Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
File: oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft (raw, json)
Hash identifier: 25TzltoUEYqQ03sIHURPI/fl1EyVWnL4uI1keuuWC5M=
Subject key identifier: 4F:27:4C:F1:57:06:1E:B8:E6:2F:1F:8E:47:C6:79:D0:6B:94:FD:97
Authority key identifier: A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
Certificate issuer: /CN=a1208242656123c0c90b6168d09b2d8a67617bec
Certificate serial: 019657270E961788F5BDEC682F488CE98440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 07:01:39 +0000
Manifest this update: Mon 21 Apr 2025 07:01:39 +0000
Manifest next update: Tue 22 Apr 2025 07:01:39 +0000
Files and hashes: 1: YAoUenHihT4DQlafryFUSek-9CM.roa (hash: U8ZmX/KGlPOXoWxEXiPpdG5cQfV6PXbF8uCn/cMmNEA=)
2: oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl (hash: z9o1UToLNO1LI5vGuniodKiKGO8Gi+SkiK68eXcUVXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:0e:96:17:88:f5:bd:ec:68:2f:48:8c:e9:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1208242656123c0c90b6168d09b2d8a67617bec
Validity
Not Before: Apr 21 07:01:39 2025 GMT
Not After : Apr 22 07:01:39 2025 GMT
Subject: CN=4f274cf157061eb8e62f1f8e47c679d06b94fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:7f:89:3c:05:40:ef:50:1f:7b:d7:87:60:
09:d2:88:dc:b4:a2:f3:27:5f:f4:35:98:d1:d8:bf:
dc:52:33:4c:a9:01:0a:1b:85:c1:d8:4e:cf:bc:c9:
e2:ca:ba:df:ca:e5:d0:33:56:16:5d:a9:0b:7d:70:
4e:05:ab:5d:19:92:84:9e:0f:65:ac:53:09:49:a9:
0f:4d:45:b0:79:a9:82:08:1d:60:ee:9b:89:b2:01:
a4:6a:11:4b:de:31:df:00:52:db:7e:8f:53:42:7a:
f6:aa:a6:5e:46:48:20:fa:3a:21:27:4a:2d:39:20:
13:33:ca:37:9f:3e:b8:22:1a:25:3e:e0:15:0c:40:
ed:ff:bc:22:e2:ec:03:db:ad:08:8c:64:e3:c6:06:
d1:b9:6d:7b:97:38:45:1e:04:50:d5:c5:5e:1a:e0:
e8:31:82:13:c0:ae:8a:4f:c8:71:17:37:28:90:96:
2a:5c:3b:91:87:d0:50:5b:d5:82:d6:fa:ec:c8:a7:
d6:b8:ec:cb:71:27:a3:42:a4:24:75:3b:34:70:58:
e9:b8:f5:1d:a3:0c:2b:e4:15:6f:33:8b:05:1b:10:
47:de:35:f6:24:8a:4c:7e:dd:48:f9:f3:b0:0e:0e:
78:87:17:dc:6b:28:37:cb:7a:70:bc:7a:a3:c5:43:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:27:4C:F1:57:06:1E:B8:E6:2F:1F:8E:47:C6:79:D0:6B:94:FD:97
X509v3 Authority Key Identifier:
keyid:A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c4:33:77:77:fd:2e:f2:ca:aa:79:55:bc:05:9f:12:b8:15:
d1:fb:30:eb:3d:dc:64:8f:0a:66:62:13:68:ca:3e:22:df:fd:
c0:a0:74:54:83:e7:5e:04:68:bb:fd:79:1f:e8:f3:cb:b2:f8:
36:a8:11:81:b4:e7:39:43:ef:92:3b:88:c0:39:44:f8:a2:ff:
08:75:7b:68:c0:50:34:a5:e6:d3:0c:8c:c8:63:d3:01:ac:ee:
74:95:40:c8:74:90:07:04:8d:6e:81:73:21:f9:d2:56:26:23:
75:3e:fe:0b:b1:13:89:03:45:2b:10:7f:cf:02:cb:d5:83:27:
45:4f:8d:2b:11:c2:95:94:c1:0c:0f:f4:12:f1:10:63:81:01:
76:cc:71:8f:41:59:20:68:8b:51:ae:9a:07:b6:05:5d:a3:fb:
4a:10:21:54:c1:aa:a2:8c:c8:dd:1a:32:04:fd:8a:c7:9f:e8:
6c:1f:c3:e8:6b:de:fc:3f:7e:06:fe:ab:0c:00:a1:fd:cd:51:
62:1d:db:75:88:6a:b4:a6:6a:07:58:a0:ff:c2:42:22:9b:17:
da:60:db:7f:be:b0:d1:3c:19:88:0a:01:bc:04:2c:ea:75:2d:
2e:75:b8:46:b7:d7:c7:13:19:fd:e9:51:f1:fe:79:f2:b6:78:
24:7e:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:40 2025 by rpki-client