Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier: Dd1uV2HEwwwn35JI0ZBiItOrd2lxV+fCPyYy9bTqiM4=
Subject key identifier: 8C:BC:3C:8F:85:DA:95:DC:B3:C1:35:98:CC:90:6B:AD:0B:34:98:DC
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial: 01965613B386F88B7C2BABE209A096299F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number: 21
Signing time: Mon 21 Apr 2025 02:00:53 +0000
Manifest this update: Mon 21 Apr 2025 02:00:53 +0000
Manifest next update: Tue 22 Apr 2025 02:00:53 +0000
Files and hashes: 1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: a8j+/A1Y9+bmFXbOBX5ZuY2LQoK1awuKesbEpF/ghVI=)
2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:b3:86:f8:8b:7c:2b:ab:e2:09:a0:96:29:9f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Validity
Not Before: Apr 21 02:00:53 2025 GMT
Not After : Apr 22 02:00:53 2025 GMT
Subject: CN=8cbc3c8f85da95dcb3c13598cc906bad0b3498dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:35:04:bb:6d:5b:c0:4c:c3:79:05:f6:a6:
53:49:42:50:42:5a:df:2f:07:b2:b9:a2:d7:ea:10:
f8:aa:b4:f9:c6:19:91:85:f8:bb:e1:6b:de:99:65:
28:01:54:b9:e4:e8:f4:dc:00:e3:95:6f:c1:5d:85:
bf:0d:55:09:5c:ed:e1:8a:96:a9:21:68:f1:dc:88:
84:bb:a1:a9:c6:f5:fa:9d:39:1c:a6:c6:70:a6:cc:
ae:a5:3b:e1:6f:80:cc:8b:d6:c8:62:f5:5f:fd:12:
ea:16:96:d9:54:22:b1:e2:ce:2d:2d:10:85:5d:59:
00:b4:d5:7b:10:99:64:92:76:9a:09:ac:4e:00:66:
65:d1:c2:ea:52:18:70:3d:72:5b:9c:54:84:79:12:
cb:09:5b:2e:a3:bc:f7:59:35:b6:20:7d:bf:4c:e4:
5e:83:b7:03:5d:b6:50:65:bb:09:d9:c0:f3:0b:1c:
5b:37:85:68:89:cf:4c:6d:0e:b5:77:6d:e7:c7:17:
20:91:db:0a:49:0d:63:e2:c5:03:22:b7:55:39:e9:
f6:67:ef:a0:96:7b:24:59:ec:db:42:cb:1d:36:bf:
8f:b1:e6:d0:a0:36:81:35:32:b7:92:8f:48:90:29:
38:ec:22:51:59:9f:c0:4f:d0:9f:60:e2:9b:77:db:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BC:3C:8F:85:DA:95:DC:B3:C1:35:98:CC:90:6B:AD:0B:34:98:DC
X509v3 Authority Key Identifier:
keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:c5:0f:1c:a7:21:0b:6a:e4:bf:2b:b3:e4:d5:0d:88:e7:
05:5c:a3:85:65:a4:d6:88:ca:0e:ec:91:74:30:54:a5:e0:b1:
14:0d:4e:dc:b5:2d:75:e9:38:7a:27:ce:0f:c4:34:f6:25:60:
09:75:9b:9d:6d:3e:4a:22:eb:bb:69:0e:8b:8e:c7:28:57:65:
1e:ba:b2:3b:82:d8:d4:77:c1:f7:90:c6:c9:40:9c:73:67:a7:
16:e9:f3:1d:4f:70:28:8e:bc:43:18:6d:6a:6a:67:0e:b7:72:
f3:90:8f:c9:73:ae:53:aa:5d:fd:89:7c:d7:a4:08:3e:1d:73:
44:6b:4d:97:ac:9a:bb:1a:6f:5d:6c:20:76:05:14:a0:ac:ce:
16:e0:e1:21:a7:1d:a5:4d:fb:d8:fa:33:49:69:12:91:d2:1c:
a7:5d:f7:a9:95:8e:e3:4c:36:d0:ec:79:a7:7d:54:d8:a0:31:
71:ea:02:9f:dc:e5:93:63:c9:fc:39:22:52:a7:eb:e5:94:46:
e9:e4:f6:fd:78:97:8d:4b:c0:9a:fa:e0:78:f1:4c:e4:eb:7b:
f4:42:6a:b0:31:e4:8a:52:d3:8b:3a:e6:43:e1:38:04:e5:23:
9e:fc:41:79:40:a4:4a:d0:d2:f7:df:d1:7d:94:03:ce:87:c8:
19:30:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:18 2025 by rpki-client