Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: 6+wMtiEm2pEi121ELP/+iDUgs5FVqoYWfoU7Yl2wkA4=
Subject key identifier: 81:41:0A:B4:64:4E:0B:98:C1:08:55:E7:E3:1F:B8:D6:68:2B:01:16
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 0196BFA5E94F7AD7E3F8072F5A0915B38FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 098E
Signing time: Sun 11 May 2025 14:00:43 +0000
Manifest this update: Sun 11 May 2025 14:00:43 +0000
Manifest next update: Mon 12 May 2025 14:00:43 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: HgdCqp7DiJ1zCqweEEAcpyzWZhkYDQG0dbqfovNM6H8=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:e9:4f:7a:d7:e3:f8:07:2f:5a:09:15:b3:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: May 11 14:00:43 2025 GMT
Not After : May 12 14:00:43 2025 GMT
Subject: CN=81410ab4644e0b98c10855e7e31fb8d6682b0116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:89:67:41:14:8b:0c:c0:25:7d:c2:46:11:
c5:b8:81:a0:b7:72:e6:4e:c9:05:f6:96:39:0e:52:
70:f2:df:7a:ca:c5:25:b0:a1:b3:a3:60:67:f2:fe:
0f:9f:94:80:17:c5:40:25:20:f6:81:02:65:b2:d8:
e2:08:27:86:84:d6:ee:aa:52:96:a3:0d:1f:08:d7:
a3:93:66:39:40:fe:fa:1c:ad:d8:2e:27:da:12:2a:
9b:6d:a4:ec:de:15:d7:60:3d:67:3f:d0:5c:30:82:
4b:6f:33:20:91:17:76:6a:71:1a:ea:21:a8:88:5b:
89:be:6a:f7:91:9a:69:a3:dc:41:7a:e4:1c:97:a9:
ea:15:4d:08:03:06:d4:55:7d:71:c2:02:ae:4a:48:
28:95:12:1b:ac:a5:0b:c1:09:ff:bd:19:aa:88:3e:
de:57:4b:a7:bf:64:b0:ac:81:86:5c:ea:56:32:c8:
3d:58:73:fc:84:6c:09:3d:49:21:b7:48:ed:ba:ef:
d5:50:f1:a2:65:3e:c4:6b:61:74:cc:65:3f:eb:4f:
ee:f5:c2:a4:f2:19:b9:54:3b:41:15:be:ae:f8:d1:
20:f9:dd:de:d7:25:2d:68:86:58:e5:94:64:a1:e4:
70:5b:b7:8b:73:04:64:fd:d7:3e:92:0e:b8:b0:84:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:0A:B4:64:4E:0B:98:C1:08:55:E7:E3:1F:B8:D6:68:2B:01:16
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4f:a4:18:68:ef:bf:24:0f:01:c9:d2:89:33:87:b0:df:07:
47:38:f1:b0:08:e9:d6:c5:b3:9a:9b:e5:e6:3e:59:b5:57:b6:
fd:da:8d:f7:74:f6:69:59:23:cf:68:e3:e3:b1:a7:e9:23:2e:
d6:38:30:80:65:59:8c:5e:d6:d1:d0:b1:74:d9:2c:da:28:80:
0d:5d:cd:20:6b:8f:9a:67:7c:bd:b8:39:a6:04:9b:cf:d5:42:
3a:83:d3:8a:b3:78:e0:4a:f0:82:9e:54:e3:f4:03:0f:5a:bf:
78:bb:51:6c:d5:d0:7c:09:c2:4e:12:28:f2:5d:37:7b:81:a4:
fd:be:ac:99:95:2b:49:db:a9:78:d7:44:fb:2a:bb:9c:d7:f1:
9e:24:3b:ed:83:f7:ea:cd:c3:01:0d:ec:3e:4e:3f:12:34:7c:
81:92:f9:a8:ca:f9:0b:1a:db:d9:61:8c:3f:e4:69:30:fd:36:
46:5a:2d:5d:23:9e:46:74:cf:e4:24:ce:a8:11:99:8a:8f:67:
bd:83:fd:2d:a6:63:09:17:46:49:68:10:d8:29:06:60:79:ed:
3a:56:c3:f9:76:c5:fc:9d:7a:53:81:e6:4c:25:04:a0:76:a0:
7f:65:29:06:fd:37:7e:06:00:63:22:79:01:2f:db:dc:a2:91:
1b:2a:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:07:26 2025 by rpki-client