Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
File: Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft (raw, json)
Hash identifier: wLt1mHZKwWoc8qbb0Mgc87eEgwz49yigwJOV7ZM0R+s=
Subject key identifier: 6B:B6:FE:0A:1E:50:90:4C:04:F7:48:02:F9:4B:FC:CD:D3:BA:B9:82
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 0196458D6E93BA9B35781BDC2B327BA256B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
Manifest number: 0E72
Signing time: Thu 17 Apr 2025 21:00:18 +0000
Manifest this update: Thu 17 Apr 2025 21:00:18 +0000
Manifest next update: Fri 18 Apr 2025 21:00:18 +0000
Files and hashes: 1: N4CwZRnLnlumD-RJFVgkbIUrCBc.roa (hash: EtoC/NIHh5NhO9jyQ35IICnYchDtP+NYLu/Fs0pjNjc=)
2: Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl (hash: 7vvh9ls5BwrYWobM7WDNmDiBK9R4eQvYHzVe9sQHQCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:6e:93:ba:9b:35:78:1b:dc:2b:32:7b:a2:56:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Apr 17 21:00:18 2025 GMT
Not After : Apr 18 21:00:18 2025 GMT
Subject: CN=6bb6fe0a1e50904c04f74802f94bfccdd3bab982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:c7:b5:c5:c0:7a:c9:fd:44:e7:a2:65:fa:
cf:5a:5c:65:52:dd:cc:12:38:4a:33:88:62:02:f6:
48:e0:c2:3d:88:72:0f:01:86:fc:13:21:ee:2a:70:
a4:d3:5f:9b:8a:5e:65:94:c4:48:a6:b6:58:06:e5:
50:b9:de:44:f2:c0:72:3f:c7:29:46:b3:15:a7:24:
c4:78:c4:0d:50:29:b0:39:fb:ea:e4:7e:95:a1:62:
b9:e7:89:a1:0a:8f:57:a8:84:1a:55:70:9c:05:3c:
a3:0d:03:3f:80:8a:a8:a4:c5:dc:b7:ae:35:f6:a5:
24:0f:03:07:07:f9:00:be:8f:25:2d:51:ca:f8:9d:
73:11:5a:6b:7e:37:cb:b7:21:3a:8f:90:b3:89:2e:
b9:64:bf:f1:65:6a:74:2d:da:86:55:69:17:2e:44:
95:5e:53:d0:bd:c6:01:25:cb:6e:2c:20:0f:19:14:
c7:64:c5:72:ff:d3:82:d1:88:6f:6b:8d:cd:3f:58:
92:a8:d7:81:91:69:5f:34:c5:bf:ca:61:7b:9b:03:
e8:b4:37:eb:14:7a:b5:6c:88:07:93:cb:76:1d:a3:
e3:c1:1c:5d:d8:a0:89:c5:f1:41:41:e8:94:cb:8f:
ec:05:a0:81:30:11:03:33:3f:6f:3d:10:cd:6c:cc:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:FE:0A:1E:50:90:4C:04:F7:48:02:F9:4B:FC:CD:D3:BA:B9:82
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:41:f5:77:e3:d7:95:f9:45:16:7b:3f:db:ec:52:22:eb:3a:
df:a2:6c:07:38:08:47:b8:ba:14:24:bf:8a:1c:1d:3d:d3:07:
4a:87:c3:fe:65:29:a6:6e:ea:88:d5:8a:eb:9a:ec:cc:5d:a3:
84:ba:ac:a4:0f:11:2b:78:50:b0:05:35:cd:c2:8d:8c:3d:b6:
c4:72:e6:ac:98:73:62:46:af:02:b3:41:1e:78:3c:2c:fa:c6:
6e:25:0f:37:c4:e2:cc:c0:63:40:fc:15:04:b5:0c:c2:12:0b:
cf:ab:3c:82:d6:c3:c0:69:f9:ec:b7:78:28:bc:1a:94:26:c9:
a1:ae:1c:f4:4a:df:46:ad:30:a9:23:88:c0:c2:fa:0f:a6:47:
73:12:33:4d:ee:46:0f:96:70:f8:88:af:d3:a3:e7:23:f7:37:
f8:30:69:aa:39:c8:d9:34:d8:68:62:0a:44:0d:83:a9:4f:da:
5c:69:0c:61:1c:2d:4a:fc:39:80:d0:1b:24:bf:1d:60:5a:e8:
12:37:74:ea:30:18:b3:67:b5:d4:27:bf:67:9b:3a:3b:f4:26:
82:11:8a:c3:f5:f3:da:e8:b4:10:13:98:b3:d3:02:9e:7e:ee:
aa:d7:b0:e0:b7:50:8d:2a:03:f2:59:54:18:65:c5:74:dc:f1:
ad:d8:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:13 2025 by rpki-client