Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: zLXwABPkTpLMYfngPaXxxc0szoreQAmIy1o/GNaZZTQ=
Subject key identifier: A3:E3:5A:C6:6E:3A:AF:5C:CB:9E:FC:93:FA:9B:40:2F:89:FD:41:BC
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 01965B712CDF1EF21A1B56EF8D59089386EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: EC
Signing time: Tue 22 Apr 2025 03:01:05 +0000
Manifest this update: Tue 22 Apr 2025 03:01:05 +0000
Manifest next update: Wed 23 Apr 2025 03:01:05 +0000
Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: wj9uf1F7MPbDXltvWPqAhSlhgMWySOPq5+smDCyd3N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:2c:df:1e:f2:1a:1b:56:ef:8d:59:08:93:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Apr 22 03:01:05 2025 GMT
Not After : Apr 23 03:01:05 2025 GMT
Subject: CN=a3e35ac66e3aaf5ccb9efc93fa9b402f89fd41bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:bb:35:16:fc:fd:b8:42:50:37:96:1a:e0:
7a:c8:40:a1:3d:34:a4:3b:cc:c4:94:49:c2:41:ee:
71:a5:c8:b5:4d:a3:13:e4:06:0f:f4:e2:dc:72:70:
5f:1b:d1:d9:67:f4:b9:bb:3f:4f:95:ec:d3:5a:d8:
e0:5f:19:cd:dd:95:71:d1:2e:10:a0:6d:13:55:95:
e9:ea:f1:a8:21:77:01:27:55:6d:56:69:82:8f:25:
c4:ef:fb:06:c3:30:c9:08:71:4b:bc:44:96:0e:4e:
b0:3f:18:86:e9:36:8e:38:66:88:56:b6:23:c7:2f:
ab:c3:8c:6f:39:0a:6a:bf:2b:e8:01:ac:15:36:0b:
62:e3:bc:a7:50:96:48:2c:58:3a:79:74:30:b6:62:
51:1b:df:93:64:fc:c6:54:ea:f3:a5:66:ea:60:a8:
f0:8c:c8:e0:b7:8a:7d:04:ea:ca:c0:5e:59:84:0e:
84:ea:6a:fd:8e:70:07:89:98:23:9a:aa:32:24:89:
7f:c6:52:40:9e:20:b5:3f:0d:32:16:93:50:2f:37:
57:52:63:85:4a:e7:59:90:61:18:a4:4c:b4:62:f9:
80:e9:2c:c0:70:e8:ca:3e:a7:0e:0f:24:4a:ce:62:
34:9c:bd:f1:32:e3:6e:e3:9c:d0:51:c0:15:5b:bb:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:5A:C6:6E:3A:AF:5C:CB:9E:FC:93:FA:9B:40:2F:89:FD:41:BC
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:99:99:34:6c:cf:7c:d1:d2:ea:ac:ee:58:93:3d:27:31:82:
af:59:8e:2f:25:00:b5:61:7b:f1:c9:4d:46:45:a2:f3:a1:e1:
66:0e:b2:80:06:cb:d3:de:2b:13:3c:e5:4a:6a:6c:e3:04:aa:
67:58:7d:b9:11:42:14:df:c8:9c:b9:5a:50:79:70:bd:49:9d:
b4:d0:3f:c1:bc:df:ce:88:30:fc:9f:74:45:c5:cd:52:70:86:
64:99:ba:61:58:06:8d:7c:a2:ef:b2:5f:60:45:32:77:c5:10:
47:80:0b:a7:d0:0a:f0:de:d3:85:6d:a4:63:82:2d:9a:85:b1:
a6:49:4a:23:f3:ba:27:0d:b2:9d:a9:13:05:d3:ef:69:f1:ee:
4b:01:b0:de:e5:21:2d:54:bb:02:a4:c2:f0:ca:8d:d4:b3:42:
13:af:69:e6:da:86:29:47:43:aa:13:af:a9:83:bc:ef:e6:60:
5e:cc:bd:da:0f:03:ac:a8:5a:97:b6:a3:f6:ba:7c:cc:5b:04:
54:e9:d1:5c:ae:e8:29:38:ae:39:e3:8e:59:37:ea:7d:39:91:
8d:90:5d:e6:de:66:53:54:a6:17:19:d9:fe:94:5e:c7:1d:b4:
d2:91:de:4d:53:be:c7:f3:a2:29:e6:40:7e:fa:47:29:28:54:
30:1b:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:11 2025 by rpki-client