Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: N+1u6ykP0qX4BMqFz/F0dSscVeCwCbU0cRmkOvfPgaI=
Subject key identifier: 78:69:38:D0:B3:21:E2:E2:32:58:52:89:6C:3F:DE:F4:A8:42:87:B4
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 0196C539BDCCE55D54C1D50D408D0B2FC231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 08A5
Signing time: Mon 12 May 2025 16:00:17 +0000
Manifest this update: Mon 12 May 2025 16:00:17 +0000
Manifest next update: Tue 13 May 2025 16:00:17 +0000
Files and hashes: 1: TocS328LtH4EypX0JXxV-WS9TT0.roa (hash: bEdaCkmgCoynn5OTjJyCYh6lNgGRH20s+aBGflckEag=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: A45pBBcYkqtfvZ2VbF3UD2N0lRak/vA1xCQ3aHBe2jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:bd:cc:e5:5d:54:c1:d5:0d:40:8d:0b:2f:c2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: May 12 16:00:17 2025 GMT
Not After : May 13 16:00:17 2025 GMT
Subject: CN=786938d0b321e2e2325852896c3fdef4a84287b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:6f:d0:f2:cc:57:7d:36:dc:bb:c1:cf:5d:
e2:1d:dc:92:98:2c:b3:4d:8e:cb:2e:cb:7f:b5:b4:
67:a2:19:19:82:21:83:5f:a9:c1:9b:ec:b4:8d:32:
ec:be:eb:23:19:ba:a8:be:26:c5:76:44:4b:4c:14:
26:30:1d:18:9b:96:6a:6f:60:9a:59:7a:e2:b7:c2:
de:1b:f8:72:02:e7:ae:94:4c:2f:c2:87:0a:9b:f2:
16:f4:16:25:6c:77:ca:b3:17:a9:e1:dd:c8:0d:c8:
96:26:bd:13:f1:fe:ca:db:40:1a:45:b5:ab:d2:1e:
b7:63:7d:22:f5:e2:e9:81:01:66:7b:0f:28:18:ba:
72:1e:b0:78:a9:47:0d:99:9b:99:34:cb:fe:9f:30:
0e:b9:21:26:46:75:f8:69:95:27:17:a3:28:e3:21:
63:4f:b8:e4:43:36:be:4b:ea:6c:45:17:fa:81:d4:
11:11:5e:53:8e:9a:4c:6f:08:70:6c:c7:00:0a:4a:
b9:21:ef:90:b2:ff:87:0f:fd:8c:a1:ea:0d:c1:61:
b6:79:4f:4b:5f:15:0e:33:ed:88:34:6d:98:09:7f:
5d:b7:15:a9:cf:10:5a:57:71:73:7c:ed:a3:57:9e:
5f:79:f0:42:db:34:4f:18:64:e4:80:5e:5a:cf:b9:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:69:38:D0:B3:21:E2:E2:32:58:52:89:6C:3F:DE:F4:A8:42:87:B4
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e8:6e:ab:bf:43:6b:21:14:d6:97:22:e5:33:d1:06:33:30:
fb:32:9b:3b:ba:6c:cc:7c:c3:b0:a7:41:8a:f3:59:e4:e6:1b:
c4:94:4e:21:ec:8e:b1:36:45:ee:ae:56:4c:85:f9:02:ee:f0:
7f:5b:5d:0f:6d:e6:89:0c:ca:2c:13:72:88:c8:1f:71:9d:92:
4a:0f:9a:e3:3a:c3:82:34:2a:70:60:69:b9:6a:92:1f:94:37:
a1:52:70:f3:03:a2:a2:bd:2a:b6:5f:5c:42:a9:77:ca:5b:dc:
a0:9f:89:78:1f:2e:3f:65:56:65:ab:66:70:d6:0e:63:21:f1:
eb:ae:0e:fc:9c:e4:50:e0:94:b8:bc:b4:e9:fd:93:2f:f0:31:
5c:bb:cd:f1:ee:07:0e:ba:d3:d0:0c:6e:a9:f9:71:13:52:6d:
36:07:2d:6f:54:89:4c:82:fd:03:28:09:33:af:0c:42:84:b8:
e8:73:28:71:f9:7d:f4:f3:30:01:2c:94:f8:37:f1:e9:5c:a6:
1a:99:ae:28:bc:e8:09:eb:1d:1b:0b:80:bc:80:72:3d:59:56:
1d:83:04:3b:92:9c:59:6c:74:01:65:c4:db:cf:c6:84:c9:06:
38:0f:03:9f:ff:36:8a:80:80:a1:33:be:b8:07:ed:b3:9a:54:
0a:63:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:10:06 2025 by rpki-client