Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: 2emEuAVOUIMtG34hOkiJJe+8sg+fUd6dmRSakcrEmXk=
Subject key identifier: 76:B3:B0:34:D9:CB:B4:AB:CB:53:57:44:85:C7:42:54:D5:C3:EC:30
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 0196D099770D536EA073FFD3A114F204D474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 0186
Signing time: Wed 14 May 2025 21:00:40 +0000
Manifest this update: Wed 14 May 2025 21:00:40 +0000
Manifest next update: Thu 15 May 2025 21:00:40 +0000
Files and hashes: 1: ZK2-Yf0vyUn-1yqVZSeh59hAASc.roa (hash: dJFWEY6bKtkQB9DqJ5/i3H6PU+2US3ATnt6WwIQ5YmQ=)
2: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: 2eq3GOXOjDfZ2cviBMaLZ0ReMZ5mkg0or48jSCI1Auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:77:0d:53:6e:a0:73:ff:d3:a1:14:f2:04:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: May 14 21:00:40 2025 GMT
Not After : May 15 21:00:40 2025 GMT
Subject: CN=76b3b034d9cbb4abcb53574485c74254d5c3ec30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:fb:2e:57:d6:d8:79:4d:a7:6c:7c:1f:93:
5f:22:12:95:cd:d3:e2:9b:68:b1:df:b1:cc:52:e4:
55:8a:16:b2:15:da:de:86:26:a0:48:57:73:ea:e0:
97:54:ba:ec:7f:87:d4:79:84:44:0e:c1:a0:ad:71:
17:a5:d7:d6:de:8b:97:84:11:1e:aa:bf:c3:f4:f8:
09:d4:08:c9:4b:b4:dd:1e:5d:2d:72:aa:00:8d:e6:
93:d4:a5:e5:c6:de:cd:6b:64:a0:7a:81:55:1a:00:
b1:9a:9d:77:3a:fe:12:cb:75:ed:7d:61:9d:75:f8:
68:a3:e5:86:5c:9e:a1:dc:06:ca:dc:63:c3:0a:c2:
b6:0c:23:28:76:e9:3e:7b:35:bc:ee:6b:14:ec:b7:
62:06:95:d4:de:77:e5:8a:9e:0a:91:5e:9d:31:90:
ad:44:fd:7c:b6:61:72:05:7f:7b:31:62:1d:41:5e:
aa:c2:04:26:0e:b0:87:91:4c:9c:1f:7c:59:70:83:
5c:eb:59:c1:ad:e8:2d:29:3a:3c:df:20:73:c9:ec:
e6:b1:59:f6:3b:21:c3:2c:e1:91:a7:39:27:b3:a4:
a4:67:f6:3a:53:95:ae:62:67:89:f4:44:f5:73:94:
79:dc:8a:97:c0:fb:2c:da:55:97:5c:10:a0:2d:30:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B3:B0:34:D9:CB:B4:AB:CB:53:57:44:85:C7:42:54:D5:C3:EC:30
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a0:9c:75:99:59:31:d9:63:61:68:70:7f:19:5d:bf:42:cd:
05:cd:c7:37:31:fe:35:7a:f2:2c:f3:21:09:c3:c1:06:22:f9:
10:1b:2f:63:11:74:ca:83:88:0c:74:b2:a5:27:db:9e:e1:b3:
f2:d4:5d:e6:eb:0a:16:40:44:16:7e:cf:3a:2e:44:70:07:5d:
1d:3a:cf:45:02:42:ed:1a:2d:d0:da:08:25:e1:62:df:7e:c1:
96:29:2f:08:53:64:f4:6f:6a:36:1c:3c:9f:fe:ed:e1:0a:fa:
cc:9e:39:0b:04:3b:0c:c3:8b:9f:2c:0a:e7:2e:1b:01:ae:91:
5b:b6:97:72:8e:1e:7e:0b:e8:d6:7b:94:75:53:97:13:72:06:
35:52:44:54:a9:ef:b5:63:a2:56:28:3b:82:96:24:22:bd:b3:
65:ea:5b:c4:0e:0e:59:e7:fb:b9:ff:56:c1:c8:94:b1:a6:18:
6a:cf:d1:a5:90:23:64:3b:66:31:26:a5:95:4b:96:e4:7d:e3:
24:f8:07:9d:c1:c7:cf:0f:e0:f4:a6:6f:a4:2d:25:c5:b0:91:
84:6d:f4:6d:4c:33:0f:f2:05:52:51:84:32:58:d6:d6:96:d5:
c5:4b:df:9b:c0:a5:f3:74:14:d2:39:66:68:22:3c:ff:1d:16:
cc:95:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:03:03 2025 by rpki-client