Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: 0Rnqwkwteqwua1sUDJ5kLsjbg2nWTrQahEMaCNIZ/Cw=
Subject key identifier: BB:1D:56:C1:55:7C:29:18:DA:78:F1:FA:C5:60:BF:49:B4:D0:90:4E
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 01964F6C5FFCA868C70D74113B42AF9AB13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 1123
Signing time: Sat 19 Apr 2025 19:00:24 +0000
Manifest this update: Sat 19 Apr 2025 19:00:24 +0000
Manifest next update: Sun 20 Apr 2025 19:00:24 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: Y+/OwypPWazH1XBkL4BMaIGUz/YEPJte14NGKDo0Z6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:5f:fc:a8:68:c7:0d:74:11:3b:42:af:9a:b1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Apr 19 19:00:24 2025 GMT
Not After : Apr 20 19:00:24 2025 GMT
Subject: CN=bb1d56c1557c2918da78f1fac560bf49b4d0904e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:af:fe:51:9f:e1:c4:93:b6:d2:9b:ec:c7:
21:fc:49:0d:61:4b:98:83:92:c7:68:80:9a:3d:27:
60:c3:00:4b:9a:54:55:88:be:cb:93:d6:8f:5d:bd:
3f:e4:a3:6e:a1:e0:a6:98:33:2c:5b:ad:6b:c0:38:
b3:5c:be:a0:da:ba:75:9a:00:36:94:4f:77:59:10:
20:92:c8:5d:48:61:0d:00:23:6a:09:fe:0a:11:d4:
79:26:3a:5e:e6:50:80:83:1c:79:55:93:78:7c:99:
5a:09:a5:f7:36:85:3e:78:06:9c:d5:73:8e:c9:c5:
87:6b:bb:d7:26:88:79:27:96:66:3a:6e:e4:dd:97:
38:83:34:26:d1:0e:4a:f7:99:ca:be:0d:19:5c:35:
45:b3:29:86:8d:cf:1c:4c:6e:d7:ab:43:a4:7d:4b:
3c:68:da:7b:ac:7b:e0:9c:bd:3b:f0:ec:ff:ca:c3:
c4:4a:5d:53:d6:b3:8f:5b:0c:88:17:4a:b4:cb:97:
37:a8:15:82:e6:cb:a5:46:e6:57:62:b2:99:e5:73:
3c:61:6d:20:78:a4:ea:7c:c7:b5:ba:b8:68:5d:5d:
99:3c:9b:36:bf:07:85:cc:9c:17:1a:57:b9:28:9a:
b6:13:b8:bf:e0:c9:f8:81:5c:71:a9:e0:0f:21:c8:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:56:C1:55:7C:29:18:DA:78:F1:FA:C5:60:BF:49:B4:D0:90:4E
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:98:e3:21:8a:76:c4:dc:01:f5:ce:83:2a:85:35:d3:1b:dc:
06:8b:3f:e1:2e:f9:f5:10:a5:3d:06:55:35:5f:f4:7e:f5:a6:
cd:a7:d9:e9:e6:a0:5b:06:56:f1:e1:0b:b4:ee:fd:44:ad:e5:
a7:e7:2b:86:99:59:ee:88:be:c8:ba:fe:43:a2:07:73:82:7d:
34:cc:c4:30:8a:0e:f9:d0:0f:37:86:46:e4:f9:bd:f8:03:ef:
1f:95:c4:0b:af:91:66:f2:c5:12:34:e9:3c:fb:e9:d3:09:fb:
5e:bc:ee:95:ed:b1:98:a1:3e:44:33:53:68:80:b4:78:e8:5e:
15:4d:b2:a6:c4:de:17:97:bf:05:fc:46:1d:aa:04:dd:b3:5d:
3e:2a:a9:f2:0e:51:87:8b:b4:2e:e9:6c:df:c7:6e:a7:4d:8a:
fa:9b:33:16:c6:13:7e:01:7f:78:63:1a:86:fe:f3:80:29:7a:
98:ab:91:93:21:45:92:ad:61:4d:1f:2c:c0:4d:fd:09:d1:28:
01:99:d8:ee:56:33:8a:03:34:54:97:9e:28:ea:1f:f0:a0:72:
70:b8:d1:c7:a4:a5:dc:01:30:bb:c6:ce:6c:85:09:f0:28:d4:
93:1d:4d:5d:e2:c3:52:7c:8e:75:e9:96:b2:2c:10:8b:8e:f9:
b7:55:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:43 2025 by rpki-client