Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier: Yv3FQ1fHEOqItfz3HK0u6kdYXkg++O1XrJnV6S7hdpc=
Subject key identifier: 11:7C:07:5D:EF:CE:D6:C8:7C:CC:30:5F:7F:35:52:68:95:9B:AC:05
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial: 0196CFF44BBD42A6B7B3A8B52BD1954C78A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 18:00:15 +0000
Manifest this update: Wed 14 May 2025 18:00:15 +0000
Manifest next update: Thu 15 May 2025 18:00:15 +0000
Files and hashes: 1: SxgKNPaYJVhAK36SOSTuyxJmYzI.roa (hash: iBEUhnRScZ+rajzC9bqU9rcXbnYIQMvrpQOY+tW8FQc=)
2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: wjdUU2abFxduq9Fe2Jn0AEQzuJxbgboXODZH3IGzajU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:4b:bd:42:a6:b7:b3:a8:b5:2b:d1:95:4c:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Validity
Not Before: May 14 18:00:15 2025 GMT
Not After : May 15 18:00:15 2025 GMT
Subject: CN=117c075defced6c87ccc305f7f355268959bac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:3d:d8:4b:4b:57:79:7e:75:71:c9:fb:fc:
e1:f3:de:15:c8:07:3c:0d:2f:b3:45:27:ce:5e:c8:
24:41:4e:01:bb:56:a3:4d:28:87:c3:31:a5:d1:69:
e9:b4:56:cc:d2:2d:45:52:88:32:a9:ab:1b:86:4f:
e7:f8:21:5e:dc:74:18:3b:39:2e:48:97:3f:82:8d:
bb:39:25:17:50:0a:13:9a:f8:e4:74:75:2e:b6:25:
43:ac:da:f5:6a:a0:c4:41:98:4a:a0:6d:94:10:f9:
9d:f7:4e:b5:a1:c8:9a:58:6c:58:a1:a1:3c:6e:57:
c9:98:8b:6f:54:4a:d2:d0:59:05:d3:00:a1:9c:c2:
b6:5a:8f:24:db:f8:58:45:7a:0a:4b:92:ee:80:6b:
c8:23:ba:10:8f:e9:8a:d7:45:32:5f:e5:c2:23:53:
f9:db:48:90:5b:36:b6:8f:a7:4c:5e:01:8f:9b:20:
ac:0d:cb:7e:e0:9e:b5:23:8a:b5:f9:66:7e:80:ea:
f7:62:49:c9:5c:dd:97:b5:d7:22:8f:1d:18:8e:aa:
e8:55:25:25:dc:cf:38:62:e8:91:e9:46:92:54:39:
d7:35:cc:b7:80:da:9d:ce:87:8a:5d:cb:8d:b3:8d:
7d:11:96:34:2b:e8:53:60:a1:80:a5:91:bf:e8:90:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7C:07:5D:EF:CE:D6:C8:7C:CC:30:5F:7F:35:52:68:95:9B:AC:05
X509v3 Authority Key Identifier:
keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6b:1b:a5:7d:1a:e9:80:56:3d:7b:b0:61:7c:9b:d8:65:4b:
8e:b8:96:ea:f7:13:55:69:49:16:60:f9:3b:22:a5:9d:72:72:
0d:22:ec:23:d9:51:88:66:7e:78:f1:df:5a:49:78:f2:74:b6:
d3:54:a2:3a:10:d3:8a:99:1c:b2:3d:bf:2b:b9:0a:02:37:76:
79:1c:a1:72:da:d8:57:bb:30:c9:ee:fb:99:77:d1:1f:26:a1:
12:2f:e1:9a:33:4a:9c:bb:5c:53:aa:36:ba:05:d4:fd:3a:34:
12:12:42:c6:85:89:a7:aa:5d:9b:1c:0b:9f:7f:43:ce:ad:2c:
4c:90:e8:30:a5:f2:ab:37:5d:3e:a5:0a:e9:34:71:6f:23:88:
e7:0c:00:bc:73:69:2d:d0:18:2e:2a:db:38:4f:ae:3b:e1:f8:
3a:46:ef:3d:4b:94:04:a5:a4:05:96:57:2e:cc:51:e2:05:1f:
c5:87:ed:c9:28:43:06:37:cc:10:8d:ec:3d:8a:72:0f:8f:e5:
c2:7e:80:7e:c9:9b:e6:3b:43:8e:88:c6:bd:a3:55:99:ef:4c:
3c:6d:6e:12:ac:da:0b:88:d6:95:aa:9b:ef:c3:08:c5:c0:01:
4a:18:7d:6c:68:c3:76:ee:f3:65:36:af:86:e3:06:94:39:05:
20:86:4b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:17:38 2025 by rpki-client