Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: GlGOP8e4lAsMgPhciOAykVolgvxJhK761BxmIFHFYYg=
Subject key identifier: D5:6F:5B:2D:F1:F0:05:5E:48:DC:3D:0D:90:15:AE:49:AD:E3:B2:75
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 0196B96CB69D6EE834EF276D8AD081A06617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 1545
Signing time: Sat 10 May 2025 09:00:31 +0000
Manifest this update: Sat 10 May 2025 09:00:31 +0000
Manifest next update: Sun 11 May 2025 09:00:31 +0000
Files and hashes: 1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: V/F/NTrX3bx/fiU+nlprmZlxBIQhZQGV1hXOPwmmA+0=)
8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:b6:9d:6e:e8:34:ef:27:6d:8a:d0:81:a0:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: May 10 09:00:31 2025 GMT
Not After : May 11 09:00:31 2025 GMT
Subject: CN=d56f5b2df1f0055e48dc3d0d9015ae49ade3b275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:36:e6:12:43:31:38:4d:3c:30:da:07:88:
58:35:75:86:95:35:4f:e1:d5:10:e6:01:63:6a:5a:
94:7e:bf:31:01:8c:b6:5e:54:6a:ae:91:aa:de:30:
f3:b2:8f:71:44:79:9a:7b:23:d7:8d:fb:cf:f0:b0:
1a:19:fc:1a:ac:80:20:0a:60:1a:a5:47:f5:7f:7b:
85:91:90:c1:24:8d:bc:9a:9d:43:ed:b6:37:47:0d:
4d:cb:8c:11:d5:b4:54:1f:21:8f:61:58:c1:6c:74:
19:1f:9e:43:6d:93:67:a1:87:76:38:30:c8:2a:8c:
43:37:a2:ee:74:e0:77:ec:58:fb:4d:da:f3:79:fb:
8f:44:ad:cd:1f:ee:59:7e:d5:dd:b8:fc:c3:cd:9c:
a3:08:86:ff:e9:c3:56:2c:e8:77:66:4d:b7:e9:12:
a8:8c:6b:66:32:4c:f7:b2:aa:0a:7b:d4:76:02:ab:
00:0d:b1:0c:d8:96:b0:95:f1:06:40:c9:f2:ce:d3:
ea:d7:11:ce:c3:c8:40:e7:22:74:52:a7:7a:a2:f4:
71:36:a4:0d:80:7e:d4:21:70:bb:3b:1d:29:be:10:
47:b7:a8:b5:40:29:0a:20:37:18:74:b2:4a:80:41:
97:bb:62:8e:c4:c0:32:83:08:33:48:70:1f:70:37:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:5B:2D:F1:F0:05:5E:48:DC:3D:0D:90:15:AE:49:AD:E3:B2:75
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e8:e2:87:e5:99:c6:60:74:59:81:d7:c5:89:44:ca:77:69:
96:2d:1d:f8:c2:41:01:29:3f:8a:40:b8:4b:7e:44:72:b2:d8:
03:0a:5f:53:46:c7:12:84:ef:9c:17:54:29:75:f3:38:fc:91:
be:3e:a8:3b:07:e8:f6:9d:4e:9a:4f:46:91:c8:7b:d5:13:05:
43:03:84:0b:e6:e2:3f:fd:2e:11:f4:92:ab:92:b6:9c:1a:27:
ce:e7:d1:c1:32:8b:d8:09:47:9d:1d:58:71:c0:8b:b8:49:7c:
d2:a6:c5:95:64:5f:4a:dc:5d:24:a9:ae:65:b5:c7:ea:c7:b1:
f0:d3:e9:8a:b5:6e:b5:02:88:4c:02:9f:2d:24:2a:f3:64:3c:
91:61:a3:e9:7f:85:17:4b:4f:4f:b0:cb:90:0d:43:db:a5:5f:
38:3c:58:e3:70:a2:91:c2:1c:46:62:e7:11:82:b7:fc:14:5a:
a7:06:59:19:94:99:7c:9c:3c:23:69:bc:05:86:cf:e4:ab:bb:
d7:d9:20:b9:1d:79:63:e4:9f:e1:da:5d:67:b7:c6:e2:ef:3d:
97:9b:e6:32:d4:5a:cb:55:f0:c9:5a:50:67:a0:86:e2:36:69:
37:21:20:bf:35:d6:1b:73:e0:43:0d:28:6f:b5:f1:17:be:90:
e1:ea:0c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:56:36 2025 by rpki-client