Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier: cpp2G7woETvHi8zg9jXakYN50/z0GLo1M58ToqWryHs=
Subject key identifier: 95:05:0C:6A:F8:ED:54:A8:38:14:FE:20:6B:B2:2E:75:99:81:FA:F7
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 0196B7EC78ACB463F4A825C861FBBABE8DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number: 05A5
Signing time: Sat 10 May 2025 02:00:49 +0000
Manifest this update: Sat 10 May 2025 02:00:49 +0000
Manifest next update: Sun 11 May 2025 02:00:49 +0000
Files and hashes: 1: ECy4hcsZKRfHoRJrX40zL9VgZlM.roa (hash: TIqTReRQQT5DAw+Fnvsbl2Gazl66yiKwPvTFj1mKh8s=)
2: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: 8v13a3Gvd4ohae5I+1PsZUzrd8dpdJNeYtOFGAKyPqg=)
3: b-pP2DvAvhNxFYiGst38p6kSpEw.roa (hash: OWrgzbHkSLo7aQ27PmujOGuFd28cotewB1lFGD+BaKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:78:ac:b4:63:f4:a8:25:c8:61:fb:ba:be:8d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: May 10 02:00:49 2025 GMT
Not After : May 11 02:00:49 2025 GMT
Subject: CN=95050c6af8ed54a83814fe206bb22e759981faf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:76:7d:80:13:08:54:ef:20:d4:0d:f5:65:
ab:e8:54:c3:27:8c:c0:68:6c:69:4f:76:87:cf:03:
d3:e8:a9:4c:9a:61:d8:a6:69:ed:9a:64:d2:37:33:
67:52:b4:cd:29:af:a1:83:f8:c3:ec:91:83:58:93:
7b:48:78:a3:17:b7:e0:6a:00:28:ba:7c:0f:51:46:
c5:e8:68:43:f8:bf:0f:41:73:18:ee:fc:8a:3d:12:
fe:d3:21:a9:38:0e:23:a5:a6:00:19:4a:31:84:2f:
75:2f:26:0b:9f:4a:17:26:01:82:df:b6:fc:db:c4:
d1:5e:d2:81:e8:8a:96:90:33:2b:a5:2c:ec:95:db:
9e:20:95:56:a1:4f:49:43:b6:8c:e1:30:59:6e:f9:
cc:9b:38:4b:d5:9f:ef:a0:a3:df:4c:69:c2:84:95:
16:ed:3a:97:47:2a:cc:cc:38:fa:e1:e3:f0:80:a4:
12:69:2c:f9:36:a3:fc:21:1c:f4:5b:e0:9c:21:31:
4f:48:97:3a:bc:17:09:c8:a4:c6:a6:05:f9:90:db:
f3:44:aa:04:90:75:8c:ec:84:4c:31:37:c4:b7:16:
09:68:a6:bc:c9:14:30:94:ce:20:bd:b8:33:7b:ce:
e5:f7:04:09:53:66:8d:51:c6:00:70:28:f4:35:ac:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:0C:6A:F8:ED:54:A8:38:14:FE:20:6B:B2:2E:75:99:81:FA:F7
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e1:91:ae:7a:6e:46:ca:b5:a1:4c:8c:b6:c3:78:8c:00:f9:
1e:df:1a:f7:9e:a2:2d:64:b6:2b:fe:c6:7d:c8:36:ba:51:ca:
d9:be:01:e4:f2:1a:31:5a:46:52:4e:52:7e:2d:1f:94:1a:06:
69:49:7c:fb:81:6d:c1:42:00:24:d9:9f:47:9b:ca:ea:72:22:
a1:b9:e0:d6:f6:d1:0b:e7:f8:4c:53:81:ec:0d:cc:a6:5b:e4:
11:cf:3c:43:87:4b:38:ed:20:d2:d8:1c:41:9b:6a:63:f6:52:
28:a9:82:91:b3:3b:13:d7:4e:31:41:fb:e2:7f:73:90:90:28:
7b:86:d0:fa:9f:b4:48:63:a6:51:5c:7c:cd:dd:d0:5b:a8:9f:
67:75:1c:a8:70:c6:99:e6:52:c7:de:7e:90:5e:47:29:ba:d4:
6d:12:49:f0:9d:01:2d:ba:1e:2c:f5:03:6d:88:03:40:ec:82:
9a:57:f8:68:86:2e:53:6d:50:fa:dc:14:de:02:4f:ea:41:5e:
7c:ed:e1:90:da:e1:5e:a6:c9:27:77:f9:f2:7b:b9:7e:b2:a1:
65:1c:6f:bc:0d:9b:7b:c7:0f:22:c7:ec:a0:10:d4:20:35:c5:
58:18:7c:5d:df:00:f5:c5:73:d5:2c:3f:9e:fc:c5:6a:91:ae:
50:0b:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:31:23 2025 by rpki-client