Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: NQDD0YWUmLMDYISkuDrPtFF/AENzzjzVpM/f+AVwjWA=
Subject key identifier: 22:A0:40:93:37:51:36:DE:99:FF:C6:77:E0:50:C9:10:16:3F:C9:1F
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 0196E56A178B375F176571621794E7D618B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 05E6
Signing time: Sun 18 May 2025 22:00:57 +0000
Manifest this update: Sun 18 May 2025 22:00:57 +0000
Manifest next update: Mon 19 May 2025 22:00:57 +0000
Files and hashes: 1: RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa (hash: a99rlpRHuLbwwwhP8DmXyZr4TiQSJ2/sdHfuj/shU7Y=)
2: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: V+8cWZwXNilIQ19BwA7nnlxICF1PYpWUKLFtIketZPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 May 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e5:6a:17:8b:37:5f:17:65:71:62:17:94:e7:d6:18:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: May 18 22:00:57 2025 GMT
Not After : May 19 22:00:57 2025 GMT
Subject: CN=22a04093375136de99ffc677e050c910163fc91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:23:2e:bf:90:8c:5b:86:a6:e1:23:25:7a:
37:30:a6:b3:a9:1c:34:d8:fa:88:7d:85:a7:f6:f1:
3a:14:48:fa:7a:22:bf:c5:98:5d:37:b1:94:e7:87:
c9:01:35:b7:6c:21:3f:51:5c:8e:51:86:fd:2e:01:
a8:d3:9b:bd:c3:a5:d2:37:d4:7b:cf:cc:26:b0:9d:
66:70:3c:5e:54:d9:6e:64:63:99:21:ff:9a:b5:d3:
4a:fd:e6:00:e6:33:2a:5f:94:1c:6b:3a:6f:42:58:
37:ba:a7:3d:5c:65:b2:1e:da:2a:dc:12:f1:b2:a7:
72:e4:67:7b:4f:96:51:86:7e:8b:5f:08:1d:c6:18:
e2:79:61:ab:8c:7d:d3:ad:f1:88:6f:1b:c9:f9:07:
91:1e:9d:8c:19:cc:a1:cf:a8:22:1b:e8:db:59:1a:
a7:18:3c:0c:86:a3:58:47:8c:15:2e:e6:8b:bb:c0:
ff:f5:01:66:6f:57:5f:98:ac:ea:9d:c6:32:c3:91:
43:d4:b5:35:e3:97:43:f8:e2:90:a2:2a:07:df:0e:
6a:32:14:8b:8e:d0:b5:b0:51:a6:71:5f:1f:8c:23:
d9:74:70:3d:e5:41:36:ec:d5:6f:96:06:b1:01:df:
05:a2:84:77:23:28:d6:2b:7c:89:11:6c:4b:b0:09:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A0:40:93:37:51:36:DE:99:FF:C6:77:E0:50:C9:10:16:3F:C9:1F
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4d:2a:71:aa:6b:cd:c9:18:05:c3:ac:1f:8d:d2:85:b7:2d:
9f:da:7d:e3:d7:10:12:bb:0c:a5:e7:77:87:32:6e:46:ee:b3:
dc:65:55:f0:ed:ce:ad:76:ed:fb:09:29:48:2e:ac:f9:86:2c:
eb:8a:31:20:06:9c:cc:fe:6c:c4:11:14:81:a6:92:53:78:70:
07:57:4e:f2:94:ab:1c:21:95:05:a5:92:f5:75:43:a7:5b:19:
0e:00:d1:9a:31:2d:da:8e:14:ac:35:20:33:da:bb:01:db:70:
a9:9b:e9:f9:20:62:84:ef:86:24:d2:8f:7d:aa:b6:09:d7:31:
7f:af:c0:a9:61:7c:f4:b2:85:11:c9:55:f7:24:9b:e7:b8:1a:
51:ea:ec:31:6c:f6:de:75:ce:49:89:20:eb:5e:3c:b7:96:eb:
f1:b9:81:49:d0:63:4d:0d:db:60:47:43:f8:99:60:f0:b1:29:
65:2a:b7:25:a9:57:33:f8:83:1e:6d:0a:df:05:11:64:45:74:
c9:ec:15:66:ec:e4:1b:bf:b9:de:aa:8d:37:74:28:fc:22:a5:
1c:6a:81:2a:00:ae:f3:b1:14:c1:9a:5e:58:bb:f8:4a:21:e1:
56:89:25:75:07:f2:ad:4d:26:1b:87:2a:b2:42:9d:00:6b:15:
92:04:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 04:08:24 2025 by rpki-client