Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: 7ADOpniwPeqSnijSUb4hKocGyqhzEhQRM+otQzh+uTc=
Subject key identifier: B4:A8:DF:32:7C:08:FA:DD:B3:1E:64:68:99:07:66:99:5D:D7:94:52
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 019660CE8C1B0E85F5612D64E2EE90EAB91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 0178
Signing time: Wed 23 Apr 2025 04:01:11 +0000
Manifest this update: Wed 23 Apr 2025 04:01:11 +0000
Manifest next update: Thu 24 Apr 2025 04:01:11 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: ep39kuWaB3W4D05WpnP67D2p0ZRhSJlo3YcOMy6HUL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:ce:8c:1b:0e:85:f5:61:2d:64:e2:ee:90:ea:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Apr 23 04:01:11 2025 GMT
Not After : Apr 24 04:01:11 2025 GMT
Subject: CN=b4a8df327c08faddb31e6468990766995dd79452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:93:37:8d:8e:ab:a8:e0:00:da:b0:30:63:
9d:ee:98:88:dc:69:19:5c:db:fa:4a:30:ea:44:5a:
37:23:ac:0a:db:c8:90:a7:2b:d6:f8:27:09:8d:7d:
b5:c9:44:6d:04:a9:0d:0b:ea:9f:26:32:94:92:61:
d5:37:42:f5:04:07:c8:1a:ad:5d:33:6f:14:fc:bd:
8d:d9:7e:72:06:e6:c5:e3:59:66:1d:67:38:f1:ae:
14:35:00:37:e6:7a:70:9a:e6:f3:5e:91:a8:80:03:
c7:1f:2c:14:bf:d9:56:4c:66:fd:6c:f9:ca:3b:04:
fd:4b:f3:a5:31:37:0d:c8:0c:48:92:23:98:c8:81:
57:cc:2b:2e:44:dd:e6:c4:a5:54:fd:4b:6b:e1:1a:
a0:fc:4c:cd:e5:a9:a7:04:00:52:b0:dc:38:09:59:
fb:fa:81:fb:50:9b:d8:ce:0a:72:f0:a3:32:28:3d:
7a:6f:65:c5:be:14:1e:19:7e:6a:bd:10:32:fc:c1:
77:95:f7:8e:b1:6d:59:9e:93:16:b5:f0:c5:85:6e:
88:e2:a8:9d:a2:7b:df:88:e7:a2:fe:7b:f4:70:67:
f0:09:0e:11:a6:df:38:85:f6:d6:a8:f8:d1:5d:3e:
d3:ea:1f:c6:04:78:5a:de:67:36:53:d3:45:ac:86:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:DF:32:7C:08:FA:DD:B3:1E:64:68:99:07:66:99:5D:D7:94:52
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:16:15:cf:13:5b:e2:21:6b:38:7a:32:07:30:3e:c3:1f:93:
51:7f:92:e1:96:e1:6a:9a:a0:5a:de:f2:b3:fe:9e:9e:2b:f3:
42:06:49:26:6c:4f:5a:af:e8:be:a5:93:a3:0e:92:86:9c:bc:
37:b3:b1:ba:4b:ab:9b:06:a8:1d:00:78:3d:0e:5b:68:ad:98:
a1:ab:52:d3:60:70:95:9f:35:84:7e:ce:27:c5:72:f1:b4:be:
e6:83:bc:3f:8c:39:ea:18:24:32:61:0d:53:bc:68:ab:05:d1:
7e:ff:e0:9b:06:83:18:e0:f1:ff:1d:86:b2:0c:18:17:d8:25:
4b:10:36:7b:20:cf:af:a1:03:63:26:c6:c2:43:90:ee:bc:c4:
da:68:bd:d1:4b:cc:9b:a0:06:00:9a:55:9f:fe:68:bf:e1:1a:
df:83:60:6b:93:76:2a:73:54:d1:c9:f6:cf:19:b0:3b:bd:57:
bb:93:8f:77:d5:38:01:d6:ba:a1:f9:ba:3a:13:d9:ab:d0:e1:
1a:b8:71:a7:ed:13:7f:9d:d5:dd:0b:fb:30:7a:37:5f:6f:d4:
17:be:f9:8f:6d:39:6f:31:4d:3f:e8:a3:70:9a:e2:d7:04:72:
03:ad:0a:a8:8f:a5:19:be:36:4d:a1:4c:cc:8a:a6:39:43:8f:
61:be:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:18:33 2025 by rpki-client