Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: 5E8ExVuWTm6WNAYabTqTi3LRT3Tzfuw4OVr7R2z+mL4=
Subject key identifier: 0A:00:F4:ED:FD:28:34:EC:8A:D4:F5:E4:03:B4:A6:28:C0:13:10:46
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 0196BF011F640885A942F8B807FE811370FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 0105
Signing time: Sun 11 May 2025 11:00:43 +0000
Manifest this update: Sun 11 May 2025 11:00:43 +0000
Manifest next update: Mon 12 May 2025 11:00:43 +0000
Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: xkZXPuzYw163yomWaXeIvkIftt2zdpVyoIi/RjAHkrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:1f:64:08:85:a9:42:f8:b8:07:fe:81:13:70:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: May 11 11:00:43 2025 GMT
Not After : May 12 11:00:43 2025 GMT
Subject: CN=0a00f4edfd2834ec8ad4f5e403b4a628c0131046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:ea:99:ed:02:58:15:23:32:48:e3:9e:1d:
0c:de:c9:cb:c1:4d:06:97:62:d0:23:11:cd:8f:42:
c2:56:a1:72:63:2f:05:22:e1:f7:25:1c:d3:4f:7f:
2e:e4:b8:d5:dd:f1:97:98:3d:1d:d2:13:c1:b1:30:
6d:85:27:93:c7:62:e5:8f:1e:e5:20:72:c5:9f:d2:
37:f1:74:e3:30:70:c9:89:24:d6:97:91:be:64:a3:
d8:3f:8d:22:35:30:29:f7:d1:cc:0a:76:04:f8:ec:
ef:2a:01:f6:b9:ed:f3:a4:cf:85:f1:ac:4c:7a:14:
3f:7d:df:59:04:06:e0:cf:c2:60:f5:87:91:7d:25:
b6:b4:36:a4:17:e5:f6:ec:42:c8:14:03:d7:75:c0:
ca:4e:65:84:dd:fc:63:fe:8d:8d:d9:ad:ce:64:19:
1e:2c:1d:48:c0:83:98:74:04:9a:00:31:98:f9:68:
57:ce:e0:7f:b9:8a:c5:b2:c3:d8:f2:c1:90:21:b7:
bd:42:65:6c:33:67:64:00:b0:2f:48:57:c5:ab:66:
2b:6b:d7:49:c8:ed:23:ac:21:86:c7:91:e7:4d:5f:
e8:52:c8:c1:1a:f7:68:5a:41:54:0d:1e:1d:5b:a6:
d8:f4:50:d8:03:10:f5:0b:97:03:ff:3b:a9:94:ed:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:00:F4:ED:FD:28:34:EC:8A:D4:F5:E4:03:B4:A6:28:C0:13:10:46
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:75:7b:31:06:cd:46:5c:b5:ca:07:c1:eb:56:25:06:68:f0:
b2:e7:4d:98:71:a7:e5:2c:e7:dd:c8:b7:44:d5:c5:0c:35:70:
f6:2c:21:1a:2c:25:ef:a1:2e:c1:75:50:18:17:06:d8:19:0b:
2f:0f:c7:51:7c:4b:2b:90:02:fc:e3:a8:1a:1f:bd:f7:d7:99:
e3:56:ef:49:19:da:81:04:93:49:a0:0b:6b:28:36:21:ba:93:
c4:ca:b9:a3:5d:85:34:8a:ce:f3:90:6d:60:7b:d5:2c:af:36:
d1:26:92:e0:1d:24:ec:4d:0f:3c:9d:6b:1d:15:c4:57:4b:67:
74:b6:0a:4e:0c:01:1f:f3:21:11:2b:6a:7b:4d:c2:88:a0:b6:
79:af:bc:b6:7f:be:02:a4:a9:73:3c:b8:f6:3e:02:7f:9c:c0:
0f:4d:11:ee:08:d6:c5:22:0e:6c:35:08:f5:a4:a1:04:1c:c9:
3f:67:e1:54:e0:f3:7b:10:7a:19:09:6b:9e:d0:64:a9:b9:c7:
8b:76:a9:40:f5:3c:68:9b:6d:6c:2e:a4:d7:5e:3d:c7:e5:6c:
73:50:69:2c:5f:bb:6c:c3:a7:ab:7a:a0:c1:fc:e6:78:bd:70:
2e:d0:eb:63:b7:24:12:09:53:91:70:0d:0e:c3:f3:c6:27:f1:
50:70:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:10:48 2025 by rpki-client