Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: 7y14s4keGIz60ZN+vodLQGwi8/CQ/L9vahtTm7LA8m0=
Subject key identifier: 6F:D5:1F:82:37:FE:36:9A:41:A7:12:A0:4C:6C:7C:85:28:ED:40:37
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 0196C2A728876EBFD46F9CCE43BA7DE52FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 1355
Signing time: Mon 12 May 2025 04:00:56 +0000
Manifest this update: Mon 12 May 2025 04:00:56 +0000
Manifest next update: Tue 13 May 2025 04:00:56 +0000
Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: rA1/gnUYdWKz2ksXVkIEUj5HO6bH3j0Aks4GS8KtZjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:28:87:6e:bf:d4:6f:9c:ce:43:ba:7d:e5:2f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: May 12 04:00:56 2025 GMT
Not After : May 13 04:00:56 2025 GMT
Subject: CN=6fd51f8237fe369a41a712a04c6c7c8528ed4037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:cc:55:7d:32:46:fc:d1:dc:2f:06:3b:9d:
27:c5:94:ed:ba:39:c8:5d:d4:87:94:be:e4:8a:19:
df:6b:f1:0b:a7:0e:a7:78:d6:2d:69:bc:13:82:9b:
46:de:81:40:ce:b0:0c:67:cb:52:8d:63:27:0f:1a:
ef:28:67:39:57:57:56:3c:4d:55:9f:15:5f:fa:10:
72:2c:d4:0b:1e:4a:41:e4:ee:d9:89:df:24:2a:df:
30:2a:50:95:6d:d0:4e:68:95:62:a6:db:66:5a:8a:
24:19:ea:c7:0d:c4:9a:28:60:3b:c9:73:53:c1:70:
1e:69:c7:d0:f9:85:9c:31:5e:de:a2:31:af:d7:0e:
23:17:9d:fe:e0:c7:db:49:ef:96:70:09:34:a4:74:
c3:26:88:80:4c:0b:3f:b3:6d:97:2e:4f:13:42:c4:
dc:73:f6:3e:dd:33:13:74:7e:25:14:53:c4:42:c7:
64:e7:d9:b5:25:2f:43:ba:8a:64:32:44:c2:9f:b3:
3c:d8:6f:ff:91:64:c7:82:60:fe:f3:07:45:62:6c:
fd:e9:1b:9d:50:dd:e5:37:70:6e:f8:e1:98:82:90:
ee:a5:6e:b8:8c:7b:ed:4a:9c:4b:86:92:c0:9f:f9:
18:10:3e:e0:03:8f:e7:b5:6b:1e:c8:85:00:04:1c:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:1F:82:37:FE:36:9A:41:A7:12:A0:4C:6C:7C:85:28:ED:40:37
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8b:0a:f6:74:95:9a:ef:67:18:4b:cb:74:98:aa:26:65:41:
4b:a8:2b:a5:e1:90:a0:85:d3:e9:31:9a:fd:59:73:0f:c4:7f:
45:db:cb:40:b4:29:f2:ff:00:ef:4d:e8:12:0c:b2:7c:ce:e1:
8d:c2:5b:ad:78:06:85:6b:42:f9:2c:6e:f3:8a:8c:89:4a:36:
2d:a0:b0:c6:f0:56:47:c4:28:bd:0c:d7:b2:39:ee:11:30:8e:
d4:56:fb:c5:23:0f:ef:52:51:53:f7:25:ff:ef:fd:56:dd:40:
70:c0:38:ef:8f:c9:02:42:99:d5:73:97:99:73:69:4d:e0:4f:
8b:d3:60:54:86:17:6b:ac:43:a7:f9:76:51:bf:71:42:ea:20:
49:ac:18:83:ec:00:b8:75:d6:80:14:c0:d6:bf:19:15:e2:e3:
20:06:ac:84:ae:8d:be:3c:5f:28:a8:f7:b3:33:46:1f:35:81:
6b:5c:a1:c8:42:dd:0b:5e:03:d7:aa:b6:2a:4a:c6:4d:da:43:
04:15:cd:9f:8c:43:fa:79:7f:fa:0f:e5:14:19:7e:82:eb:d8:
99:cd:fc:69:17:94:e4:e9:6a:91:83:3b:4a:46:4f:86:33:26:
a7:b9:db:d5:ce:62:59:ee:b4:04:a3:dd:9b:ad:b7:37:3c:ee:
d5:17:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:18:38 2025 by rpki-client