Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: tyrHJeAhxoVIxCKUYKP8Z7gBhyk8Z/fp07WN8m9fjnY=
Subject key identifier: F6:B6:45:5F:0D:77:1E:F6:F7:A6:04:CF:0C:BB:5F:43:89:47:48:0B
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 0196372D15B11B83A687443A7C91D71F1CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 14EE
Signing time: Tue 15 Apr 2025 02:00:23 +0000
Manifest this update: Tue 15 Apr 2025 02:00:23 +0000
Manifest next update: Wed 16 Apr 2025 02:00:23 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: TuzHnletrUWtzqTk/W/6q3mME4OUpoFETVD6Jq+j124=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:2d:15:b1:1b:83:a6:87:44:3a:7c:91:d7:1f:1c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Apr 15 02:00:23 2025 GMT
Not After : Apr 16 02:00:23 2025 GMT
Subject: CN=f6b6455f0d771ef6f7a604cf0cbb5f438947480b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:55:32:02:20:e3:4d:e1:30:08:0a:85:1b:
d8:bf:c1:c2:da:69:e0:4a:24:5c:06:f1:70:80:c0:
2d:38:fa:be:4e:a6:74:ae:a7:5b:c0:f5:ea:e3:2a:
35:d4:62:69:ee:62:a5:e9:3a:2d:23:79:bf:6d:16:
0e:8f:b5:a5:19:8e:a6:bb:16:99:a6:4c:ed:d0:a9:
2e:49:b4:f4:f6:4f:78:02:4a:08:f6:f2:37:24:5a:
0f:87:37:f0:de:81:f5:4e:82:03:9b:a8:4e:07:31:
e9:0f:04:b0:f0:62:e8:9c:35:4d:16:1b:ca:d0:cb:
6c:d9:15:86:9f:4c:81:4f:f4:2b:24:95:0a:88:5a:
e5:10:97:92:9f:9f:c0:90:cb:9a:03:12:09:34:c6:
3d:33:b8:69:93:0c:9a:f9:86:7c:06:58:5f:52:01:
96:11:30:14:e3:5b:49:67:f9:06:ab:e7:53:86:fe:
01:58:40:18:71:90:47:df:56:5a:1f:7d:fc:f5:ae:
81:b5:9e:89:25:27:1d:69:85:02:26:04:00:b8:15:
59:13:f7:13:b9:41:5a:72:9f:84:dc:c3:63:65:7c:
ac:1b:ff:bf:df:fb:d6:93:8f:7e:f5:38:d1:82:ac:
52:75:74:25:25:71:82:be:83:a3:20:b8:1c:eb:43:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B6:45:5F:0D:77:1E:F6:F7:A6:04:CF:0C:BB:5F:43:89:47:48:0B
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:26:24:62:c8:b1:bd:ff:a9:2d:6f:fa:50:a8:1d:31:f0:
10:7c:fe:2f:b6:c7:b6:d1:74:f1:db:0a:43:3c:2d:92:08:3e:
18:40:94:09:2f:d7:cf:53:78:58:87:64:2e:32:89:d3:b2:9a:
4e:70:f9:84:4d:00:97:f9:1d:33:ad:69:1a:cf:39:76:da:88:
af:3c:8a:1e:a4:ed:57:25:a4:a4:36:6b:0f:77:f6:fe:ef:9d:
35:d8:6e:20:28:07:07:56:29:1c:52:be:b2:81:e1:e6:8a:c4:
ef:90:9d:d7:b5:7e:20:6c:c1:c8:f5:90:9c:82:2c:1f:42:c4:
c2:04:d1:b5:5c:e6:cc:17:f3:9f:4e:de:e5:4c:16:b5:d7:1c:
29:c1:12:42:e3:49:eb:44:d6:74:73:df:a3:b1:f7:4f:d0:4e:
a7:a4:fd:5f:4c:dd:68:7d:db:40:2f:c7:ae:03:c2:2c:1f:c4:
97:39:1d:f5:5a:94:91:2e:16:49:c2:ef:de:4f:e4:47:75:06:
36:64:64:8c:22:2a:80:dd:b9:36:2e:d0:3f:ea:73:3f:0b:6e:
7a:45:68:59:59:0f:cd:31:1d:a4:ab:91:fd:01:7a:c6:c7:5d:
3f:f5:23:81:85:7c:88:8e:c7:a8:e2:7c:ac:e8:2d:49:de:f6:
cd:59:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:20:49 2025 by rpki-client