Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
File: ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json)
Hash identifier: awqZuY6xlQ/4mNAEm5XHns6MTnU+3tw7Nu4T++DKxrs=
Subject key identifier: 63:43:29:C4:F8:C3:DC:0C:16:C1:9F:EB:86:69:74:72:F7:F6:09:41
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial: 01965500ACEDB3C06450196805F706AA905E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
Manifest number: 0A30
Signing time: Sun 20 Apr 2025 21:00:29 +0000
Manifest this update: Sun 20 Apr 2025 21:00:29 +0000
Manifest next update: Mon 21 Apr 2025 21:00:29 +0000
Files and hashes: 1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=)
2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: v0a39dlUWTWsKzUd8/bKh2YnHm5+RMIIY3ud6kMFJuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ac:ed:b3:c0:64:50:19:68:05:f7:06:aa:90:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Validity
Not Before: Apr 20 21:00:29 2025 GMT
Not After : Apr 21 21:00:29 2025 GMT
Subject: CN=634329c4f8c3dc0c16c19feb86697472f7f60941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:cc:b9:41:a4:4a:a9:04:5f:74:59:6e:27:
10:9f:bc:f9:41:c4:b3:c1:d0:8d:84:6f:d3:6d:75:
97:eb:19:57:bc:82:f9:79:54:95:c2:ad:cf:fd:0f:
92:c2:53:78:e9:4b:4d:e1:dc:25:35:e3:aa:82:68:
ce:d5:ab:88:e4:3e:c8:64:a2:20:b0:4b:ba:a0:70:
0a:13:7d:97:5d:d5:90:09:81:e8:0b:91:8a:8b:ec:
e3:2c:9f:6a:44:94:4b:66:e7:0f:a0:91:15:b7:3b:
11:a9:c8:71:14:91:4c:3b:1b:49:f2:36:08:d9:58:
21:e4:ea:3e:14:df:d7:e5:d3:ba:d1:d9:9c:bf:a6:
ea:a2:3b:1f:48:bb:bc:24:2d:57:95:1c:33:51:21:
8a:cf:13:35:83:e6:a9:d5:9f:1a:b0:78:8a:d4:1e:
ff:c1:f6:73:cc:37:83:d8:c4:9d:12:24:4c:93:42:
61:51:fe:ce:fe:15:d2:0d:00:2e:03:d6:4e:55:91:
ce:d3:1c:2c:c7:bd:40:f3:03:86:5d:7b:48:a8:4b:
ab:24:4a:98:aa:45:4e:54:fe:10:54:cb:5f:e4:27:
78:71:00:56:05:64:07:ef:08:6e:75:98:a9:9f:f8:
40:8c:9e:df:aa:05:0c:17:ef:51:aa:4a:e4:6a:8b:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:43:29:C4:F8:C3:DC:0C:16:C1:9F:EB:86:69:74:72:F7:F6:09:41
X509v3 Authority Key Identifier:
keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:e4:2a:ed:9e:7b:bf:15:19:5b:93:e3:63:f9:95:1b:62:
87:ea:16:53:b0:53:7e:43:e9:ff:54:fb:a8:0d:29:e5:2d:2d:
19:7d:df:64:1b:94:14:47:82:4b:9b:f9:30:29:01:0c:c1:a4:
87:28:38:84:14:c6:c0:51:e3:7b:30:ef:1f:13:8c:67:5c:1d:
de:f2:68:ac:b7:e8:08:6b:a3:a6:66:d2:b5:64:53:71:d1:a2:
31:5c:cd:b6:a9:18:8e:de:34:10:36:9f:85:7c:ca:fb:81:86:
9f:f2:e8:95:3f:aa:86:b5:4c:93:a9:6b:4a:31:fc:2e:79:26:
30:2e:bc:aa:68:67:b1:c4:46:12:6c:46:20:c4:48:c2:17:ec:
37:c2:7c:32:d7:a8:6b:d0:8d:a7:11:33:87:70:dc:c9:49:67:
2e:58:e5:de:c5:74:e2:2a:5a:3d:ca:f7:62:71:c3:da:70:b4:
5a:83:58:44:c3:58:08:1d:64:1d:2e:b3:ba:27:8c:57:74:41:
82:86:2a:c5:e8:a0:b5:d9:a0:8d:1a:49:28:7f:fb:da:b4:f8:
73:5d:ef:94:05:8e:fe:a2:47:55:d7:e3:ca:39:92:19:b0:f4:
3a:64:6d:5e:9f:63:ab:16:27:41:01:b9:1e:0a:08:bd:35:77:
15:aa:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:32:55 2025 by rpki-client