Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: NHCFnOIl4IdTxpPWq9EQmY6Ttty3hA3mLhdFhJ0QPeU=
Subject key identifier: 69:31:67:B9:F9:1F:72:75:34:85:28:A8:F3:B4:8C:50:2C:D9:D6:B8
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019651C87385A4A3C7AA633576A8914E1E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 0CEB
Signing time: Sun 20 Apr 2025 06:00:13 +0000
Manifest this update: Sun 20 Apr 2025 06:00:13 +0000
Manifest next update: Mon 21 Apr 2025 06:00:13 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: wB0SIo87XYpyxQgelN3nS2h6ehkS5t3atPXztj33ftY=)
2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:73:85:a4:a3:c7:aa:63:35:76:a8:91:4e:1e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Apr 20 06:00:13 2025 GMT
Not After : Apr 21 06:00:13 2025 GMT
Subject: CN=693167b9f91f7275348528a8f3b48c502cd9d6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:92:9e:94:77:e5:3f:d3:09:56:c6:10:4c:
02:da:7f:0a:55:56:e6:f7:f6:be:b6:98:27:86:eb:
ee:fe:ae:6b:0e:b0:a0:9f:f6:a0:1c:f8:c8:5e:e3:
3e:47:d2:92:96:b1:68:b8:b5:0b:fb:c8:cf:b1:42:
95:76:38:80:bc:92:ad:76:87:cd:85:9f:e2:32:39:
df:92:ed:6e:ee:c5:45:06:a0:28:44:6f:32:16:4b:
cd:dd:99:a1:91:75:bf:ae:44:6e:73:92:4d:37:f4:
ff:08:6a:67:36:e2:59:37:69:14:18:f4:0d:73:8a:
ce:1b:a1:5f:fc:c3:b2:9b:df:05:b3:9c:f9:94:06:
89:42:95:ff:9c:19:06:0a:5a:62:00:aa:77:52:88:
f6:84:46:ed:55:70:6e:05:fa:7b:f7:e3:8f:c3:ae:
1b:a0:b6:c3:df:0f:7c:e9:a3:ab:8d:29:e5:a8:5e:
02:90:44:8c:ef:24:30:92:79:10:ad:69:1b:3e:09:
05:c5:52:84:7b:3b:9e:ba:bb:0f:30:05:8a:fb:ad:
c3:55:d3:0c:29:fc:4f:b2:bb:22:d5:43:61:10:1b:
9b:b7:b8:24:ae:f5:20:87:d4:be:05:66:5f:d3:e3:
ad:00:a5:aa:ec:51:91:5a:6a:8e:12:39:10:ed:29:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:67:B9:F9:1F:72:75:34:85:28:A8:F3:B4:8C:50:2C:D9:D6:B8
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:25:c7:71:c8:9a:10:00:ee:0e:b8:9b:80:81:23:b3:17:ef:
31:59:c7:16:c5:a5:08:3a:da:dc:d4:8a:83:d9:f4:e1:2b:18:
be:71:e9:a6:27:de:06:17:6d:c1:12:2e:12:98:93:ff:88:8e:
6e:0f:f4:51:b1:a3:36:79:0f:29:e6:b7:8c:3e:27:ce:98:7f:
eb:5d:48:98:3f:98:e5:4b:6e:a5:13:84:8b:79:74:94:b8:fd:
2d:48:aa:ac:2b:aa:1d:4c:e9:d8:89:f4:47:30:da:2b:a0:d7:
22:cf:92:b0:fa:20:ec:e4:45:02:7f:cc:69:1d:cb:6f:f6:b9:
30:42:b2:9d:20:96:7b:62:5d:4d:15:7a:25:9f:de:8c:5d:cc:
bf:e1:cd:15:d1:f1:40:e7:1d:ef:d1:7c:4f:5f:0c:40:da:58:
44:1d:35:69:15:8b:ba:9e:c2:cd:05:11:82:4d:c4:68:1f:c5:
50:d0:a6:ac:83:27:98:af:36:a6:bd:de:51:13:97:6a:45:a3:
91:29:c0:3b:3a:47:20:91:a9:ce:bb:e0:d1:e8:86:a9:5d:f6:
d1:11:fd:4a:03:b6:47:4a:21:9b:09:25:3e:e5:a2:15:00:24:
5b:b9:52:5d:a3:fd:8d:38:a3:b9:5e:ed:92:19:2b:ef:50:11:
b0:88:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:33 2025 by rpki-client