Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: TMKtm9+jDsv38Ce7HP0gZTzA81ProonXl4H9dbeTKaM=
Subject key identifier: C9:26:5A:E8:7E:7B:51:6C:1F:AF:51:FF:16:DB:8D:D9:05:DE:22:80
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 019656B83CBF3B515C5B6E8F839E32B58F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 10E8
Signing time: Mon 21 Apr 2025 05:00:36 +0000
Manifest this update: Mon 21 Apr 2025 05:00:36 +0000
Manifest next update: Tue 22 Apr 2025 05:00:36 +0000
Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: lgZGSUM+M2JldcRd6Tg6nSS1sZPY/VhtQ27ORcBzUHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:3c:bf:3b:51:5c:5b:6e:8f:83:9e:32:b5:8f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Apr 21 05:00:36 2025 GMT
Not After : Apr 22 05:00:36 2025 GMT
Subject: CN=c9265ae87e7b516c1faf51ff16db8dd905de2280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:eb:90:26:1d:e6:8b:59:d1:f4:5e:c2:62:
6c:bd:64:6a:dc:7c:0d:3a:e2:ef:ba:81:c0:da:de:
7e:c1:48:bb:20:a8:4c:84:2c:dd:74:98:fc:7a:a1:
93:14:05:9f:ab:70:e4:c4:d6:d6:e7:08:38:e8:5d:
59:ed:a7:db:83:c1:f9:14:d1:b2:9b:29:36:4d:44:
b9:92:2d:bc:95:34:22:bd:9f:6f:19:94:f3:c6:6b:
24:aa:83:fc:2c:5d:b1:4e:32:69:8a:14:f2:79:ba:
55:aa:1b:49:b5:6a:3d:ac:50:91:c0:a0:94:1b:7c:
11:74:22:03:0c:f9:51:c2:12:75:98:36:74:99:f1:
77:12:8f:7b:dd:11:fa:f2:3d:8c:08:91:e1:0a:27:
1a:00:c1:36:87:a5:96:4c:9c:78:7c:26:02:ab:db:
c3:ec:16:40:7d:f5:97:fb:70:eb:72:42:07:7f:ae:
22:27:8f:b2:94:39:9e:93:93:94:7c:ab:fe:21:f9:
59:10:c5:7d:ab:25:27:66:18:cd:79:ce:7f:76:3b:
20:b6:90:ae:d9:c6:43:52:1f:4d:61:fd:6d:30:e5:
b8:de:91:eb:f6:36:de:2b:b1:70:18:29:f3:30:01:
25:98:76:83:62:bb:06:e2:74:13:81:73:60:02:40:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:26:5A:E8:7E:7B:51:6C:1F:AF:51:FF:16:DB:8D:D9:05:DE:22:80
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bf:22:74:28:7e:48:91:5c:30:26:5e:df:a4:a0:c3:35:3e:
86:38:dd:26:6a:81:1a:9b:fb:43:12:36:f0:77:14:0a:52:57:
d1:3e:5f:d4:6d:fb:46:65:9b:2a:b8:bd:b3:bb:17:57:27:8b:
9d:91:ec:4b:32:c3:eb:37:f8:58:56:5d:6a:7d:38:99:e0:ec:
55:5a:27:dc:b3:a1:ba:d3:12:af:fc:74:ad:4c:4e:8e:74:0f:
1d:f1:6e:f6:2e:58:f7:63:f3:54:af:a1:ac:9b:f4:58:ee:e7:
0f:9d:db:56:84:47:72:22:e1:96:d6:64:92:07:6d:08:cb:40:
4b:f6:a0:e5:99:27:a1:b1:cf:17:f1:38:ad:5a:dc:e4:06:d0:
7b:4a:6d:41:a1:8c:79:55:e6:a9:b4:8e:3b:4e:2c:86:c8:82:
1b:23:2c:2d:28:fb:cd:90:46:93:d0:f9:d8:f4:86:44:27:3d:
3c:62:9d:c6:73:6f:a5:8b:07:36:90:ab:3b:82:6c:e6:a5:d3:
f0:e4:61:9d:10:a7:19:78:bb:fa:48:10:99:16:5a:1b:e0:a8:
cb:e8:cc:4a:00:db:5b:2b:48:e9:7a:7a:ee:21:54:24:a5:24:
29:1b:63:d9:fe:2b:bb:0e:a8:b6:6b:45:b9:da:16:cd:b0:32:
68:b3:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:19 2025 by rpki-client