Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
File: ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json)
Hash identifier: YoIGq78VjhwPVsnaBiPZNRjvoRicMB8zqH06JTriAfc=
Subject key identifier: F5:96:5F:66:BB:77:DC:4A:74:C4:27:0C:FE:95:36:42:B2:F1:D4:02
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial: 01958C296F3104743EF900CAFFA7B0797ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
Manifest number: 09C8
Signing time: Wed 12 Mar 2025 21:01:20 +0000
Manifest this update: Wed 12 Mar 2025 21:01:20 +0000
Manifest next update: Thu 13 Mar 2025 21:01:20 +0000
Files and hashes: 1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=)
2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: ff0fYWj5cWQ1HCcjIGtnyBHHOEHXOrd9aiATS79Quk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:6f:31:04:74:3e:f9:00:ca:ff:a7:b0:79:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Validity
Not Before: Mar 12 21:01:20 2025 GMT
Not After : Mar 13 21:01:20 2025 GMT
Subject: CN=f5965f66bb77dc4a74c4270cfe953642b2f1d402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:65:46:b3:b7:44:ee:6b:3b:eb:96:bb:4b:
91:58:c2:ea:c7:9f:71:29:b3:a8:a4:98:67:bf:41:
d8:18:84:a9:5c:a6:43:8d:15:78:a9:86:9c:15:40:
8b:7d:ec:46:24:b5:e5:e7:b1:eb:0e:ac:6c:07:b7:
13:30:25:f5:68:c3:7d:2a:64:e3:79:75:e6:e6:1f:
93:5d:a6:61:dc:9e:7b:6c:96:1d:26:52:81:2c:bd:
fa:23:39:f3:60:7b:b0:88:b3:40:4d:7d:34:44:26:
f4:c9:06:55:98:33:ef:6e:79:23:f5:aa:02:80:ea:
2c:72:a7:1e:b8:57:36:89:b9:2e:b5:b2:5b:a4:83:
68:00:25:18:d4:25:e5:ca:fa:fb:fe:f1:f4:a5:ab:
6d:69:4a:72:05:7e:e5:28:b1:a7:c7:11:39:c3:e5:
cf:52:12:57:12:96:92:9a:e5:d1:2e:03:8d:15:bc:
74:4e:85:91:eb:63:24:95:64:c9:f9:f7:de:dd:ee:
44:22:ae:85:09:1c:6c:c5:f4:42:4e:9b:28:bd:dc:
b4:06:dd:0b:cc:6b:d4:0a:36:9a:3b:b7:a8:21:85:
f5:29:a6:f2:a2:65:70:03:73:e7:d2:14:fc:58:a2:
ff:92:bf:75:e1:08:d9:b4:6f:b8:f2:44:21:be:94:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:5F:66:BB:77:DC:4A:74:C4:27:0C:FE:95:36:42:B2:F1:D4:02
X509v3 Authority Key Identifier:
keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:dd:d8:53:c3:d9:99:f2:d0:75:3b:f8:13:44:fa:61:53:
9b:59:14:36:40:17:ca:f1:4c:8b:66:38:02:da:5c:0a:8f:99:
30:92:7a:62:8c:1e:d8:3e:38:6f:34:46:f5:e3:33:31:3b:27:
2b:10:46:cf:87:14:34:ae:9b:e9:c1:f9:67:57:4b:d1:3a:7f:
b2:1e:b6:22:af:c5:ec:f4:76:67:e5:1c:89:ae:df:aa:3a:c1:
93:f4:0b:98:80:a7:e5:05:af:b8:45:c8:65:2c:39:ed:71:24:
14:3c:99:ff:43:79:63:f8:56:56:1b:01:be:fc:27:c9:72:70:
f5:1a:e9:81:0c:42:c0:13:0c:c3:fe:84:05:c4:5c:c4:74:97:
91:2a:a7:ed:69:2f:fa:9b:b3:c8:7c:da:ad:52:92:27:12:3b:
b8:c1:d5:68:a4:67:b7:7e:cc:b4:68:ab:c5:6a:ca:d3:fc:07:
16:22:7a:02:48:b7:fe:c0:90:a7:61:83:1b:d4:6e:bc:b5:77:
00:7e:12:b9:40:8b:ea:57:fe:a2:f2:d0:20:67:a1:cb:ab:5c:
e2:1d:32:6b:c7:42:44:3e:7a:72:0e:72:61:b9:40:2f:4b:83:
f3:e1:b7:8b:ca:e4:3a:82:b9:6a:4f:a0:ff:3d:91:27:63:03:
08:20:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:04 2025 by rpki-client