Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: JaSFaLVHk0d5FbZwDjPo+jfeTXGhP2JBngns1i/6qTM=
Subject key identifier: 82:1D:04:9A:D3:26:D0:D9:DA:DC:F3:CC:C7:67:A7:26:D8:5A:27:42
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 0196564A750FF936C67F38CE20E19331F462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0671
Signing time: Mon 21 Apr 2025 03:00:42 +0000
Manifest this update: Mon 21 Apr 2025 03:00:42 +0000
Manifest next update: Tue 22 Apr 2025 03:00:42 +0000
Files and hashes: 1: RgkGs56a3wBSH0Yhny04eNJEX3I.roa (hash: 1WUdRWIGnTtyys0okmGp0iV2hIZohfzABaDiV/G7uDo=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: fJ52VMO0u7gRWbKVzeOxApzuRrWIPcQIb/rHOYuXLGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:75:0f:f9:36:c6:7f:38:ce:20:e1:93:31:f4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Apr 21 03:00:42 2025 GMT
Not After : Apr 22 03:00:42 2025 GMT
Subject: CN=821d049ad326d0d9dadcf3ccc767a726d85a2742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:46:48:3d:4e:e6:e9:19:7a:72:7d:d5:4d:
42:23:9c:90:d6:f7:38:78:e3:7b:6e:cb:9d:d5:ab:
54:98:e4:4e:99:5e:d2:97:27:41:c2:18:80:03:78:
a1:77:b1:b2:39:5d:7e:0f:81:59:25:7f:2c:ba:1c:
fe:e1:af:93:8a:87:a3:85:8d:47:7d:2d:cb:05:7a:
29:ca:b0:e8:24:fe:9d:45:fc:2e:16:b5:84:cf:0f:
7e:19:cb:ef:47:7b:1b:a3:e8:2e:6a:47:2d:9f:c5:
92:00:c9:3d:9b:c2:c2:2b:8e:c7:b9:1c:dd:a0:80:
4d:8a:ae:f9:7f:df:b7:a5:ca:d5:35:7a:2e:6f:84:
7f:98:cb:8f:92:8a:9a:32:3e:f8:db:cb:f8:c4:a3:
74:8a:75:c7:5f:84:c7:b8:63:c3:d4:e7:c4:50:8e:
98:1b:24:b3:36:15:13:23:90:ad:b0:b9:1a:21:12:
1b:d3:60:1e:28:b5:07:2f:15:ac:59:55:b6:4b:4e:
a2:a9:04:6a:94:14:c0:41:08:25:ba:05:9e:3d:a2:
6e:1d:36:84:40:5a:d2:d5:f8:11:ff:d7:d2:13:91:
83:cc:4b:97:9f:95:b3:e9:01:4d:c6:be:d4:32:a8:
c5:79:9e:9d:aa:89:d5:30:a1:00:cb:02:c9:76:bc:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1D:04:9A:D3:26:D0:D9:DA:DC:F3:CC:C7:67:A7:26:D8:5A:27:42
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:25:9d:4d:e8:06:7d:d0:bf:fa:74:78:27:6d:13:b7:6b:fa:
90:1e:d5:2d:ba:f4:c3:9e:bf:64:e5:87:62:de:ef:f3:d6:d3:
1e:13:da:70:b4:a9:3b:d6:a2:c2:7c:48:84:7e:76:6b:70:26:
e6:84:f0:5d:10:2a:05:47:f1:9b:9c:56:ad:9a:50:2c:1f:b4:
2a:3a:a6:41:c5:fb:f3:36:f2:77:f6:40:2e:f1:6a:a2:7c:bb:
b4:99:32:54:2c:f9:83:72:55:82:6c:3c:36:d2:cc:eb:f9:29:
59:28:64:ce:bb:5d:01:a7:02:ea:25:9a:50:7e:69:41:8b:55:
89:41:a6:b4:8e:13:4a:65:ee:7d:b6:74:3f:a7:1d:82:f6:37:
3a:31:e1:7c:a1:45:19:84:ed:88:3d:45:bd:be:a5:10:a3:b4:
38:28:5c:0a:be:bb:db:b3:20:94:0f:e1:f6:04:5f:25:db:16:
73:3c:eb:42:3a:2b:dd:72:28:43:50:88:77:e3:23:8e:d7:70:
bb:2e:36:c0:d1:2c:58:45:7f:ee:c1:cd:9b:8b:fb:b4:16:a1:
de:a0:01:e1:0b:b4:c9:d4:f0:23:da:3c:e7:09:85:f1:68:3f:
32:fe:30:a8:b0:76:48:bd:1d:41:12:dc:4d:f5:30:a8:1b:4d:
20:cd:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:46:53 2025 by rpki-client