Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: 8C9gyLeqqOFMZ2dnMQUs5ktQrWkVekljRiM0pHY4mB8=
Subject key identifier: 95:29:C5:1E:39:46:AF:28:25:A2:B9:49:D8:1E:1F:FE:72:17:7C:EA
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 01965C4C8F68CA4522B73B1187DAEE8E4E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 1493
Signing time: Tue 22 Apr 2025 07:00:43 +0000
Manifest this update: Tue 22 Apr 2025 07:00:43 +0000
Manifest next update: Wed 23 Apr 2025 07:00:43 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: 04xvwcTm5f6PEIl2r+HDYhu0LuewvEvN99DLVAhYufE=)
2: oU-Dh2GrIk6DJo0B3ckZobCZQLg.roa (hash: 3M/n9wvPmKU+uLTP2MTaGav/2cb5GDciUi4YXKv/+G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:8f:68:ca:45:22:b7:3b:11:87:da:ee:8e:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Apr 22 07:00:43 2025 GMT
Not After : Apr 23 07:00:43 2025 GMT
Subject: CN=9529c51e3946af2825a2b949d81e1ffe72177cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:5d:6b:1f:95:0d:f2:85:5e:4f:46:88:c8:
35:fd:cd:b5:93:36:b4:c2:20:05:f8:bc:3f:89:37:
f7:f6:7f:09:d4:8b:fa:40:18:f0:30:29:4e:71:17:
7f:a8:44:d5:a3:15:5a:33:dd:fc:db:58:09:5d:33:
27:de:d7:cf:ec:71:e4:10:fd:5f:4c:76:e1:1e:fd:
58:27:1b:78:79:be:47:ed:55:c4:13:ec:6a:8d:10:
7c:a6:81:ee:64:af:5a:fa:85:08:97:fe:ba:e8:d4:
14:9f:a8:ee:8c:66:5e:43:c1:3c:6b:aa:5e:be:3b:
0b:50:82:4a:6d:5e:9b:96:87:5d:18:96:fc:ff:d0:
2e:fe:90:b8:f9:22:de:4a:ca:06:fa:d1:44:68:0e:
81:53:0a:41:8b:80:04:3d:b7:34:8a:a6:57:ff:2a:
23:94:31:39:e1:46:0b:0c:eb:3a:e8:26:b5:9a:4e:
d4:9e:cc:9e:fa:1e:76:f3:4b:39:0d:2a:f5:2f:f6:
1f:99:5c:3a:1d:eb:2a:e2:25:b8:bc:5b:59:5d:36:
5c:31:0a:7e:68:0d:07:af:4a:91:98:99:d4:b4:51:
b0:bb:85:b0:1f:01:66:ef:53:52:12:ea:b4:39:24:
94:36:8a:ff:8a:6e:5c:b0:4b:b6:1b:e2:1f:de:e9:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:29:C5:1E:39:46:AF:28:25:A2:B9:49:D8:1E:1F:FE:72:17:7C:EA
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c0:93:6a:0e:ac:bd:35:05:2e:01:0c:f3:a2:fc:9d:ab:62:
9f:17:b8:22:b0:f1:be:6f:68:80:f3:2b:e4:f4:62:0e:27:3f:
7f:60:e6:b1:96:a5:aa:43:2c:3f:10:7e:99:82:92:93:cb:a7:
c7:08:ea:ab:b6:08:88:95:9f:5f:2b:ea:2e:ab:19:da:8b:d2:
1d:4e:0e:4d:a4:a6:fb:e7:51:06:38:c4:e7:4c:27:44:f3:42:
a3:d1:b8:06:5a:f3:db:fb:fd:2f:87:0f:00:2e:9a:2c:48:30:
5f:20:94:3e:23:ce:df:0d:f2:71:f4:bb:47:4a:8b:48:23:dd:
17:14:f2:eb:38:7e:96:97:ba:3d:83:06:26:29:1c:dd:83:9f:
19:c5:38:3a:72:5c:6a:81:35:d2:62:ec:ed:e4:2a:84:16:30:
c7:27:73:d8:73:4e:55:44:b7:28:38:a2:89:28:98:23:a4:ec:
06:93:9e:ba:47:64:9f:f1:0c:01:1e:c4:38:f5:ff:08:e2:a0:
80:cc:a5:82:fa:31:76:e6:31:2f:34:db:38:e3:08:43:54:64:
33:59:42:af:44:e5:a7:24:23:b1:e4:e6:87:52:b0:99:b2:bf:
62:41:a0:43:9e:a6:6d:9a:50:6a:1b:e2:29:3f:5e:be:11:1b:
50:7b:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:35:04 2025 by rpki-client