9:2F:C0:2E:6C:1E:78:1F:37:A9:EB:D5:E7:66:7D:FE:35:7C
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 0196A7D4A17E9C291B4CDFD51A12127F8340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 23:00:52 +0000
Manifest this update: Tue 06 May 2025 23:00:52 +0000
Manifest next update: Wed 07 May 2025 23:00:52 +0000
Files and hashes: 1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: nDPF6Z8fOYDIYItZDMGcIXBG+Lw7hgTdZ6CIFY34jaw=)
2: tKq2kTGwjRxV1VeF4yjWXlgGg4s.roa (hash: 26irNsQZ2yFre3Oewun8lnjL981q/hQTWsn6QhKyj1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:a1:7e:9c:29:1b:4c:df:d5:1a:12:12:7f:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: May 6 23:00:52 2025 GMT
Not After : May 7 23:00:52 2025 GMT
Subject: CN=f1c9f92fc02e6c1e781f37a9ebd5e7667dfe357c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:67:de:5a:85:1b:11:ba:64:a7:58:98:b9:
fc:86:72:75:86:ab:26:37:de:26:dd:d6:ea:b5:4e:
4e:07:1d:68:ae:a5:98:00:80:95:71:c4:1a:62:1e:
35:f0:40:a9:64:7b:30:d0:cb:ff:90:01:2e:13:36:
61:5e:66:5d:48:59:db:6e:e5:aa:1f:7a:1f:e5:fb:
30:a8:1f:13:5b:ac:db:8d:04:f9:f3:22:0b:40:81:
0d:c8:0e:02:d7:56:34:ac:f4:f4:6a:4d:24:5b:e5:
5e:18:a1:97:b0:fb:f6:0c:b8:7a:67:7a:50:09:1c:
61:4e:ba:ae:49:66:08:82:ef:7a:91:eb:cb:11:e7:
aa:cd:73:17:e4:cd:91:40:5b:e6:13:25:80:d9:17:
27:d9:6a:47:3a:09:9a:f6:ba:78:e3:c8:f1:bd:78:
f9:00:72:31:b3:36:a4:67:c5:da:93:ed:aa:b4:4e:
43:78:ad:ec:da:6b:1b:7f:64:60:21:eb:f9:03:02:
79:94:50:3d:05:98:08:90:e3:1d:66:21:f4:df:46:
de:77:e4:3d:77:37:eb:f9:1c:2d:38:f1:4e:e2:a8:
88:9c:64:e4:ec:97:f7:01:d1:ac:01:63:0b:ad:3e:
97:31:ce:57:9a:36:46:53:6b:26:39:02:c0:b9:6b:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:F9:2F:C0:2E:6C:1E:78:1F:37:A9:EB:D5:E7:66:7D:FE:35:7C
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:81:6f:00:19:e2:02:52:05:19:35:fa:10:f8:6d:b2:e8:ad:
c7:36:c9:9e:e7:80:1d:85:0e:b8:64:bc:88:68:f0:95:09:21:
9c:d8:43:6e:a0:3d:54:4d:b4:33:08:7a:46:41:45:09:de:3f:
f9:33:70:1e:2c:cb:6b:61:e4:20:77:de:db:5d:9c:65:92:e8:
36:45:1f:7f:54:b7:3d:33:85:8c:74:41:0b:24:58:a0:d3:db:
5a:13:70:a0:3a:36:5e:6a:a6:6f:ec:6c:86:2e:cc:bc:0f:f2:
4a:c6:4e:54:9c:b1:08:51:05:19:e1:d7:f9:72:45:bb:18:7f:
38:c1:53:34:3d:8f:bc:b1:80:01:69:18:0a:38:94:06:d9:bc:
ef:e1:77:d0:40:ed:22:bd:b7:c2:09:29:76:bb:0e:6a:b5:73:
89:8f:b8:1f:59:cc:b0:2a:44:e4:20:7a:ca:7e:6f:59:e5:24:
04:5c:d3:ed:b1:47:df:cc:e2:ec:74:33:12:f2:e3:39:56:3a:
2c:b2:04:b4:a4:1b:43:9c:43:2f:63:2e:f3:0b:42:d1:68:e3:
fa:bb:39:eb:48:2a:a8:e6:1a:0a:10:da:4c:98:92:59:01:fc:
79:1c:e2:c1:03:07:4f:30:38:e5:dd:d6:98:81:25:68:a6:68:
19:89:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:59:15 2025 by rpki-client