Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File: o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier: gNB8gqDP48XIh2M7sxIukK20JncHLJwgCR2OpzH8Hus=
Subject key identifier: 13:47:DA:7D:D1:01:B9:01:C4:C5:83:C3:6F:47:AA:C7:AB:DF:EC:59
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer: /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial: 0196CE05DACB1363C312AE0E6D515A574A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number: 10A8
Signing time: Wed 14 May 2025 09:00:12 +0000
Manifest this update: Wed 14 May 2025 09:00:12 +0000
Manifest next update: Thu 15 May 2025 09:00:12 +0000
Files and hashes: 1: 3REEAprnZIBusO6q6WWrCX9P-HM.roa (hash: vH8qgeYWcERpU9E7qeOHsrxBazYwgyfC550mI+D0FkE=)
2: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: JPJ0RrVpWrjr0JZp1xrY5lWcQjOYnlyirzFbwJwL09A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:05:da:cb:13:63:c3:12:ae:0e:6d:51:5a:57:4a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
Validity
Not Before: May 14 09:00:12 2025 GMT
Not After : May 15 09:00:12 2025 GMT
Subject: CN=1347da7dd101b901c4c583c36f47aac7abdfec59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:70:61:3e:c6:30:5d:65:06:17:23:f6:cd:
b3:1b:55:48:3d:f6:f3:c1:60:3b:ee:fd:9a:80:3d:
db:14:e2:d9:eb:76:b5:1e:54:01:f5:56:3f:a3:3e:
1f:e3:0a:19:97:c1:d6:ca:92:c3:1b:96:33:18:62:
97:34:b2:7e:fb:fe:98:a8:0b:3e:dd:d9:24:60:be:
80:52:dc:1e:c5:8a:8e:2a:c4:90:48:7e:36:c1:20:
75:57:d2:68:81:ff:1d:4d:75:f7:e2:3d:94:c1:3f:
75:d2:ee:8a:db:cd:64:73:2a:84:c5:bf:d1:41:a6:
5b:8b:6a:da:bc:89:c5:c9:4d:1b:04:25:a9:df:85:
dd:5f:72:9d:5c:c2:5f:17:34:f5:30:fa:63:f5:39:
d5:e5:1f:81:0d:34:dd:89:1e:af:ea:23:05:f4:34:
59:e6:a8:b4:e3:33:b4:16:8d:cb:d5:fb:65:7d:1d:
c2:23:24:b0:e2:fb:56:2c:77:89:6e:83:8f:1c:40:
07:49:6c:79:e9:31:e9:2b:83:0d:98:b9:0b:a1:c4:
6f:4e:f7:e9:25:f5:02:fb:8f:22:77:e6:1c:2d:98:
40:9c:97:18:30:d9:c4:47:f8:6e:83:9d:69:83:f6:
c1:44:dc:3d:7a:5d:9c:cf:f6:c2:d3:ab:67:f6:12:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:47:DA:7D:D1:01:B9:01:C4:C5:83:C3:6F:47:AA:C7:AB:DF:EC:59
X509v3 Authority Key Identifier:
keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a3:ac:8c:e5:31:e3:c3:fc:f7:cf:ca:79:a9:d7:20:5b:c5:
89:2b:f3:06:8e:b1:17:57:0d:a9:fa:f7:a3:b1:0b:b8:73:88:
7b:e9:6e:7d:f2:3b:7c:df:47:a7:f2:75:a1:46:fa:2d:86:36:
19:91:f3:22:8a:67:fb:2e:a9:be:0a:22:61:13:45:41:1f:84:
de:76:fa:e4:34:45:50:31:16:c1:a3:08:2b:70:5e:60:13:13:
32:67:8f:95:5b:2e:03:c6:6b:55:49:d8:33:30:20:15:cb:fe:
23:c4:57:80:5c:4f:06:bf:0f:5b:30:9a:2a:f5:31:f7:25:9b:
06:0f:1f:b3:ec:8e:e5:d2:e7:d6:ed:26:8f:19:7b:fc:31:e2:
54:76:62:63:ff:b8:bf:1d:fa:45:39:c6:e9:7d:e1:11:16:5f:
03:d5:36:2c:85:b5:bf:04:3b:e2:86:83:d4:17:9d:3c:9d:7d:
a2:30:4f:83:be:63:e2:82:5d:60:45:4f:65:88:d3:19:b7:6e:
19:18:8e:3d:3f:2c:b4:29:c9:91:80:f1:4e:a6:25:42:12:2f:
1b:66:3e:e9:dd:c4:a1:80:bf:92:8b:4e:a7:ec:35:b2:f4:bf:
f5:9c:8a:11:34:11:a6:df:70:42:1c:fd:a2:7f:b0:50:b0:ce:
73:83:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:37:14 2025 by rpki-client