Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json)
Hash identifier: nGmwqVk89eTif06b4Mu276VB5RwqvWN34CgEFWUOHYI=
Subject key identifier: 4E:90:EB:7F:48:4A:E8:92:DD:09:48:64:BB:81:63:EE:AC:9B:6D:99
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 019655DD4925038149940AEC52F5190AA675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
Manifest number: 0DCF
Signing time: Mon 21 Apr 2025 01:01:27 +0000
Manifest this update: Mon 21 Apr 2025 01:01:27 +0000
Manifest next update: Tue 22 Apr 2025 01:01:27 +0000
Files and hashes: 1: JyWi5BFZcLnbfEzmECOIrpo9WqY.roa (hash: BGeaCEXgvEq5NNxKl+Ag2+yFWkLD9Y1n05TPe3xR8kw=)
2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: 8/rALx8TcFWUb4Z4Ph3Qo9Wd7wKLllN8gm+2hz2CRFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:49:25:03:81:49:94:0a:ec:52:f5:19:0a:a6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Apr 21 01:01:27 2025 GMT
Not After : Apr 22 01:01:27 2025 GMT
Subject: CN=4e90eb7f484ae892dd094864bb8163eeac9b6d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:4b:6e:28:cb:43:d2:3a:00:1b:5f:8b:91:
90:0d:20:26:a0:b0:2c:8b:1e:91:03:bc:6a:37:fe:
dc:77:a5:58:01:6b:da:22:74:c8:2c:d7:8b:dd:fc:
3c:a9:eb:42:c1:62:cf:02:56:a8:c2:cb:9b:cc:7a:
41:12:f6:6d:1d:6d:61:d1:8e:1a:a4:f8:c1:02:0d:
c3:71:fb:40:98:6e:0e:f0:bc:8b:b7:d4:63:5a:f3:
f7:aa:d1:fe:14:21:9a:d4:a1:f9:5c:01:93:41:e3:
1e:93:10:87:95:50:d1:b9:80:25:9b:34:51:62:26:
f4:48:9e:c2:27:56:1b:ec:6b:72:58:47:09:2b:f4:
51:9a:e1:fd:0f:48:14:b6:8a:42:f7:c8:3b:d7:79:
d9:db:7f:65:55:b9:59:e4:20:3f:9e:42:03:c4:97:
7a:f9:85:90:c4:86:0c:b8:70:23:b8:ee:86:fe:7e:
56:d6:57:06:22:10:58:84:de:0e:05:a1:6e:52:2b:
e7:e9:49:9f:8e:fe:99:c3:12:12:eb:20:40:af:c6:
8f:21:89:bf:a9:56:a6:7a:06:35:bb:c7:0f:88:11:
6d:ad:b0:74:73:68:4c:0d:5d:b9:dc:d3:78:e0:07:
50:9b:be:fb:e8:22:3e:1b:9c:54:e9:1d:92:8a:eb:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:EB:7F:48:4A:E8:92:DD:09:48:64:BB:81:63:EE:AC:9B:6D:99
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fa:13:fe:6b:cd:26:17:95:bb:b1:cc:d1:e9:3b:ca:f6:4b:
48:19:30:13:09:a0:91:99:b0:7e:4a:f3:7e:e9:2e:94:d9:27:
a8:f7:16:37:05:88:20:fb:85:12:b0:98:cb:96:c5:f9:33:e6:
16:02:89:e5:40:21:45:62:84:e3:d4:7f:d8:55:99:80:25:76:
1e:fd:62:87:1f:0e:94:d4:d7:89:17:58:52:5f:8c:bb:d6:a7:
ca:73:10:5d:b6:45:bc:49:d3:10:3d:0d:99:7a:c1:8e:31:b5:
d5:74:19:f4:62:2d:c7:c3:77:2a:66:66:af:14:a2:c0:71:c0:
e1:c6:26:d3:9d:a8:c4:99:1f:c2:79:c2:87:b0:ef:a1:e1:72:
da:7e:32:64:1d:bf:36:4d:c7:ce:2f:20:00:f6:e5:26:cd:7a:
4e:25:76:16:8c:87:1a:dd:84:4b:1c:9d:b0:63:76:94:08:0c:
72:67:72:19:7e:7e:dc:1c:56:17:ab:3e:85:6c:9f:a6:f7:35:
26:93:1d:2e:99:48:73:3f:90:7a:a1:ab:66:c5:8f:dd:46:0e:
01:b1:6f:c1:30:3e:c9:62:5b:91:ef:02:10:6e:28:90:38:48:
7e:04:e3:63:73:0c:1d:37:de:1c:49:a0:21:9d:71:74:53:07:
56:01:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:24 2025 by rpki-client