Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: jMvOapLKRg9elxvQgcDyUhQUuiNWrCibnADGVJwnIx4=
Subject key identifier: D3:3D:FD:BC:E0:5A:56:13:F1:F6:97:26:DE:6A:3A:C4:CF:C3:4F:B8
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 019655DCF38DAEEB836848E7D363EBE64FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 01:01:05 +0000
Manifest this update: Mon 21 Apr 2025 01:01:05 +0000
Manifest next update: Tue 22 Apr 2025 01:01:05 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: 0OScNyr95uGy+gRs2bIzuPRM5UpPC+7pXaxkje/DqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:f3:8d:ae:eb:83:68:48:e7:d3:63:eb:e6:4f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Apr 21 01:01:05 2025 GMT
Not After : Apr 22 01:01:05 2025 GMT
Subject: CN=d33dfdbce05a5613f1f69726de6a3ac4cfc34fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:50:66:f5:d9:84:ba:d2:55:25:36:c8:fe:
06:d4:88:bf:ab:e6:71:e6:0b:07:e7:de:1a:7d:57:
11:43:2f:7c:b7:1d:f3:13:c8:62:a7:e2:2c:df:db:
f5:64:27:a3:e3:a0:5f:04:02:90:b8:5a:87:93:b9:
17:7a:c1:a2:09:e4:83:44:03:b9:1b:55:55:3b:88:
72:71:8e:07:05:43:85:68:e7:71:08:05:40:2d:2c:
bc:89:38:70:a9:26:2a:3b:5c:1f:c3:18:2c:f2:8d:
22:79:a6:ce:58:cf:71:96:e1:63:ae:d9:63:ba:87:
33:d9:6a:dc:5c:3d:d0:50:21:8f:db:9a:42:29:b7:
47:78:eb:cd:15:b8:c4:85:42:d1:3e:c7:c9:df:2c:
ac:2f:ca:a2:a5:ba:2d:43:79:ea:8c:e2:52:94:f2:
14:9f:26:b2:60:46:64:93:08:15:bb:76:2f:15:50:
c4:d1:cb:23:83:bf:57:ff:80:f3:97:cb:d1:fa:7b:
a0:c0:fb:89:73:64:94:03:1e:ff:e9:e8:ab:8d:57:
97:a7:fc:ed:e5:6c:f9:0a:bd:0d:13:0f:7b:33:b1:
62:39:14:d3:75:cb:64:dd:70:27:5d:d9:5c:28:e8:
01:d2:1e:5b:cf:06:cb:1b:d7:27:f8:37:6c:37:bb:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:FD:BC:E0:5A:56:13:F1:F6:97:26:DE:6A:3A:C4:CF:C3:4F:B8
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e7:f5:a8:a7:6a:8d:86:38:ed:be:78:c9:b9:79:7a:85:da:
1f:c8:0e:47:c5:06:39:f9:d3:b8:6b:b6:8c:25:ee:2f:38:46:
52:ac:50:85:54:1a:25:ce:be:3a:56:fb:75:33:48:12:70:90:
99:98:45:13:22:24:d4:54:f7:dc:a5:08:93:96:63:1a:39:3f:
99:0c:46:b5:8e:66:c3:c6:e7:f1:d5:2c:de:eb:65:39:28:97:
fd:79:46:f4:61:63:94:20:f5:68:66:9a:e6:b5:b9:a6:e6:fd:
9c:0e:15:3c:c1:05:89:10:18:66:e5:b9:87:3d:4b:9e:8f:1e:
5b:4d:0b:06:c4:ae:47:48:5e:84:a9:84:94:05:b3:d8:ef:62:
54:f3:37:f8:ae:48:52:6a:a3:97:9f:7c:8b:ea:70:ce:1e:fe:
15:2b:88:f0:d4:4d:55:67:f8:d4:ab:b7:56:fb:09:17:35:3f:
87:ea:46:65:85:e3:92:53:3c:07:a5:32:49:7b:a8:87:48:94:
9e:be:d2:98:fa:f2:34:c0:2c:63:75:c8:d9:45:58:a4:b9:91:
2a:66:fc:03:47:fc:01:c0:af:f0:65:26:ea:05:2f:7e:fa:02:
22:e7:62:63:d8:fd:18:d6:ce:88:4d:e8:2e:72:30:02:c9:9e:
d2:5a:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:32 2025 by rpki-client