Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: OkS9dVTqHXbb/qLNzH5sWwBD+Q7E2DHuPTjDnp6//mE=
Subject key identifier: 79:D9:63:77:0E:7B:91:C3:A5:4A:20:15:A6:79:3F:15:E1:76:68:FD
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019653806BB7AED77ECABA3BF3A6A1727224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 14:00:46 +0000
Manifest this update: Sun 20 Apr 2025 14:00:46 +0000
Manifest next update: Mon 21 Apr 2025 14:00:46 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: jdUGPXdKRcLVjOOktyAPyehKNn+TsrabNHlf/4D1eao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:6b:b7:ae:d7:7e:ca:ba:3b:f3:a6:a1:72:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Apr 20 14:00:46 2025 GMT
Not After : Apr 21 14:00:46 2025 GMT
Subject: CN=79d963770e7b91c3a54a2015a6793f15e17668fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:b1:5f:c3:2b:6f:b7:0d:a4:16:80:3f:39:
6a:d7:4f:46:85:3b:19:78:47:11:0a:75:08:28:6a:
52:4a:e4:30:1e:2c:73:36:dd:8c:cd:7a:11:11:32:
d5:49:6f:4c:d1:25:3d:ab:79:64:38:97:e9:04:64:
72:46:24:89:ed:2f:40:71:55:d1:54:ed:61:18:0a:
ab:2f:fe:03:f5:20:99:af:82:5e:49:58:13:c9:b8:
2b:2a:ef:42:eb:04:8a:22:41:84:c7:e4:72:3f:f1:
ae:2a:5e:ab:bf:05:b5:da:65:78:5f:92:29:75:5b:
bd:ef:f2:f1:03:82:e9:3b:73:ff:dc:d0:c8:2f:a2:
2e:92:fd:41:62:02:94:08:6f:ed:62:e1:37:11:59:
7d:01:e2:cd:f5:b4:0d:50:bc:3b:d5:7a:11:f6:f7:
cb:b3:22:15:8d:cc:ef:3f:97:fe:0e:18:16:97:2f:
59:fd:cd:49:5b:da:4a:1c:f0:6f:2a:6d:cf:c3:bc:
a0:7f:c3:4f:a2:8c:45:b5:67:69:a8:57:48:5c:d0:
15:23:3d:78:1f:49:0a:71:97:63:42:06:e6:ad:1d:
61:7c:a3:ff:bd:0e:e9:98:f7:f0:46:df:12:7f:49:
ca:36:32:c1:4c:4e:68:1d:98:89:6e:c4:80:89:59:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D9:63:77:0E:7B:91:C3:A5:4A:20:15:A6:79:3F:15:E1:76:68:FD
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d8:b6:47:ac:8a:3d:c4:da:35:ee:34:ab:41:f0:a3:be:9c:
6a:1b:74:a9:ac:f0:89:6d:c1:7e:cd:79:c7:68:df:f2:cf:7a:
44:65:c9:6b:b2:eb:1c:5c:93:ab:15:83:ac:71:ef:6d:2c:30:
35:be:4d:b5:4c:d4:e7:d5:0c:1d:3d:3f:6b:3c:70:2f:a0:ad:
63:ea:9b:91:cb:da:3f:98:6b:37:c5:87:fd:77:dc:65:05:a3:
61:ab:76:df:d0:b7:43:ac:23:02:28:6a:96:0e:a9:a7:a8:26:
5f:5d:71:92:56:8c:8a:8b:8c:3f:a1:d4:e6:ea:a2:a9:d3:0e:
ce:2c:e3:3e:a8:e0:d6:83:a3:cd:49:75:cf:94:fa:e0:fd:41:
79:7a:fa:27:7d:6d:80:cf:b0:e9:d0:69:06:4d:64:2c:98:50:
96:29:df:3b:ed:9e:7a:d5:e2:c8:63:eb:52:79:fd:34:2c:ec:
79:b8:b9:aa:fc:75:d9:4f:ce:ed:b9:c2:3f:98:38:58:f3:24:
50:7e:fa:91:a0:13:51:89:e0:79:3b:f0:84:6e:e4:61:ac:f3:
6f:bf:50:46:70:80:c5:ff:5c:f5:95:08:20:a2:60:41:a4:9c:
51:af:e9:e5:32:61:50:93:1a:a4:a5:97:ed:b6:11:c3:4d:2a:
44:7e:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:39 2025 by rpki-client