Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
File: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json)
Hash identifier: w78LCH63vwPDDwmIgCWKKAtg51GTWFXIOq2PttIzFUY=
Subject key identifier: 2E:7D:E1:76:5B:B5:61:EC:29:E2:11:26:6D:22:F1:81:9F:A9:70:2B
Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
Certificate issuer: /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Certificate serial: 01965A271F5633647B91119D3D96084A40F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
Manifest number: 04B9
Signing time: Mon 21 Apr 2025 21:00:35 +0000
Manifest this update: Mon 21 Apr 2025 21:00:35 +0000
Manifest next update: Tue 22 Apr 2025 21:00:35 +0000
Files and hashes: 1: QTH68uA3y3zqOE98H-X27hlKLHg.roa (hash: POyUR/thMzWlT6agcEoWXyNHRaqJHhqSVA15ql0XP6U=)
2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: 66vJxPct9GYNRpxfidYfCuOcu4i2pmca16TCbHu3wyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:1f:56:33:64:7b:91:11:9d:3d:96:08:4a:40:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Validity
Not Before: Apr 21 21:00:35 2025 GMT
Not After : Apr 22 21:00:35 2025 GMT
Subject: CN=2e7de1765bb561ec29e211266d22f1819fa9702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:7c:05:37:d6:56:5c:9a:08:fa:8b:e2:f5:
43:5d:41:d3:6f:d3:b7:cf:bd:2d:e9:38:4f:73:00:
38:d3:6c:bf:28:29:47:95:27:1d:a7:ca:e1:ad:7c:
95:a7:d4:41:13:0d:ed:23:1e:ca:29:df:ee:4c:44:
f5:10:91:7e:c8:0a:8c:66:05:4e:50:47:22:93:b2:
af:4b:f4:e4:5e:26:19:62:8b:f5:c9:de:7f:14:e7:
dc:e1:95:11:3e:54:84:f0:98:85:df:e8:5f:b2:24:
ea:48:7a:59:66:0a:49:91:8c:98:a0:56:49:59:e7:
cf:2c:ea:d2:bc:fb:c0:4a:6f:9c:d9:6b:04:0d:6e:
8f:a5:2e:14:03:4c:91:b8:f7:fe:1e:09:c1:ec:88:
72:b3:0d:ba:25:59:f8:16:7c:78:19:39:43:71:15:
fa:f7:d2:5c:38:19:49:d5:a1:66:a5:83:5d:fd:dc:
9d:51:41:99:76:9f:55:dd:59:12:7f:68:28:c0:87:
cb:9f:35:55:77:12:ff:62:23:09:f4:4b:25:e5:bd:
38:d4:6d:5f:19:12:39:26:6a:86:5b:23:14:b6:4c:
b5:3d:9e:1a:4b:89:42:8f:ed:5c:d8:90:90:4d:5e:
53:98:63:74:b4:db:29:1b:a2:64:7b:cd:07:a3:45:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7D:E1:76:5B:B5:61:EC:29:E2:11:26:6D:22:F1:81:9F:A9:70:2B
X509v3 Authority Key Identifier:
keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2a:22:25:25:31:09:57:bd:56:87:83:32:e0:d7:5e:8a:71:
5e:a6:24:24:9e:75:d2:b5:62:dd:42:77:e8:fd:73:4c:bc:64:
d1:b8:d5:30:13:17:7e:b0:6e:7d:7f:ee:c2:74:cf:5f:98:c5:
be:48:95:9c:75:5c:31:2c:3b:b9:6b:c9:80:c6:cd:d2:4b:ba:
b8:39:ad:31:b4:32:c7:b1:39:4e:ed:85:a0:f4:93:55:a8:b0:
0d:3a:ee:a1:62:f4:d1:df:ed:d9:8f:6b:0d:87:5d:67:60:a7:
09:15:41:7d:9b:2a:03:51:12:ea:b3:2d:a9:44:ef:af:41:9f:
f2:78:88:d2:d4:ee:3d:8d:2b:17:7b:c2:c5:03:b2:14:ca:f3:
b1:5d:ec:40:6f:bb:02:2d:3d:f2:f6:df:b7:ae:80:10:42:a7:
79:86:5c:68:93:dd:84:9a:02:4d:dd:5b:8a:ef:d6:ef:12:a7:
7c:7b:58:94:90:03:5b:42:e1:c2:a1:c4:0b:66:19:93:10:78:
4f:13:a2:23:b3:58:07:79:7b:c2:05:3e:97:57:ea:f4:de:0d:
29:1c:c6:90:f5:31:ad:15:9f:ab:0a:b7:e8:18:a4:50:de:58:
d4:c0:b1:59:ee:a8:5b:b3:ae:66:ce:0d:10:6b:91:87:58:62:
ed:87:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:19:14 2025 by rpki-client