Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: 6c/iGtdHXUCrmy9mnh5OLElFjXLyCek++X3r5QGMgGE=
Subject key identifier: 8F:6D:AE:D0:92:99:FF:DD:76:BE:B1:EC:BE:EA:38:E3:08:C3:0C:EF
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 019649A2614298E3D8FC2D7589A02C6198C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 08EA
Signing time: Fri 18 Apr 2025 16:01:40 +0000
Manifest this update: Fri 18 Apr 2025 16:01:40 +0000
Manifest next update: Sat 19 Apr 2025 16:01:40 +0000
Files and hashes: 1: 2r58NpxvTCdcnNGrjt0v-zkeUtY.roa (hash: TkXA680kjgu+5bXWMHrgD9kPPHcPEiisIsJWWTeRFzw=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: ddYTGewKfBqdX+Q6XakvL8JKRu7ro13AiWPP0oDYT2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:61:42:98:e3:d8:fc:2d:75:89:a0:2c:61:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Apr 18 16:01:40 2025 GMT
Not After : Apr 19 16:01:40 2025 GMT
Subject: CN=8f6daed09299ffdd76beb1ecbeea38e308c30cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f3:a5:09:d6:a2:97:3c:8d:e7:35:de:8c:4b:
32:bc:b8:d1:df:86:4a:98:da:df:4d:4a:45:4d:d0:
32:92:28:8d:6f:15:57:c8:06:58:7c:7e:0b:ae:e4:
ca:b8:c3:3f:a9:fa:01:41:ef:26:48:67:d9:9c:eb:
a9:63:16:59:ab:9f:64:1a:a7:c6:ed:f5:03:8f:1b:
23:fd:e8:eb:4b:0b:0d:b1:a4:0a:1b:bb:dc:5a:1c:
ea:42:0b:d0:c8:5d:18:91:a1:f1:cd:ef:ec:57:7a:
d8:7d:e5:2a:44:13:ef:32:33:91:04:a6:6c:9f:04:
91:8e:48:d1:e9:d6:45:37:f0:53:11:c4:6c:8d:98:
4c:e2:4a:26:ce:3e:c3:5a:30:db:82:5e:e1:1e:d8:
f1:4a:9e:ca:3c:16:91:a4:da:01:bd:de:58:79:2c:
64:e8:bc:2d:2f:14:1c:85:45:3e:72:63:fc:c2:24:
44:d3:7f:cf:da:43:52:f9:1d:69:fa:7d:2b:f1:f3:
1b:09:60:7b:93:d2:7b:60:d8:67:db:81:5c:ea:6d:
52:5e:1b:d6:fe:c9:3c:08:53:bd:ac:9b:84:37:7f:
c9:81:1d:b1:ad:33:66:b9:21:2c:96:8f:6a:04:87:
ee:cd:00:f2:75:6e:43:fd:e5:3d:b8:a7:2d:70:13:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:AE:D0:92:99:FF:DD:76:BE:B1:EC:BE:EA:38:E3:08:C3:0C:EF
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:8e:f8:0f:55:3c:95:0b:5a:a1:07:b6:c2:57:ac:a9:3b:
4e:49:e1:5e:95:88:0c:d7:ff:d9:8f:ce:4b:00:78:a8:35:f8:
b3:63:73:25:b9:8c:80:7c:3c:67:7a:e2:08:a6:41:6b:2a:d1:
b7:79:dc:c4:6e:1e:43:97:a9:f3:91:a1:f8:be:93:b4:98:6b:
92:ba:83:85:2b:30:c7:9d:1d:d2:7e:22:e5:16:ad:c1:30:f6:
21:e4:cf:7f:ba:30:b9:d1:c7:04:11:8a:19:68:5a:24:0e:26:
a3:8b:b8:d9:c1:b6:89:51:a7:0f:a3:4d:b5:7f:c5:f7:6d:f1:
3f:2d:2d:d0:64:21:e2:7c:9f:e6:fb:cf:8f:56:76:ca:09:f8:
79:98:5b:ca:a6:2b:b4:76:84:5c:6f:26:02:b5:90:c7:d7:20:
a8:ab:8f:99:25:cd:45:cd:9b:1b:74:a4:0a:b5:37:64:db:2a:
ed:74:e4:f0:ae:d3:11:ec:d9:52:a1:d3:41:bd:44:f6:08:18:
a2:bd:5f:32:5f:17:7c:14:cb:b2:c3:6a:1a:08:fb:f2:3d:ee:
62:49:15:2e:ec:c3:bc:03:37:e8:f3:57:4c:3c:96:f1:fa:4d:
e2:59:b3:f6:97:ea:21:bc:5d:cc:bd:ef:d1:4c:81:da:f9:66:
57:be:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:01:14 2025 by rpki-client