Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: kR7voVcTPK+4jTnWmupRUclpoZCs+jumOvVmiFsH8lc=
Subject key identifier: A9:16:5F:12:FD:89:38:3B:DE:61:0B:41:D7:B9:90:0A:BF:34:A6:EE
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 019654CA03DA2837A99834E314284D01B1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: EC
Signing time: Sun 20 Apr 2025 20:00:47 +0000
Manifest this update: Sun 20 Apr 2025 20:00:47 +0000
Manifest next update: Mon 21 Apr 2025 20:00:47 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: Te9YuMHDd2c6PKwmP7YDbGaJadBPMOF0cA+qOBupQ1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:ca:03:da:28:37:a9:98:34:e3:14:28:4d:01:b1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Apr 20 20:00:47 2025 GMT
Not After : Apr 21 20:00:47 2025 GMT
Subject: CN=a9165f12fd89383bde610b41d7b9900abf34a6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:de:5b:eb:4b:11:e6:e4:33:06:fe:9f:3b:
a6:c0:cc:4e:c8:dc:25:3c:c6:ed:57:9e:c8:d7:ac:
2b:d7:db:0b:9f:eb:dc:a7:5d:7e:85:fa:58:78:ef:
45:60:64:40:5d:04:80:26:21:9f:2d:9e:8d:10:b5:
85:72:db:83:c3:09:ed:d2:cd:35:c4:07:c0:77:a4:
36:93:7a:e0:51:ac:57:d2:b0:05:38:91:72:a0:dc:
54:75:ac:b4:b0:f4:27:2c:35:8e:13:67:a5:88:8e:
c3:af:a8:ec:e6:76:fe:ce:66:79:02:12:62:6d:fc:
3f:24:f7:72:c5:69:98:ce:d0:5b:ca:86:e7:ee:b0:
89:1f:7a:f3:fa:c7:9e:42:b8:0a:d2:d2:04:ab:de:
96:28:3e:45:00:95:d4:79:ad:8a:a7:0f:23:9b:d2:
db:e7:97:c0:e1:65:ac:0c:c2:77:10:d0:06:17:a6:
19:a6:99:93:f1:ec:dd:a8:18:cc:6c:10:5f:ef:9a:
20:8a:7f:ad:51:25:72:38:54:e8:50:61:1a:34:5e:
3f:db:73:24:44:32:12:45:1c:64:df:2e:3a:d2:30:
76:8f:32:ad:f1:1a:29:31:71:31:69:41:f9:da:9c:
06:3f:7a:42:42:84:d8:75:88:a7:25:3b:53:0e:9b:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:5F:12:FD:89:38:3B:DE:61:0B:41:D7:B9:90:0A:BF:34:A6:EE
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:34:b0:6b:ef:e2:0f:04:f5:84:44:a6:62:2f:71:7b:ab:eb:
65:c9:60:71:c2:21:9e:9e:94:1c:a0:b2:3d:8b:4d:3b:30:e4:
df:df:cd:5f:68:48:5a:24:2f:76:3d:eb:99:16:a6:4c:32:93:
28:b1:0a:54:7c:62:cf:42:4b:df:f9:de:c7:e0:61:6f:fe:d6:
b4:db:2a:94:6c:5a:25:4a:2f:89:ba:ce:04:63:17:79:f8:d1:
e3:05:dc:57:cf:cf:09:63:87:9e:77:af:f6:bf:f4:25:90:e4:
55:be:ba:3b:b8:ba:a0:ee:43:8b:91:19:76:cc:0c:be:fc:c8:
35:b8:94:b0:97:6f:c0:f4:db:6f:7c:85:70:ec:10:59:2d:ca:
e0:19:90:74:62:46:db:2c:7b:ce:4c:42:d9:c1:bc:a3:4a:a0:
5e:0f:5e:4b:75:cd:36:f9:69:3e:a3:98:8b:8b:04:96:9a:9b:
0a:20:d9:60:dd:ee:1e:32:c7:52:2c:8c:07:cc:a6:07:18:1f:
2a:06:64:d4:d4:75:f9:fc:aa:60:cd:09:4f:33:b5:35:5c:47:
53:87:af:5b:a3:5d:41:82:d9:f1:83:29:de:22:c1:f2:c0:2c:
21:f5:c3:f3:c7:24:4e:6d:6b:ab:7a:38:6a:13:95:5e:01:3f:
43:2f:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:18 2025 by rpki-client