Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: mWETjCWvqQCZWWjkkSqQoUgkQZD4lomJvQZ+r6+qykM=
Subject key identifier: 59:7B:4A:5B:FD:79:9B:F5:06:B6:AE:EF:C3:19:C3:81:1C:A6:2D:AD
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 019657CB404DCC92312D011A77053411C80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 10:01:00 +0000
Manifest this update: Mon 21 Apr 2025 10:01:00 +0000
Manifest next update: Tue 22 Apr 2025 10:01:00 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: uT7vSSec6k0rkSjmfULc/atpr+8LUq01KAkAS1zGvtA=)
2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:40:4d:cc:92:31:2d:01:1a:77:05:34:11:c8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Apr 21 10:01:00 2025 GMT
Not After : Apr 22 10:01:00 2025 GMT
Subject: CN=597b4a5bfd799bf506b6aeefc319c3811ca62dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:92:b1:01:f6:5a:83:47:00:c1:f2:34:8b:
20:b2:60:e9:ff:28:23:71:32:98:f2:f4:33:50:8d:
c7:a8:58:ff:96:85:87:ac:dd:d9:26:96:3d:8c:5d:
1b:cf:15:07:5f:11:07:2a:a2:dd:3b:a5:5d:e8:20:
20:7c:3b:42:6e:91:26:92:58:ae:72:10:6a:ab:55:
5f:b6:4e:92:35:24:77:8a:86:17:10:f0:8a:9b:79:
4f:5f:f3:43:b3:fd:00:07:6f:87:df:c1:0b:30:30:
55:8d:54:c7:da:a5:82:4e:b1:22:1c:c0:9e:de:b3:
95:d8:65:0a:c9:24:4d:a6:be:b4:71:41:5e:3e:9e:
12:50:86:36:46:39:5e:79:46:30:43:f1:b7:39:38:
eb:7e:cc:f5:6e:53:13:9a:34:a9:bf:60:5e:84:13:
d5:f2:01:21:44:7c:e4:97:0a:c1:1c:b9:27:9c:ce:
2b:8e:ac:d8:3d:2b:f4:93:d1:97:e2:cb:a6:fd:48:
ff:33:8b:2e:8c:ed:22:8e:e2:af:9d:f7:95:bb:89:
36:36:64:0f:50:4e:a0:18:42:e1:81:c5:0d:31:a3:
99:75:ed:f7:2f:dd:d9:b8:28:ab:77:b0:48:33:93:
82:14:a3:0e:27:6f:b2:78:28:a4:ab:e2:e4:8d:9a:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:4A:5B:FD:79:9B:F5:06:B6:AE:EF:C3:19:C3:81:1C:A6:2D:AD
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:18:e5:6d:cf:de:15:1c:99:5e:8d:e7:69:b1:4c:5d:6a:7c:
3a:bb:71:34:56:40:82:ea:59:88:01:10:fe:ad:b3:80:43:40:
0c:43:d1:4b:26:33:ad:75:30:57:da:6a:06:52:83:5b:df:47:
65:3a:59:10:5a:48:37:48:90:15:4e:66:6e:7e:8b:e3:d8:5a:
42:c4:ef:79:1a:50:09:6b:0e:fe:73:3f:fc:dd:f6:84:7b:71:
a3:ab:10:78:1e:bc:b3:f9:cb:d5:5a:58:48:f7:1a:84:7f:71:
48:ea:65:bf:10:70:3d:99:5d:31:e1:78:96:bb:b8:35:cf:1f:
e5:17:50:8a:86:6a:97:3d:e7:3d:47:fc:86:28:a6:cd:3c:03:
71:52:50:e5:c1:29:b9:db:d9:f3:15:07:d3:c3:92:d7:bd:da:
ec:9d:60:29:8c:a4:05:c5:b5:ae:21:43:33:ea:ce:4a:ad:a0:
2a:25:b5:e8:bf:07:ff:1c:ee:46:78:e4:e2:ae:d0:46:54:15:
62:38:1c:0d:5c:b1:92:4d:31:dc:3d:0b:50:57:46:05:1d:4a:
2e:58:80:43:2a:fa:8b:bd:15:77:ad:96:bb:cb:1e:b5:6b:c2:
93:69:f8:1f:14:39:1c:7e:6d:ba:69:72:d6:37:dc:b3:e5:e2:
43:6d:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:36 2025 by rpki-client