Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier: AWfxxR2HIPlcKAbW+gZkruDJqtBml6VIJZJybMUAnu4=
Subject key identifier: A8:71:B2:FB:80:B5:4F:51:A0:35:0D:70:81:37:1D:8F:C6:AB:09:2A
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 019659821F9E5815E5151AE19D781EB633B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number: 013D
Signing time: Mon 21 Apr 2025 18:00:21 +0000
Manifest this update: Mon 21 Apr 2025 18:00:21 +0000
Manifest next update: Tue 22 Apr 2025 18:00:21 +0000
Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: XwbBu45Ta5rzoljvvvF5ytIJQum6akLc8X3nHXNPbyI=)
2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:1f:9e:58:15:e5:15:1a:e1:9d:78:1e:b6:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Apr 21 18:00:21 2025 GMT
Not After : Apr 22 18:00:21 2025 GMT
Subject: CN=a871b2fb80b54f51a0350d7081371d8fc6ab092a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:ff:c2:98:6f:c1:6f:ea:97:d5:8a:10:63:
81:ba:5f:44:81:b1:c4:8d:ab:71:ff:c8:c6:d4:84:
a1:34:fc:7a:0d:50:f1:0b:bf:cb:96:5a:f8:bc:61:
e0:be:7b:46:50:ea:80:27:02:38:90:57:67:38:83:
4f:4f:64:79:97:36:ca:c8:3b:aa:e0:4d:22:f1:2a:
98:5a:56:7d:aa:5a:fe:3f:69:b5:e0:2a:19:36:48:
92:17:62:62:f8:6f:58:ef:28:6f:20:0e:55:90:f1:
2f:9e:b1:80:46:bd:34:81:6b:2a:9f:ea:b1:00:ba:
09:9d:c3:b3:61:88:53:2e:19:c5:67:29:93:c0:78:
26:ce:9f:5a:a0:2c:a2:1c:e2:e8:a8:88:04:04:79:
df:4d:12:1c:45:83:1e:55:a9:89:d0:74:b1:c7:2c:
28:a7:17:f6:d5:ad:dd:f9:0a:e0:af:45:af:be:9d:
8e:1a:4e:33:fd:95:a0:f2:3c:a0:63:78:2c:13:ad:
e1:27:c3:b6:85:6d:5d:0e:6c:57:a2:d4:47:53:c1:
15:a0:8e:ce:32:d9:fe:fe:f8:30:3d:2e:26:96:a4:
e3:75:04:fe:63:61:b3:4c:1c:65:0b:50:94:5c:6b:
86:5c:9c:b7:8e:35:9a:d4:ba:e0:4b:fa:8b:4a:1f:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:B2:FB:80:B5:4F:51:A0:35:0D:70:81:37:1D:8F:C6:AB:09:2A
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a7:c2:d5:24:7e:d5:e7:91:9e:48:96:64:5d:26:69:1e:cd:
65:dc:ea:9b:fe:1b:d7:cf:c9:fb:97:39:90:08:b1:17:77:94:
e1:48:b4:56:5b:29:d4:0b:6f:da:43:5d:f1:1c:1c:0c:03:3f:
73:aa:c1:eb:97:68:23:32:9d:66:ed:0c:1e:39:67:c0:ce:61:
95:97:e8:24:31:d7:23:03:5b:0c:d1:47:b7:33:dd:cb:51:57:
23:ff:11:22:71:fd:ec:51:81:ef:5e:1f:17:62:41:8a:71:da:
96:48:5b:b3:e3:c1:00:38:2e:b9:4f:fb:f3:50:a7:f2:89:69:
a6:e9:96:7e:81:a5:81:b7:e0:65:5e:3f:a2:1a:a1:e8:33:7c:
ad:9e:74:e5:33:36:96:e9:84:27:d0:35:e1:6e:b1:99:f8:35:
f3:0c:d8:f8:04:db:ad:18:f3:b8:e6:85:35:5d:1a:55:a7:45:
fa:f1:d2:75:90:43:f8:4a:3e:54:b8:f2:59:9e:54:8b:8c:15:
7a:e9:f4:b3:4d:e3:88:2e:90:39:80:a8:a4:29:f8:74:9a:26:
68:3a:16:12:60:b8:f4:de:9a:f0:52:61:c3:fe:51:81:19:35:
1c:70:02:8b:f0:72:3d:b7:f1:30:53:f1:fe:1c:bc:8a:e2:3c:
b3:70:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:06 2025 by rpki-client