Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: oTo0dfOgvFjHdPPAU/kj8Sg4fxHidWmmJwYOqavcnSA=
Subject key identifier: 6A:B2:A7:98:65:18:AE:53:A5:C5:41:9E:6E:3C:22:BB:1E:2A:15:1B
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 01965FF24BE773CD07A9CC3363D85E4B821C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 1244
Signing time: Wed 23 Apr 2025 00:00:36 +0000
Manifest this update: Wed 23 Apr 2025 00:00:36 +0000
Manifest next update: Thu 24 Apr 2025 00:00:36 +0000
Files and hashes: 1: 1qXoS3ZyJIxcOWhfODj10DLjQ_U.roa (hash: GFEaUvVwjsTkY2CZy9se0kItacxeC4v59hUMVKrNWa8=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: yh3T8BGEr+gKvdTn36pPWXvhqmupJPPbs1kCHMetvS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f2:4b:e7:73:cd:07:a9:cc:33:63:d8:5e:4b:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Apr 23 00:00:36 2025 GMT
Not After : Apr 24 00:00:36 2025 GMT
Subject: CN=6ab2a7986518ae53a5c5419e6e3c22bb1e2a151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:58:1c:4c:16:d1:ec:83:2b:0c:05:17:41:
15:1b:d7:05:9b:7c:24:fb:d2:16:00:77:ef:5a:88:
6e:0c:81:3a:09:44:dd:84:d1:97:92:35:92:3e:ce:
76:6d:7b:53:d9:79:ed:98:d3:78:27:74:9c:c6:10:
a9:71:13:95:a7:15:13:85:31:02:fc:73:0d:de:ee:
73:fa:e3:f8:7d:05:7d:42:b3:32:d6:ae:ff:c3:40:
c9:1d:a5:0a:6c:a4:7a:6a:ca:62:9e:c0:f7:55:1f:
e7:c2:bb:fb:77:d8:60:a2:28:45:58:9d:e1:bb:f1:
8a:51:2a:bb:b8:32:73:42:d3:c5:90:a1:74:61:ef:
54:e5:7b:41:96:6b:ad:4b:7d:6b:01:20:86:93:f6:
2a:ff:cd:9d:58:0f:82:e1:d4:7d:20:2e:69:ea:ea:
85:04:40:23:18:a5:29:af:13:68:34:1f:a6:d0:21:
90:4e:c6:a0:6e:a0:33:ee:c1:57:96:61:9e:e7:e7:
18:fb:15:b2:cc:3e:c3:c5:23:fb:af:b6:27:a2:1c:
9c:64:2f:61:e9:6e:6d:c1:b4:c8:23:0a:2e:cb:1d:
65:34:b5:5f:e2:4c:b1:a1:0d:66:65:ba:98:7a:5b:
89:b7:39:c9:3b:dd:0d:d8:a2:3a:78:07:33:07:30:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B2:A7:98:65:18:AE:53:A5:C5:41:9E:6E:3C:22:BB:1E:2A:15:1B
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6d:d8:8d:2c:8c:e1:0c:33:e0:5a:7e:ed:8a:7c:e3:3a:c9:
c3:58:35:0f:ff:fd:03:6e:01:0c:e4:42:69:5a:6f:82:68:64:
4b:c7:23:de:0a:7b:5d:6c:73:51:7d:0b:42:6f:e9:e6:ca:b9:
6c:1e:b7:5e:9b:ef:14:4b:95:26:53:89:ae:fb:f3:f5:7d:a7:
05:55:68:fd:97:4a:c3:11:0f:26:ac:e4:b3:2e:86:11:df:b3:
d2:a6:85:b6:f6:ed:6d:2a:26:c1:6e:cf:d8:2d:df:20:55:5b:
b7:df:ef:12:30:c0:d2:a2:91:e4:be:8f:03:1d:76:6c:46:a1:
6a:3a:b5:10:0c:33:c3:f5:1e:e9:02:fe:2f:0d:17:61:c4:77:
e9:68:0d:14:66:33:d1:7a:a4:42:82:03:c8:df:6f:8b:ae:25:
f6:31:f4:99:a3:c0:1a:cd:9b:9a:fa:82:7a:39:9c:62:45:2f:
52:16:69:cb:a4:2e:07:9e:5e:f7:8f:f8:5c:ee:35:88:3d:d7:
da:df:aa:ea:9d:79:74:3e:50:4f:c8:c5:ec:ef:6b:c7:94:31:
0f:af:d9:1d:a0:a2:b5:33:72:14:27:99:f6:08:c0:8f:01:36:
3c:c1:a4:45:01:52:7d:0e:be:90:d1:a4:66:c2:4f:09:f9:ac:
8d:20:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:34:16 2025 by rpki-client