Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: ugMLOldU40NQxroe/xD6kPiiZ8EdWGehh5Ll4Li4eOE=
Subject key identifier: B4:19:22:3C:B2:20:82:31:75:6B:69:3D:A5:B6:EA:50:8B:01:DC:46
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 01958F9834C37C685D6BB427198180366D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 13FF
Signing time: Thu 13 Mar 2025 13:01:11 +0000
Manifest this update: Thu 13 Mar 2025 13:01:11 +0000
Manifest next update: Fri 14 Mar 2025 13:01:11 +0000
Files and hashes: 1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: mIpBqp3yvh04un9sH7XVVJ2d+lhZYWqTcB0cn2kwYk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:34:c3:7c:68:5d:6b:b4:27:19:81:80:36:6d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: Mar 13 13:01:11 2025 GMT
Not After : Mar 14 13:01:11 2025 GMT
Subject: CN=b419223cb2208231756b693da5b6ea508b01dc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:e9:cd:41:fc:07:12:aa:09:b9:98:44:11:
88:75:4e:f5:37:bb:62:b5:0e:83:02:af:b1:ce:e4:
63:fb:3d:72:49:3c:32:bf:2b:32:ab:97:f3:b5:89:
ce:bb:f2:5f:0f:c3:0c:10:12:bf:38:bf:dc:12:fa:
dc:b2:a1:e6:b2:3a:50:bd:ea:75:16:89:b8:60:8d:
26:2a:22:02:77:90:81:88:b2:0a:ea:8b:e0:08:00:
c6:dd:23:81:9a:90:bb:c6:4a:18:63:d0:14:6a:e8:
19:fc:83:a8:af:11:da:85:b1:05:52:d9:45:9b:5b:
cf:7f:43:69:a2:e9:c1:85:38:78:26:b5:f7:66:ef:
b4:ed:70:1d:2b:43:89:13:78:71:6d:ef:27:42:d7:
3c:3a:8c:23:0e:c8:80:a9:05:be:78:e1:56:bc:54:
bf:91:b0:2e:0b:1c:6f:f9:65:97:6d:7d:bf:9a:ab:
4f:44:2e:7f:df:4b:9b:3d:f7:68:37:a5:0d:c5:2a:
31:b5:e5:94:0d:a9:1f:32:48:a3:72:b4:1f:de:e5:
bf:1b:82:bd:05:7b:aa:12:0c:c8:d5:5f:08:e2:45:
ed:82:51:bc:05:8e:c2:6f:03:c8:45:df:e7:91:07:
85:9d:59:5b:56:37:2d:71:a8:f4:22:d2:82:03:ec:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:19:22:3C:B2:20:82:31:75:6B:69:3D:A5:B6:EA:50:8B:01:DC:46
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:ff:8c:82:e6:8b:f8:d2:6c:f1:2c:2e:f1:83:12:5c:48:
a0:34:63:c6:f0:1d:4a:3e:ca:57:44:e1:ce:a3:43:66:c7:d9:
b5:0d:76:cf:81:3b:04:1c:9f:58:ea:26:a5:c7:8e:3b:58:8a:
bf:5a:f6:6f:ff:8c:d5:58:89:20:21:c0:36:b0:46:df:bf:bd:
56:43:f8:58:de:7d:5f:14:cc:32:11:ed:d5:c7:41:aa:f7:4c:
8f:33:8f:aa:22:80:0a:b5:d3:b4:5a:c8:5f:79:e0:41:79:4c:
ab:30:6e:44:0e:8e:7a:28:b8:6a:b1:d6:3e:71:00:85:49:d5:
b3:ac:d1:cd:83:18:27:b6:1c:26:2f:fb:8a:19:fa:f3:29:6a:
4e:5b:a4:b0:46:c1:5d:4c:0a:7a:95:04:1f:e8:80:55:7d:df:
39:91:03:34:e3:40:c2:ee:fa:da:1c:3c:34:f3:5d:c6:81:4d:
c1:15:f0:ac:87:fe:35:9a:11:8f:cc:35:4f:a4:ae:70:bd:89:
c1:ea:25:11:fd:a0:57:94:fb:52:be:45:85:d0:04:c3:8f:1b:
ca:83:86:92:9f:a5:a1:66:2a:38:45:79:3d:0c:9a:f6:67:ba:
9c:ee:b2:c1:70:1f:93:5c:00:dd:4b:f2:a3:ff:46:b7:98:d8:
76:cf:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:42:05 2025 by rpki-client