Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: pxiIWZkfV2Nqa5U9qmNgG267yAiS9zqXDmlkKxNjSiA=
Subject key identifier: 96:8C:39:B3:6C:89:8F:A1:E5:64:5E:60:81:28:B6:7F:A2:C1:BD:89
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 0196D8F7982CD675CAC5C8D80EBA70938679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 1542
Signing time: Fri 16 May 2025 12:00:27 +0000
Manifest this update: Fri 16 May 2025 12:00:27 +0000
Manifest next update: Sat 17 May 2025 12:00:27 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: 82wNom0mD82qtWP6wa66dW1Edi4pHQE+69pGNtjj4IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:f7:98:2c:d6:75:ca:c5:c8:d8:0e:ba:70:93:86:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: May 16 12:00:27 2025 GMT
Not After : May 17 12:00:27 2025 GMT
Subject: CN=968c39b36c898fa1e5645e608128b67fa2c1bd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:c6:cd:54:25:e8:22:e3:3d:5d:1a:40:5e:
6b:47:d3:4b:f7:97:b2:59:fa:5d:70:28:7d:77:b5:
6a:31:fd:48:01:18:de:01:c3:7b:2f:12:6d:aa:4b:
c1:45:35:7b:4f:9a:98:43:ab:12:40:b7:3e:a7:85:
ea:d6:56:8f:af:e1:af:71:0f:8a:de:c6:e1:2f:b2:
7c:d8:5b:89:60:38:93:99:ef:54:9c:a9:21:81:07:
4a:da:a1:07:f3:3a:d3:4c:7e:b2:b9:d6:84:1c:49:
a5:52:f0:b5:5c:23:93:00:be:6d:e0:d3:2d:5a:e8:
3f:f0:8b:31:03:11:b6:72:0f:a8:bc:65:d8:59:05:
ef:b5:c8:45:a4:c6:cb:47:67:a3:65:1b:9a:92:94:
17:77:f2:b3:cb:ba:32:69:49:65:24:93:49:bf:84:
da:98:7f:e0:63:5a:fe:d0:b9:3e:7a:5e:32:10:96:
59:60:4f:90:f3:84:a7:af:b6:dc:4b:33:a2:60:92:
63:dc:b4:37:30:dc:c1:8c:db:8b:1b:25:3f:f5:18:
70:ea:00:d9:22:2c:f8:68:ec:b3:99:4c:99:a1:8b:
3b:a6:dc:1e:67:13:79:69:bc:06:60:13:fe:75:19:
a9:99:af:b2:6c:f5:48:d4:4a:fb:56:67:a8:7c:e6:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:39:B3:6C:89:8F:A1:E5:64:5E:60:81:28:B6:7F:A2:C1:BD:89
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cc:44:dd:42:4c:4f:b7:a0:95:16:65:82:12:cb:29:02:bb:
15:66:3a:ac:33:74:4e:c6:e6:e9:08:ea:7b:1a:ca:f4:f2:e9:
39:89:28:24:fb:a4:ca:2a:6d:b1:bd:90:9d:17:7d:e2:64:d3:
11:d4:04:81:71:82:b6:58:2d:dc:30:15:97:24:94:e5:58:67:
6f:de:14:1b:30:8f:0c:1a:a9:40:82:bf:40:d1:16:0b:d9:ed:
24:ea:85:1b:07:32:a3:2b:a6:41:6d:38:b7:55:30:56:dc:b0:
e3:de:33:cd:6e:c0:e1:6a:59:cf:69:7a:86:1b:d7:7f:aa:e3:
40:4c:0a:09:f8:7a:6f:b0:ba:25:a8:18:f4:a0:98:97:2e:fb:
c8:91:5b:85:23:6f:18:73:76:3b:41:2a:a3:e2:54:f6:69:f8:
89:b2:d1:2e:5f:35:1a:06:5d:70:63:f5:e8:a3:4f:3b:6f:ef:
31:45:87:34:ae:56:be:7c:c6:32:94:00:9d:e6:ef:06:f3:78:
7a:94:8f:16:01:3a:90:e6:20:d9:b0:4a:b3:c6:99:98:2e:55:
f7:42:c2:6d:6a:78:1b:38:05:ce:28:e9:48:06:9d:31:f5:78:
f0:1f:06:8c:52:b5:12:91:ff:04:58:80:28:cb:50:d2:30:2a:
60:c5:34:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:42:34 2025 by rpki-client