Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: 7/GWPJeGhT5W75l1yxGorVvdV9Dth88bKeftUdQ8wPw=
Subject key identifier: 1E:56:09:B3:B6:54:39:3E:E4:FB:90:17:87:F1:9A:85:D7:8C:52:C1
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0196146B44862F5851E8D58D365E60909244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1110
Signing time: Tue 08 Apr 2025 08:01:36 +0000
Manifest this update: Tue 08 Apr 2025 08:01:36 +0000
Manifest next update: Wed 09 Apr 2025 08:01:36 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: ce8cpPIEmtph/rnWGD9o7KNi4jih76s+S0d4LbUYMS8=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:44:86:2f:58:51:e8:d5:8d:36:5e:60:90:92:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Apr 8 08:01:36 2025 GMT
Not After : Apr 9 08:01:36 2025 GMT
Subject: CN=1e5609b3b654393ee4fb901787f19a85d78c52c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:76:91:2f:1f:d0:bb:5b:bc:ed:7b:fe:f7:
90:48:3b:a3:08:6a:0d:5e:03:15:c0:96:18:f6:d2:
22:e0:e5:f1:22:da:42:85:c9:43:3b:a0:75:a4:10:
02:0f:a8:9c:cc:f2:2a:93:c8:54:e5:c2:04:b3:cd:
e1:88:11:50:a0:0a:3c:ad:ad:67:f0:e7:de:53:53:
ee:67:00:51:93:a3:f0:2a:6b:30:63:38:68:2c:8b:
59:c7:b9:d4:b6:5e:05:82:a3:eb:e5:42:67:9a:c0:
69:82:ba:b3:f2:f5:6f:e1:65:5f:5e:8a:4a:fb:3b:
03:0c:c5:93:9c:4a:25:6c:38:6b:cc:1d:8b:ae:0e:
77:26:98:0a:d4:e0:ad:4b:c0:2f:ea:9e:7f:64:9c:
aa:aa:01:3f:20:69:fc:e3:dc:92:ff:11:1e:5a:a9:
fc:7c:9e:90:f8:f0:7e:28:3b:fc:f1:8f:5c:af:73:
92:46:cf:3c:81:6f:d1:92:8f:ec:a3:20:21:36:5c:
26:14:0e:5e:58:90:3f:31:57:ba:15:56:96:de:7c:
c0:a7:0e:ec:72:43:46:6f:9e:c5:8e:a8:36:72:5c:
20:c4:fb:8c:03:2f:fa:1c:9d:f3:64:5a:af:47:9b:
18:d1:a1:30:a2:74:fc:30:a2:cf:82:78:46:b7:e2:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:09:B3:B6:54:39:3E:E4:FB:90:17:87:F1:9A:85:D7:8C:52:C1
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:72:b6:3e:af:5a:29:18:ff:9e:d0:a1:25:b3:fa:fb:9f:0c:
b9:c1:29:50:8f:ff:37:78:f3:6d:a3:7d:81:2a:13:35:27:b8:
2e:18:cc:3b:e7:3d:cb:5c:81:ce:93:5d:90:c2:b7:5f:e3:3b:
0a:80:b7:26:a1:b0:86:25:65:d0:45:9f:49:e6:3a:cf:5c:be:
4f:55:b5:9d:37:51:d5:0c:b0:0d:80:24:73:19:8a:2b:6c:fd:
43:f3:eb:af:87:e5:2e:cd:44:21:01:3f:53:55:30:2e:7e:3f:
29:de:53:14:5e:c9:2d:b5:a0:91:0b:55:1e:9d:9c:5e:ad:7f:
39:ef:67:b5:26:dc:69:18:c2:df:ac:d7:2b:20:72:b1:a9:86:
61:93:20:73:3b:7d:ea:db:79:00:34:c7:50:1f:d7:43:07:56:
11:11:58:e6:68:9f:fd:b7:63:21:8b:a3:bf:e1:77:63:56:78:
a6:94:d6:dd:d5:e6:f0:6e:af:61:d9:78:14:f1:ef:b3:48:51:
4c:b3:d1:9b:15:69:7b:fc:6e:40:b9:5e:b4:c6:7f:c4:f4:f4:
14:ec:78:d6:04:39:d2:d2:7f:ac:88:d6:40:e5:86:6a:43:1b:
77:ae:d7:a5:37:6e:83:71:ec:d9:1a:8c:12:e3:71:8e:4f:27:
e0:7c:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:37:10 2025 by rpki-client