Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: 91sGghOYjFWuSx0usZjLUrs84Nnb3GQf7cbx+Oi6t00=
Subject key identifier: A8:CC:C0:25:0F:1F:EF:F5:69:F4:83:89:FA:C8:A3:45:B3:BF:DA:A5
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 01963E0B42E1074AA624A44DA29F626CE42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 084C
Signing time: Wed 16 Apr 2025 10:00:47 +0000
Manifest this update: Wed 16 Apr 2025 10:00:47 +0000
Manifest next update: Thu 17 Apr 2025 10:00:47 +0000
Files and hashes: 1: 5MBvIRiYFms3iGBeHF3RQe9ll34.roa (hash: ZOt4HY8JzWPIwKbCM0yXoS+siw4USQmatYhxT9gEU9M=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: fqcVxVyfC4orVJk1aWSUS7aq3ZkU0p9NBySQRAyR540=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:42:e1:07:4a:a6:24:a4:4d:a2:9f:62:6c:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Apr 16 10:00:47 2025 GMT
Not After : Apr 17 10:00:47 2025 GMT
Subject: CN=a8ccc0250f1feff569f48389fac8a345b3bfdaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:92:fc:9e:d5:54:70:38:97:50:21:26:62:
09:85:8a:e6:a6:cc:bd:df:e0:a4:1e:1c:13:9c:de:
91:f6:14:96:53:83:4e:31:39:29:f8:43:b5:da:04:
dd:ac:49:f8:c2:89:27:34:48:71:d4:62:49:9f:d7:
cd:f6:98:76:64:d1:8c:7a:5b:15:a9:f0:22:b5:37:
59:9b:a8:d6:30:e2:52:b5:22:e6:26:76:e8:58:1a:
a5:19:b8:dd:bf:9c:4a:96:a3:49:08:b6:31:f4:14:
cf:b9:e0:25:b7:c3:dd:57:74:97:b1:82:cb:94:89:
72:52:51:22:98:ef:a7:c4:60:f4:a6:77:31:ff:6f:
18:3f:38:2d:07:52:de:84:e6:46:62:bd:29:37:06:
10:11:a6:d0:1a:d4:58:39:21:7c:17:0c:80:62:57:
0a:49:db:31:62:26:fe:4c:60:5f:02:44:95:ed:65:
04:09:ec:d8:36:59:06:7d:4d:02:09:f7:e1:b5:04:
cc:c9:5b:ef:83:21:4a:9c:e5:31:34:40:d8:ab:c5:
7f:ae:b7:5b:fe:b0:3f:bf:e5:bc:21:13:c4:7d:06:
f6:d1:16:a1:0a:7c:d7:8b:7a:c7:8e:64:76:74:44:
93:1f:e4:74:32:21:e5:c9:f4:b4:4f:1a:4e:85:c7:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:C0:25:0F:1F:EF:F5:69:F4:83:89:FA:C8:A3:45:B3:BF:DA:A5
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b0:0c:fc:63:88:7d:f4:f6:20:b3:7d:ad:9b:dc:f3:02:ab:
58:0c:8c:f0:a8:92:ae:75:e3:be:2f:4a:5f:9f:47:74:2c:0c:
0f:9c:79:4e:15:a0:cf:9d:c9:15:0e:ae:60:6d:e5:f7:fb:3d:
f7:aa:7a:1e:f4:af:21:5d:31:ce:ba:12:5b:5d:ab:cf:cf:ac:
93:e9:ba:13:fd:2c:45:51:cc:4d:62:3e:07:cb:4a:a1:bb:26:
96:4a:38:2f:d8:3d:4b:9a:5f:87:78:d4:b5:10:c1:e5:69:b9:
08:98:6e:39:16:6c:b2:df:1a:d9:3b:87:f2:e1:5b:76:58:7e:
c2:4b:ef:81:fb:f3:bf:73:61:bb:d5:32:fa:71:0c:00:55:73:
fd:d4:a6:f3:36:b0:e8:62:b2:84:61:b8:7b:16:55:ef:8b:f2:
8b:07:7f:bf:64:d5:62:42:93:ab:0c:57:44:93:38:e4:20:4f:
b1:2c:a2:a2:4c:f2:b3:c7:ac:b3:87:8e:d3:29:d1:b8:b9:01:
90:9c:f2:12:db:e2:52:b0:1e:6f:12:30:49:e3:af:59:bb:0b:
7a:24:f9:3a:80:b8:ec:ba:97:de:fd:1f:d0:12:2e:b1:1d:7c:
f0:83:3a:ed:02:80:d2:d6:99:a4:cf:e5:75:02:68:e4:ba:c5:
77:d6:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:17:06 2025 by rpki-client