Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
File: o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json)
Hash identifier: uWwekbD9yZnKbooVXrX8VzpuMY5+P3WXUrxz2fBVZlc=
Subject key identifier: 69:24:BF:D7:4C:57:7D:7A:C6:B9:BC:9E:5B:7B:F4:41:2A:C4:CC:5F
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial: 0196D09947DAA5BE3B65250D50E053EF8CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
Manifest number: 0202
Signing time: Wed 14 May 2025 21:00:28 +0000
Manifest this update: Wed 14 May 2025 21:00:28 +0000
Manifest next update: Thu 15 May 2025 21:00:28 +0000
Files and hashes: 1: IThQt7fbZjTxBPjVToQUiBMJLfw.roa (hash: oQVD23q0+FFPZozW7epeAMXOc9QR32sT9Z0RYH7NZss=)
2: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: BRilRF1tmK3AiZwAKefLBWJ2G+K93MiRtZOkVT4UJcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:47:da:a5:be:3b:65:25:0d:50:e0:53:ef:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Validity
Not Before: May 14 21:00:28 2025 GMT
Not After : May 15 21:00:28 2025 GMT
Subject: CN=6924bfd74c577d7ac6b9bc9e5b7bf4412ac4cc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:2f:9d:c3:4a:d8:e6:eb:ae:43:d2:c6:1c:
15:62:22:8e:cd:08:ed:d0:df:df:d9:f8:fe:b3:fe:
b9:96:1c:41:17:b8:3c:f2:c3:c8:39:d4:9b:74:72:
6f:08:e1:90:ca:f6:16:08:9e:2f:b9:52:4b:2c:1a:
02:eb:ec:40:10:ed:9c:f0:ac:6f:af:30:47:08:de:
2c:e3:26:33:50:da:cf:15:f3:63:4d:0b:be:e4:c0:
21:aa:da:30:bf:9c:05:07:98:93:c6:59:2e:4c:46:
3a:b3:72:26:53:2c:ed:8f:6f:59:6f:6a:66:21:51:
15:36:d3:d9:7d:3e:40:fd:5c:e4:06:30:d9:85:ce:
5b:47:25:be:34:1e:26:34:3b:a4:34:70:8a:ad:fe:
03:d1:0f:09:a3:b3:85:62:62:b2:78:11:65:3f:47:
ec:34:5e:35:a3:0c:16:bc:66:23:4f:18:28:87:be:
a8:25:15:ab:47:f8:8c:15:66:dd:83:59:59:0a:1d:
c3:95:4d:cb:f7:f7:51:bb:24:37:f8:fe:a4:49:ea:
8f:a5:27:2f:79:8c:79:58:0a:81:4c:11:97:0e:6f:
52:26:b4:70:c3:df:8b:67:ce:0a:45:f6:33:7f:ed:
a7:4c:e7:21:a3:77:16:7b:f6:9a:04:36:c7:19:22:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:BF:D7:4C:57:7D:7A:C6:B9:BC:9E:5B:7B:F4:41:2A:C4:CC:5F
X509v3 Authority Key Identifier:
keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e3:c3:1b:d6:a2:83:3f:82:4c:8c:dc:78:a1:f5:83:1f:61:
bc:ee:e1:96:a3:dc:06:da:28:e8:38:55:a2:37:20:f5:a9:32:
f7:7e:17:e3:16:c3:d6:67:76:5f:4b:b0:db:52:fc:f0:1a:77:
83:de:85:c6:1c:0f:23:c0:19:6f:34:86:f5:80:37:64:5c:37:
a0:c4:5d:a4:b0:7b:e8:e7:1e:ed:d1:a2:69:44:0e:95:c3:a3:
72:c4:31:20:f7:f2:d2:8e:a8:a3:07:8d:aa:81:a3:49:23:3a:
62:d1:c2:e1:fd:34:e7:cb:06:b0:4e:e0:7c:58:f6:93:3f:fb:
69:55:4d:bd:36:10:36:65:85:7d:44:3f:fe:01:a4:29:be:de:
0a:7e:b6:05:a4:04:df:ce:75:f0:90:d5:2c:34:0a:b5:53:51:
8e:a1:16:24:8e:f2:1e:f2:b9:ab:fd:9a:4e:c7:0e:7f:e8:86:
68:02:ff:bc:ee:ff:73:94:10:2f:c7:42:a9:e0:db:ca:db:1f:
79:9b:e3:d0:60:7f:a0:59:e5:40:ad:91:fd:b6:86:67:51:01:
cb:dc:30:90:79:c7:2c:21:f6:43:bd:de:df:90:81:38:20:1f:
fc:61:fb:d1:47:ac:a3:b8:e9:34:5f:f1:ad:76:37:d3:8d:57:
4d:9e:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:54:18 2025 by rpki-client