Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: w05+f8pMdifUIQfx1sWrfv6K0Gfd58aoaCNzryUvBf4=
Subject key identifier: A8:39:9A:72:63:1A:D4:7B:FB:69:BB:03:2C:95:01:2D:27:1E:8F:4B
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 0196A8E751F0D7F9F8E6086A6A44897779DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0DAD
Signing time: Wed 07 May 2025 04:00:54 +0000
Manifest this update: Wed 07 May 2025 04:00:54 +0000
Manifest next update: Thu 08 May 2025 04:00:54 +0000
Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=)
2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: 75CTmhsJT3Hqyu/RDONogCUHcpgBMqGwpmBOJzOdliU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e7:51:f0:d7:f9:f8:e6:08:6a:6a:44:89:77:79:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: May 7 04:00:54 2025 GMT
Not After : May 8 04:00:54 2025 GMT
Subject: CN=a8399a72631ad47bfb69bb032c95012d271e8f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:63:2d:ec:7a:20:e9:14:03:b0:11:4c:99:
94:7c:3d:88:65:16:3b:65:7f:42:3e:86:0a:32:26:
8e:f9:af:c0:e5:42:a8:81:c3:5a:c5:4c:7d:56:73:
53:aa:4c:52:47:dc:6a:d0:05:1c:83:ff:1e:12:c2:
1b:eb:d4:e3:b0:38:47:e3:b4:73:1f:e5:70:90:7d:
4a:aa:a8:80:a9:1f:43:29:d8:98:ff:9d:19:d0:70:
48:06:44:67:77:75:77:01:b0:a5:35:a8:1c:e5:cd:
7d:98:ad:28:3e:b6:fb:80:2c:86:f5:8f:f0:2f:c6:
80:a1:d8:bc:5f:e7:88:b7:f1:79:fc:db:fb:49:66:
5b:92:07:74:6d:8b:c0:1b:7d:c7:64:31:42:ed:9f:
9e:cb:5e:c6:ee:5b:56:79:07:9a:d7:a1:3b:67:42:
b7:51:4e:e4:66:34:8d:60:dd:f3:a1:2d:e6:15:6a:
58:7b:8a:ba:78:b4:7e:f0:94:df:79:6f:a3:a7:81:
c3:fc:be:a6:c3:c9:1b:c9:8d:0e:55:c9:68:c4:7e:
16:59:d4:5b:c3:26:ea:9c:10:3e:b0:4f:99:f9:9c:
1e:fa:92:e7:ea:2e:46:88:1b:9c:bc:0e:52:5c:20:
d5:2b:9a:98:dc:8b:ac:4f:c9:0e:a5:94:12:1f:79:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:9A:72:63:1A:D4:7B:FB:69:BB:03:2C:95:01:2D:27:1E:8F:4B
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b0:14:47:6a:c7:a0:d9:bb:62:18:f6:91:8f:3b:c7:5c:0b:
53:8e:02:d9:64:04:f7:79:c4:ea:34:8c:e3:14:40:da:7c:df:
06:0e:1d:0d:84:43:47:38:ce:02:b0:f7:ee:5d:7e:22:47:8b:
f4:4d:b1:d5:1a:a3:76:92:8b:f4:83:96:3b:c9:8e:7e:c6:dd:
0b:13:34:3f:8d:59:45:22:aa:6d:b6:fd:e8:2b:61:4a:1d:c4:
af:a2:b9:13:99:5d:f5:f4:3e:1f:b4:46:76:4d:95:eb:9e:c5:
48:1b:68:d0:52:c2:8b:91:2f:f7:f3:22:cc:f5:ac:08:24:a5:
67:bb:9e:aa:12:91:9e:b0:7f:ba:88:d8:2f:40:3b:ea:ce:10:
5c:54:d9:45:2a:c3:c4:c6:a2:bc:3b:00:d0:26:7d:58:d2:7e:
2f:50:19:7d:c0:a0:b3:62:06:38:93:69:91:13:1c:07:2e:26:
01:aa:6c:11:ed:a3:62:3d:2e:77:98:89:26:65:e2:11:01:55:
1e:a9:4e:19:26:a4:ce:d2:ae:b3:21:f8:84:d9:4d:ef:51:a2:
0f:e0:21:02:fc:de:9b:9e:53:6f:24:42:4e:5f:93:d0:ec:75:
ed:8b:37:a3:4a:7c:b4:12:d4:04:59:92:78:53:51:97:ea:b3:
30:97:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:45:04 2025 by rpki-client