Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: l8SBR3k4L50NQOWw1gzfMq1wetO4kMfs/GL5/MdjdxI=
Subject key identifier: EF:0E:38:5C:19:00:73:54:E4:DC:84:A1:84:04:0F:7B:20:41:CD:5E
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 01965801E2789B293AD0E52C161BA9B9A594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 01B1
Signing time: Mon 21 Apr 2025 11:00:40 +0000
Manifest this update: Mon 21 Apr 2025 11:00:40 +0000
Manifest next update: Tue 22 Apr 2025 11:00:40 +0000
Files and hashes: 1: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: WKSNhGmhr9O4vIt/epqMDkH2KWYWC1+L4vQmmzV9nWA=)
3: qg4rCavoAEstd_gdiifZJ2l134s.roa (hash: zv8J2KuDAwQOB6a6izYV8dRbqPViGL374uqqVPG9O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:e2:78:9b:29:3a:d0:e5:2c:16:1b:a9:b9:a5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Apr 21 11:00:40 2025 GMT
Not After : Apr 22 11:00:40 2025 GMT
Subject: CN=ef0e385c19007354e4dc84a184040f7b2041cd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:e1:93:cb:3f:2b:57:2a:f0:1d:b1:2b:2b:
73:ab:1b:9a:93:a7:5c:49:22:df:d3:c8:d7:d2:c3:
bd:14:c8:c4:19:24:ab:50:10:b8:60:73:f1:4e:2d:
82:f5:bb:a1:46:20:1a:df:ad:41:fd:a1:95:9c:c9:
8e:fb:73:ef:f2:49:54:d4:2e:e8:04:c3:9a:33:7f:
ee:bf:1b:d6:84:88:6b:95:f9:a5:d5:d4:7a:09:dd:
3a:c5:3f:2a:5a:0b:84:63:41:24:4c:c2:96:cf:ad:
ca:4a:03:58:07:d6:b8:f9:df:4b:cc:cb:ad:fd:0d:
50:ba:66:14:35:77:27:05:50:5b:e6:10:eb:31:f1:
68:e8:28:3d:da:f6:89:62:fa:cb:ac:48:25:8d:77:
c6:e5:98:df:2f:d8:f6:9b:dc:50:d5:68:a6:51:7c:
c7:5c:9a:48:13:bd:f4:5e:e3:33:8a:44:75:7b:4b:
19:af:f7:a4:c1:c7:4d:60:08:ac:0c:92:87:9e:7b:
71:2c:92:24:57:f0:80:8e:a2:aa:6b:ad:49:5d:46:
65:81:49:e5:cc:dd:c3:78:5e:ca:63:39:2f:0c:86:
5d:72:92:a4:e8:2d:2d:20:b5:6e:35:8d:16:30:a2:
b6:8e:cc:43:9e:3b:9a:07:36:9a:32:2d:31:63:b1:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:38:5C:19:00:73:54:E4:DC:84:A1:84:04:0F:7B:20:41:CD:5E
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:91:3f:f7:53:61:6a:dd:24:65:93:11:c1:b6:d4:ee:ea:73:
b6:6d:37:9d:18:1f:ff:5a:b3:4c:47:1e:fe:0c:53:4e:cd:60:
ba:64:68:2e:f3:15:7d:02:10:66:1a:73:df:78:b2:1f:24:f0:
5d:e3:64:a7:dc:ef:4c:c2:83:44:18:fa:98:14:82:cc:03:10:
3c:3c:75:4b:f4:12:50:f5:af:fd:b8:82:ce:ad:7d:c9:bb:b7:
6b:ad:b4:6f:22:de:7a:29:da:36:52:63:cf:2d:60:d6:e4:e6:
33:6a:b5:52:e8:4a:0b:ec:12:1a:47:a5:02:65:bc:9d:56:f6:
9c:51:7a:ba:37:43:be:d2:49:a8:3b:8c:23:cb:aa:97:ce:92:
5a:2c:e2:24:23:d5:d7:ca:5f:f5:f1:ea:b5:ec:ed:5a:43:6a:
18:2c:f8:24:96:f5:5f:0d:d7:ec:20:37:af:55:0c:de:87:d6:
36:d0:85:54:54:41:2e:12:a9:6a:39:aa:b6:8c:09:80:64:29:
47:70:64:61:34:e6:18:b6:0a:7c:51:a5:60:8f:4e:1a:87:2d:
fb:4c:8c:6f:ee:5f:22:be:78:9b:d6:1c:a3:e1:28:c6:3d:27:
4b:94:73:cf:49:24:63:74:17:73:93:6d:2f:66:b6:fd:8c:7f:
3c:84:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:26:50 2025 by rpki-client