Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
File: oInHIR6wy6D9k84xaziVOM4aywA.mft (raw, json)
Hash identifier: HeGeAJRMMLvwokOjRbhFX0VNiNWxLWOZsaLe7snYLko=
Subject key identifier: AC:AC:2B:23:62:43:90:E7:7E:98:15:B3:FD:A4:D1:0C:52:EC:9B:45
Authority key identifier: A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
Certificate issuer: /CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Certificate serial: 01965424DD2EDA479E754A1E9340A8F95FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
Manifest number: 0D6D
Signing time: Sun 20 Apr 2025 17:00:24 +0000
Manifest this update: Sun 20 Apr 2025 17:00:24 +0000
Manifest next update: Mon 21 Apr 2025 17:00:24 +0000
Files and hashes: 1: 07n12IDxKPAxIxs90Uxv2kiE_p8.roa (hash: onmuGRswCBPJXmNtk3krWUPKECPDIYJbgKGbyF0Mw3c=)
2: oInHIR6wy6D9k84xaziVOM4aywA.crl (hash: KgElQdw/WcTkAYlNB/0bExkl3+kCbuuaGHj5uZqj/Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:dd:2e:da:47:9e:75:4a:1e:93:40:a8:f9:5f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Validity
Not Before: Apr 20 17:00:24 2025 GMT
Not After : Apr 21 17:00:24 2025 GMT
Subject: CN=acac2b23624390e77e9815b3fda4d10c52ec9b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:e5:d7:24:19:63:fa:a7:10:1d:14:2b:0f:
f5:ed:18:a9:4b:21:e1:5a:3e:1a:d2:68:10:1a:81:
2f:5d:9e:5c:d5:ed:99:61:2d:ba:f6:e1:29:0d:8e:
04:22:fb:79:31:55:ab:34:30:c0:b2:f9:7b:ad:b4:
81:52:70:f0:dd:8a:89:b3:f9:dd:41:61:4c:44:e6:
5c:5e:d3:84:24:de:bc:78:2d:05:4c:14:6d:a4:42:
3c:87:4b:42:71:01:9f:00:0e:28:fc:30:dc:48:28:
5c:db:8b:4c:b4:c3:04:bb:1c:4a:c5:84:17:9d:94:
de:a1:b9:be:36:ee:c7:68:bf:98:b5:42:9c:33:9f:
5b:0e:c5:86:80:87:68:b8:b9:41:0e:52:12:92:a5:
43:30:81:77:23:0b:09:e9:8b:12:44:e8:03:79:a7:
5c:47:1c:8d:a0:3d:97:b9:c8:f5:aa:bf:0c:5d:42:
7d:83:cd:f1:d3:6a:14:3a:45:c9:a8:50:11:76:86:
d8:a6:d3:8a:35:f9:2c:8c:d2:47:ce:85:2e:5e:59:
cc:05:d4:35:31:4e:5e:e5:80:4b:60:d7:12:7b:2e:
3e:79:11:68:ba:02:65:45:26:d2:70:b1:ce:0e:db:
4b:49:ee:9e:53:51:66:34:6d:06:12:36:2d:77:12:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AC:2B:23:62:43:90:E7:7E:98:15:B3:FD:A4:D1:0C:52:EC:9B:45
X509v3 Authority Key Identifier:
keyid:A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3a:ed:fd:53:a7:e5:0d:02:31:95:ad:bf:d4:07:a5:75:73:
1c:2d:a0:10:fa:c4:11:3d:89:56:bc:92:5b:15:35:b1:cd:32:
75:fe:3e:90:00:95:4e:07:ef:3b:e9:16:01:d2:3e:64:67:14:
6e:8b:cd:9d:0e:62:f9:f2:ec:16:74:93:15:98:3b:23:65:7f:
2e:45:11:48:8e:05:07:eb:f3:d5:06:a4:50:f2:ce:4f:29:09:
d7:96:e2:60:ea:25:d5:1c:bc:29:bc:52:29:bb:39:8d:1e:39:
ab:18:dc:db:3e:b3:48:e9:48:37:bf:22:95:b0:37:56:16:d5:
2a:52:a0:5a:6f:bb:47:c9:8d:19:bd:e6:4e:ba:06:01:2a:5c:
34:4e:4f:f7:ee:01:69:63:4f:f6:1f:9f:f7:7c:aa:67:b2:08:
11:c1:6f:60:e1:95:30:d1:26:23:15:e4:86:3b:10:9b:de:1a:
26:47:4f:02:86:ac:a9:25:35:37:03:85:03:dc:fd:14:82:a7:
9d:d1:bc:f9:14:3e:4e:d5:cf:23:7c:96:c3:2f:42:7a:25:63:
4f:ab:08:df:fb:39:b8:61:12:cd:03:90:3f:43:d7:7b:70:19:
cf:19:54:45:4f:e3:e2:fa:3f:9b:5f:06:6b:16:8d:99:93:e1:
67:a5:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:22:31 2025 by rpki-client