Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: h1laYuaAw4j8RhLY9MdDgyc+jF1X5k448tAD2mdlDQo=
Subject key identifier: 79:70:83:50:AA:51:AD:BF:40:4E:C9:06:9D:3E:78:23:65:5D:0B:CB
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 0196B4EB0B147DE5867ACBDA93AD932CBFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 12B8
Signing time: Fri 09 May 2025 12:00:24 +0000
Manifest this update: Fri 09 May 2025 12:00:24 +0000
Manifest next update: Sat 10 May 2025 12:00:24 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: +A2fCx1u8lmLDA0LqjIr1aaa4qRFgpGQNv7WyOmGFOc=)
2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:0b:14:7d:e5:86:7a:cb:da:93:ad:93:2c:bf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: May 9 12:00:24 2025 GMT
Not After : May 10 12:00:24 2025 GMT
Subject: CN=79708350aa51adbf404ec9069d3e7823655d0bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:48:d8:2e:13:93:f3:5e:bf:05:68:40:61:
70:b2:60:68:ad:90:08:5a:6a:b8:36:ae:ca:9c:e3:
f2:ab:32:ba:ff:31:81:77:ad:32:62:e4:5b:07:19:
fb:1f:06:79:16:14:18:46:2a:55:7c:6e:90:42:0a:
7c:f9:71:87:ce:96:cb:23:85:9c:53:e2:05:12:5d:
b7:52:79:90:31:46:80:98:b7:82:1a:1b:9e:5b:98:
e8:15:09:82:8d:0f:c7:2a:8b:95:37:b4:7b:0b:b1:
ea:4a:c2:e6:07:7a:c9:e3:1c:02:cd:a3:49:db:36:
58:97:99:c9:1e:d8:e7:e7:5f:dc:e4:62:8e:f3:02:
3b:b9:2c:46:a1:ab:4c:79:75:42:b2:63:ab:36:90:
07:f4:68:5c:d9:38:57:13:db:a8:b9:27:33:9a:b1:
49:25:84:26:52:13:b4:62:00:cd:47:b7:62:75:61:
d7:fb:4f:2c:dc:48:3b:81:82:14:42:0d:86:e7:5a:
01:b8:c5:ce:0f:63:f6:73:a5:58:c9:4c:63:a6:50:
ba:98:ae:16:8c:09:dd:09:3b:4a:1d:87:16:3a:29:
92:1b:d6:62:06:90:bf:00:35:79:a1:b4:38:df:3b:
e9:78:e1:58:39:9b:40:72:43:19:73:30:5e:ae:89:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:83:50:AA:51:AD:BF:40:4E:C9:06:9D:3E:78:23:65:5D:0B:CB
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:04:ed:c8:4f:6d:6a:6a:6f:18:53:b6:2a:6b:61:a5:69:82:
3c:b7:75:62:39:e5:8a:9f:4e:1e:41:3d:28:2a:59:a2:81:ed:
f3:5c:fe:c9:c9:4f:62:a9:0c:b5:1a:6c:c6:03:86:60:02:be:
85:0a:bd:85:a9:75:70:7b:55:95:88:2c:b9:5e:30:90:c9:ab:
1b:36:37:16:44:ef:1c:43:eb:6b:c4:e6:0c:66:40:f9:37:fb:
28:be:9f:0d:6b:41:e0:34:07:27:6b:0b:04:a5:80:b0:7b:c5:
b5:98:ab:49:a8:bd:21:b6:81:35:8a:aa:ba:a3:fe:cc:38:c7:
46:e6:8f:18:16:f3:e6:01:e7:27:58:79:13:2e:de:04:ba:be:
7c:95:c0:e5:0e:8e:95:17:a8:2f:64:b8:a3:87:4c:68:fa:e4:
c5:4c:55:f5:37:fe:85:09:d8:61:60:43:31:13:ee:6a:f5:dc:
ad:0e:62:23:26:50:97:c9:f2:a2:07:c1:fc:50:70:37:ed:ba:
e4:30:08:09:3c:e7:ce:f1:16:68:12:c1:40:a0:cb:c8:fc:f1:
b7:93:fb:1e:23:b7:b4:d5:8c:e4:79:ca:eb:40:10:b2:34:f8:
67:ea:1e:9a:9c:6a:42:a3:39:af:16:f4:6d:4a:ce:86:12:ac:
3e:91:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:59:56 2025 by rpki-client