Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: Sfv39gpA0INYGrAn4PcTOsF2TSjZ7qpBDWmd3QtTHeU=
Subject key identifier: DB:F5:30:45:07:B5:38:B5:7B:94:49:43:DC:41:13:1E:67:7F:EA:8D
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 019651C91E6D257FA32BC1F0AA57FE7EDE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 0335
Signing time: Sun 20 Apr 2025 06:00:57 +0000
Manifest this update: Sun 20 Apr 2025 06:00:57 +0000
Manifest next update: Mon 21 Apr 2025 06:00:57 +0000
Files and hashes: 1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: crrrkwp7chpufXWBxKbuMLsfu0CKc/cVFq1CHLM6gjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:1e:6d:25:7f:a3:2b:c1:f0:aa:57:fe:7e:de:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Apr 20 06:00:57 2025 GMT
Not After : Apr 21 06:00:57 2025 GMT
Subject: CN=dbf5304507b538b57b944943dc41131e677fea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:e0:05:87:bf:00:70:df:c7:af:0a:f2:a9:
bc:e3:e7:49:cb:ba:85:01:46:0b:9a:b0:6f:7d:21:
03:3e:96:0b:93:c7:2f:89:12:49:c6:db:fa:e6:ce:
73:6d:6b:9c:d5:43:26:7b:93:bb:4b:c4:5f:33:be:
2b:27:52:81:41:1d:f5:07:20:bd:b6:4e:94:96:03:
73:b7:af:ba:8f:2a:71:b5:ef:4f:ba:d1:79:f4:e2:
23:52:18:43:7d:13:e9:2b:ed:a9:e4:5d:63:fb:ee:
80:34:33:bd:ae:6f:5d:38:ee:e4:6e:12:a4:9b:a0:
cb:90:63:2d:4a:04:79:85:a6:52:7a:36:cd:45:c9:
64:9b:6a:27:ee:93:9c:4b:c4:83:5b:7d:6b:69:f9:
65:fa:ca:f8:ba:b7:74:a1:5d:c5:25:3b:ae:bb:3d:
39:74:64:47:5a:bf:0e:f2:36:62:fc:27:57:46:f5:
57:5e:d5:51:b4:0c:0e:5d:7f:26:a2:06:d6:3b:9d:
0d:17:d4:cd:a3:71:31:07:04:06:21:9c:78:db:27:
ef:fd:81:33:20:83:01:b5:50:16:d8:e1:3e:eb:25:
4d:14:06:b9:76:93:c2:ae:91:17:34:8e:09:ca:a9:
a9:75:bc:2c:6d:0b:39:ec:f3:45:8e:7e:83:f4:05:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F5:30:45:07:B5:38:B5:7B:94:49:43:DC:41:13:1E:67:7F:EA:8D
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:12:68:ed:76:48:6c:32:ae:6f:fc:ee:29:90:52:95:c1:9a:
68:06:6b:89:ae:0b:91:b0:08:69:94:59:e7:bb:6a:53:89:a2:
70:e9:29:ff:db:e6:30:46:52:d6:88:f5:3b:f0:d6:66:24:f3:
0f:71:e4:ae:36:9d:fb:ea:93:d3:c6:5e:5e:1c:67:1f:99:3a:
fa:08:68:65:0a:51:9f:9e:c8:c6:cd:9c:10:b5:40:4a:a4:4b:
7f:3e:4e:ad:d7:12:85:8e:85:d1:35:5c:b5:2a:a4:60:1d:cc:
f8:6c:52:ee:5c:03:a2:b3:77:6c:bc:44:54:14:47:53:95:2f:
24:66:68:cf:22:b9:7f:18:7c:a7:67:e2:63:b8:55:d8:79:46:
87:56:a6:d0:66:26:74:05:10:39:9a:cb:c4:81:3f:4a:65:a1:
99:3e:b7:17:b3:82:08:b0:36:8b:cd:ed:7f:62:36:81:34:01:
46:fc:31:4c:86:e7:59:bf:c4:46:5f:8a:21:21:7e:35:2a:6b:
a0:0c:9a:17:76:fb:02:61:04:c0:c0:d0:c8:f4:cb:56:ff:8e:
26:15:49:1a:83:a4:61:de:72:0e:7e:b6:4d:97:39:e8:a0:44:
fe:7e:28:16:b3:6b:e4:97:7e:33:fb:09:6a:63:33:71:85:00:
f8:ca:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:07 2025 by rpki-client