Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: Y9G5ZNfaEm45rRQBiqbQyLZZ7raPkMrR2Yf0QPwDqaM=
Subject key identifier: 87:4E:C2:1E:89:4D:03:AF:12:B3:9A:9D:F0:12:96:43:BC:C6:EF:E0
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 0196BC007AF9F36798A3F57B0D5EE62F9A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 21:01:10 +0000
Manifest this update: Sat 10 May 2025 21:01:10 +0000
Manifest next update: Sun 11 May 2025 21:01:10 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: euWB2+VIa2dnLsEgCSNZG2PL5ELwhITP3v2sGxj46V8=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:7a:f9:f3:67:98:a3:f5:7b:0d:5e:e6:2f:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: May 10 21:01:10 2025 GMT
Not After : May 11 21:01:10 2025 GMT
Subject: CN=874ec21e894d03af12b39a9df0129643bcc6efe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d7:7b:3f:2f:fb:bb:b4:52:3b:36:00:8b:b0:
bd:97:53:d5:0d:64:d4:ef:e2:fb:91:6c:06:b6:11:
14:88:b8:cd:10:b5:d1:e6:af:4a:cd:2b:55:4b:f4:
06:fa:27:df:3d:8f:5d:c7:ea:3b:5f:52:b7:a4:db:
69:18:cb:4e:69:4b:9c:6c:89:9c:92:a6:3e:4f:77:
9e:0b:2c:1e:70:65:45:fe:6d:53:a2:ff:30:cf:29:
62:61:21:5b:a9:43:cc:67:d3:17:e0:4e:41:55:9f:
ba:4d:0e:fd:e4:bf:a4:ad:7e:e4:35:81:63:60:a7:
76:c0:59:d8:5f:e2:97:3b:5d:f9:89:7f:8b:81:4f:
16:e4:16:2e:eb:bf:b4:f2:ac:af:95:96:ed:20:e9:
c2:75:43:2f:73:39:11:64:cb:ea:79:71:e6:77:ea:
c5:a4:59:c1:e6:27:33:2c:45:5e:3f:d9:16:40:02:
1d:4d:44:d3:c3:2e:09:e2:22:fb:83:88:25:e5:3f:
a1:9a:e5:2b:40:d1:f3:43:6f:9b:54:3a:57:89:ee:
5c:4e:2c:ed:13:4d:84:10:c6:c6:c4:45:cd:29:6c:
be:8b:6a:fd:01:29:1c:17:b9:f9:9f:74:9b:a7:62:
99:fa:bc:0d:a4:71:6f:c3:bf:01:e1:c2:6a:73:d2:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4E:C2:1E:89:4D:03:AF:12:B3:9A:9D:F0:12:96:43:BC:C6:EF:E0
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0d:9f:cf:99:c6:48:10:62:4a:b0:9b:d0:9c:a4:6e:a9:80:
3d:a4:50:8e:a1:12:13:61:52:f9:79:d7:08:a5:bf:90:c3:96:
89:c8:54:34:99:16:fa:86:e2:a4:e2:87:a6:0a:42:c6:a4:f0:
aa:e1:f1:0c:a7:44:51:de:0b:52:87:f9:b5:8c:bb:8b:db:46:
2d:1b:59:4b:dc:9c:4e:fb:26:c4:db:00:a6:19:14:23:13:90:
80:65:53:ad:7d:e5:0b:ad:9a:1d:fe:65:6d:7c:72:af:9c:51:
72:34:30:17:8f:62:cf:6b:a2:b6:c6:b1:d6:52:f5:91:82:96:
08:40:e7:dd:61:13:c1:ec:5c:d7:8a:48:02:90:99:71:e6:ab:
6c:dc:76:49:08:bb:f2:6f:e1:74:01:a2:2b:7e:18:29:e9:b3:
67:ef:f6:99:7b:c8:0b:5d:2b:83:0e:0d:e4:eb:01:c9:5a:27:
76:5f:40:3b:0f:5b:f6:7c:94:b8:37:78:07:d5:d0:88:bc:d9:
bf:18:f6:16:cb:14:19:8f:b1:0d:ba:1c:7e:37:cf:cb:d3:62:
2d:0f:8b:0e:3b:6b:1e:94:2d:dd:92:eb:8a:91:27:8b:55:10:
6d:07:a5:0d:e8:11:42:e4:87:81:96:81:e4:f2:d9:e6:a7:49:
89:6e:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:53:20 2025 by rpki-client