Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
File: oev1TQKO5HZPYveK2HHb8CYih4g.mft (raw, json)
Hash identifier: puxhZOrO7GZOwg2xYekt0Sc91CXEg5gj67qxJVrlGdw=
Subject key identifier: 59:7A:EA:10:22:CE:B2:A2:26:6A:B8:80:BD:62:E3:14:04:78:C7:06
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial: 0196089D9F8CA0E407DC36C62FE34D4F1DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
Manifest number: 0220
Signing time: Sun 06 Apr 2025 01:01:09 +0000
Manifest this update: Sun 06 Apr 2025 01:01:09 +0000
Manifest next update: Mon 07 Apr 2025 01:01:09 +0000
Files and hashes: 1: 0BmC-81HN_hGVStiVWyBsG7yPOQ.roa (hash: 1DBUkLbwQ3sH8OPXtfdrx6wa0RdQ3lqLVqMY8QCHCK8=)
2: 58QzCphRddJsBqi71H5oisOTtGM.roa (hash: K7oZA9oPzuB3kuDmCdohN1gPlNbeKKgYedD/MB4pxbM=)
3: K5VqopWIERNLlg6XYIHxbSMQwf8.roa (hash: 6CqhTE0o4WqNXO4cXlNrVv+QBipio9ZfLg1pbcvRhvU=)
4: Qt9hOGMkdfDH8ID_bHwfLmJlE60.roa (hash: ARZiY2rT8rE43lKmT9EIHjzaS4HpYkA+YcbbFMZTS4E=)
5: oev1TQKO5HZPYveK2HHb8CYih4g.crl (hash: qMiz8NFXtq54YGcENePwj2FAQtPlz8uLnurX/r+MOUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:9d:9f:8c:a0:e4:07:dc:36:c6:2f:e3:4d:4f:1d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Validity
Not Before: Apr 6 01:01:09 2025 GMT
Not After : Apr 7 01:01:09 2025 GMT
Subject: CN=597aea1022ceb2a2266ab880bd62e3140478c706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:76:2d:2b:f0:30:07:15:80:e3:ef:81:74:
d5:e5:bb:fa:3d:f7:55:86:03:85:ce:0a:6a:8c:e6:
f1:6e:f8:ee:47:0a:15:8a:77:00:42:b5:8f:de:78:
21:8e:31:d8:97:1a:0c:ab:30:c3:b4:73:64:9e:09:
b4:ae:36:6c:b3:f1:28:f8:d0:26:e0:6a:65:f1:95:
5e:60:da:84:e6:3f:96:d6:14:fa:0d:f8:11:33:04:
49:24:40:21:6d:83:04:13:cf:36:83:dd:fe:b0:25:
ae:1a:d5:96:04:b3:4c:44:46:66:25:af:32:6d:22:
b1:91:7b:d1:1b:e2:bd:8d:d3:7f:32:bd:37:72:a5:
22:8d:b8:86:12:8d:e8:89:3e:93:e2:3d:fe:50:b1:
7d:d3:67:dd:e1:68:4f:d2:03:48:54:93:6e:86:b6:
15:51:34:60:58:19:10:0c:35:00:f5:23:37:bb:01:
9c:2d:59:b0:42:f9:b1:77:6a:50:c6:89:5c:eb:2b:
be:1b:d6:43:41:64:dc:2f:b4:a6:4e:63:2e:ad:1b:
f2:b5:7d:6d:53:a2:48:06:e8:36:28:97:6e:f0:32:
18:b4:46:cf:e7:7e:94:a4:6e:c0:78:a7:62:ee:d0:
1c:03:9e:07:e3:44:91:32:f9:78:ea:64:5c:ac:66:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:EA:10:22:CE:B2:A2:26:6A:B8:80:BD:62:E3:14:04:78:C7:06
X509v3 Authority Key Identifier:
keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:ae:16:5b:dc:9b:1f:be:68:3e:7b:ee:fe:95:0d:58:93:
81:f0:52:e5:1f:a0:15:21:df:5d:82:4f:5b:af:a3:52:76:b5:
81:92:ab:9c:d1:37:a3:e9:f6:1a:76:08:a8:d7:eb:aa:50:ca:
63:f2:85:39:1c:4a:c6:b9:72:e9:b0:bd:58:c6:97:8e:9a:55:
2e:d3:ff:e9:d4:43:c2:59:54:84:7f:2d:e2:4d:ff:c4:8e:d4:
10:75:cb:1c:8c:f6:e9:59:ac:28:2d:cb:c4:30:f7:3f:69:f9:
72:65:e8:69:5d:f2:76:5c:ba:96:75:a3:84:ac:88:b2:a8:34:
8b:be:d4:d6:c2:9f:df:55:c1:e9:04:cd:d6:9d:0c:6a:52:8e:
3f:33:52:96:8e:8c:38:89:39:d2:b8:55:8d:49:dc:14:de:2f:
b2:17:6f:5b:10:98:9d:41:60:5d:ce:00:f6:41:8d:ab:12:49:
4c:52:57:7a:fd:79:90:3a:89:31:88:98:f0:7c:bc:80:3b:7d:
43:d4:62:c6:83:39:82:b5:5f:46:6c:e3:4c:3f:50:41:32:70:
36:69:cf:84:66:07:c3:90:77:83:37:1d:a0:73:a0:1d:86:98:
25:78:74:ae:79:b6:cd:d2:16:6b:d2:a2:09:25:35:57:0a:74:
55:d1:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:53 2025 by rpki-client