Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: q1XPbx/qKyGTXoLVKSNZ8sLQD+jWqSKECVczYEf6pBk=
Subject key identifier: 69:8D:2E:E1:BC:4A:5C:A8:A9:6C:F6:D1:D6:73:E2:CA:B5:F5:B8:EF
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 019659154D9590ABBEF986270CA5E9969F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 0E2E
Signing time: Mon 21 Apr 2025 16:01:30 +0000
Manifest this update: Mon 21 Apr 2025 16:01:30 +0000
Manifest next update: Tue 22 Apr 2025 16:01:30 +0000
Files and hashes: 1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: x5FdXIJjgsvCZeUck2o0HgQk+fRDgrfXWbiMQbxtgh4=)
2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:4d:95:90:ab:be:f9:86:27:0c:a5:e9:96:9f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Apr 21 16:01:30 2025 GMT
Not After : Apr 22 16:01:30 2025 GMT
Subject: CN=698d2ee1bc4a5ca8a96cf6d1d673e2cab5f5b8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:60:5b:45:f7:73:94:5e:e3:02:eb:62:55:
dc:ad:ff:15:0d:55:a7:49:ba:47:0c:c3:7d:ee:ae:
2e:d4:b7:b5:48:b7:a8:e7:69:50:69:28:9e:5a:dc:
7b:c8:ab:f2:12:d8:d8:49:e4:72:54:ec:1b:d8:2b:
a2:bb:8a:f1:04:b6:2d:9e:ef:86:c8:c4:dd:43:84:
a7:d3:0f:77:dc:d9:70:13:38:02:9b:4c:d8:39:f7:
20:6d:d2:f8:62:e6:7f:4a:44:ee:0d:0f:f4:9b:a8:
34:97:12:ac:87:75:e9:36:6b:45:90:8b:b0:6e:ae:
a6:74:93:a5:57:aa:88:e9:a3:03:2a:ef:47:0e:3c:
39:fc:5d:b9:09:2d:af:3f:7b:7d:ac:e4:ab:11:aa:
3f:ad:8b:75:d4:72:7a:ca:75:eb:6b:22:39:a9:61:
26:15:c0:5a:7b:57:f6:d9:28:21:76:7e:52:1c:14:
8b:5a:dc:82:46:e4:d5:b0:d6:2e:79:e3:46:40:22:
40:bb:f4:b6:59:48:1f:b4:3c:62:ed:d3:1b:f2:ff:
b1:09:8d:10:d0:1d:c9:ed:c5:10:a0:28:e3:ad:ab:
d1:99:97:d2:5c:3e:b9:c4:0d:ba:e3:17:b7:9b:7c:
80:bc:07:dc:dd:55:b1:a2:61:54:03:85:c1:e2:15:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8D:2E:E1:BC:4A:5C:A8:A9:6C:F6:D1:D6:73:E2:CA:B5:F5:B8:EF
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b9:5f:da:38:41:dc:39:a8:b8:1e:46:04:53:9f:81:d3:82:
2e:f9:a6:7e:0f:8f:8e:5a:08:e4:0d:ad:4a:fb:54:f8:14:46:
2d:20:a8:70:c8:02:53:71:fa:51:a4:11:c4:22:12:68:80:ed:
ba:c8:0d:ec:bd:89:a2:a8:f9:ff:69:da:6a:cb:98:c3:17:af:
6a:4e:5e:6e:87:ea:f4:84:d1:54:d8:89:7a:9a:ef:1c:da:df:
b6:dc:51:94:db:3c:b9:81:57:9d:c0:1a:ce:54:6b:94:a9:b9:
be:0f:43:eb:d8:27:9b:d2:55:dc:bc:90:5d:d3:cf:db:be:13:
1f:32:e5:7c:b7:17:79:ca:74:6c:65:27:04:00:3c:6a:bf:72:
de:7f:e7:eb:b6:d4:15:ff:c6:88:4f:5e:7f:1c:21:70:0f:b5:
79:d0:2f:2f:03:84:c9:69:98:66:1c:3b:a9:eb:08:45:c8:af:
e6:a7:e4:45:d9:8e:1d:7c:34:eb:cc:d6:a0:00:3f:02:83:82:
a1:50:a6:06:68:11:37:57:5e:3a:96:84:8c:ad:06:2e:f5:5f:
db:3c:95:b5:ad:04:89:94:da:2e:c3:26:d6:fc:75:4f:11:67:
03:48:9b:f1:64:03:f0:16:1e:04:a4:95:d1:9a:7d:c3:0a:9b:
ed:16:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:27:56 2025 by rpki-client