Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier: XtGKQmQg+XTGtu2FuCvAeUd6GQbkRz7zvPnT13ul1ic=
Subject key identifier: BE:15:86:BF:46:06:82:64:C3:6E:E2:B0:B7:18:BD:CB:9A:3A:61:00
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 01965793D497FB49F8ECE30A893C86119B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number: 05E3
Signing time: Mon 21 Apr 2025 09:00:28 +0000
Manifest this update: Mon 21 Apr 2025 09:00:28 +0000
Manifest next update: Tue 22 Apr 2025 09:00:28 +0000
Files and hashes: 1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=)
2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: wqyMvQUJPb/H7Kz1k6TcCgUiNF7D0CtGV8B2wHnLShk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:d4:97:fb:49:f8:ec:e3:0a:89:3c:86:11:9b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Apr 21 09:00:28 2025 GMT
Not After : Apr 22 09:00:28 2025 GMT
Subject: CN=be1586bf46068264c36ee2b0b718bdcb9a3a6100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:97:29:8b:4f:e8:60:23:01:fe:ba:d7:a9:
0e:9e:d8:6d:e3:f3:76:29:44:32:b6:55:0a:19:f5:
42:be:eb:96:ea:b5:be:39:c7:98:c4:4a:80:00:ac:
5b:eb:b2:65:3f:ef:40:8c:59:84:07:66:41:97:f6:
57:d4:ef:01:22:d5:19:50:cc:f8:6c:76:53:44:bd:
09:bb:d9:5d:d0:76:3c:44:f6:5d:50:f8:54:59:d7:
e3:3d:d2:9a:73:97:8e:c4:67:ad:d6:cd:ae:d2:b6:
5d:ad:96:19:10:58:b8:37:c6:5c:8e:a8:84:c6:e3:
13:c3:8e:23:70:8a:f4:31:fe:b8:9e:0e:42:8b:27:
5e:4f:9d:df:f9:c9:27:c4:9d:f5:fc:4b:f3:ee:e4:
35:f8:db:1d:a1:56:63:02:f4:c7:f3:02:ee:18:d2:
ea:23:80:a2:2a:f1:f5:4a:4f:57:53:4e:71:c0:ef:
bb:7c:a6:e7:93:5c:d2:b6:50:aa:7d:23:33:ee:e1:
64:ea:4d:2d:46:e1:1d:40:83:31:d2:da:19:9e:17:
53:8a:13:ab:ac:2e:78:8d:d4:b8:0c:95:04:31:7a:
e8:3f:7a:5c:72:2d:31:67:8a:1b:ba:47:5f:5b:87:
04:be:b8:68:ff:bf:88:6f:9a:e5:35:7e:bd:44:5a:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:86:BF:46:06:82:64:C3:6E:E2:B0:B7:18:BD:CB:9A:3A:61:00
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5f:13:7e:8b:bb:72:fb:a6:49:f3:e1:ab:20:72:1b:14:f3:
74:99:17:54:2f:a0:c8:1a:c0:a2:ac:28:b1:bf:40:cb:f9:44:
cf:bf:58:79:76:d1:47:13:c3:0f:db:90:d5:e2:21:d8:e4:62:
90:20:0f:de:6c:e7:77:5c:ea:67:1d:ba:82:a9:20:a0:8c:0d:
c9:3e:b7:77:90:82:f2:12:72:dd:c3:18:0c:a0:05:56:6b:3d:
da:30:46:ab:a1:aa:f9:2b:f5:5e:64:fa:2e:12:2a:ea:81:61:
b3:55:ca:09:a2:23:09:8b:8a:23:74:2c:5c:3e:97:00:8a:74:
d5:f8:26:56:95:7a:ee:d9:5b:3b:15:1f:ae:ca:d4:7f:69:19:
42:34:df:ff:f8:47:26:09:93:47:f7:c2:d4:86:55:61:1f:f8:
7b:7c:b2:67:45:38:13:b1:81:9d:a4:bc:69:e5:20:53:c4:c9:
d8:82:ac:87:13:30:09:29:ea:9e:72:e6:57:ec:09:df:10:76:
07:f5:64:fb:d9:83:f3:c6:3d:f6:01:04:88:60:17:fb:22:ed:
32:f3:03:7f:93:1e:e4:b7:8b:c4:fd:29:b4:06:62:d0:d0:91:
6a:ec:45:52:c6:22:85:5a:3f:82:bb:c9:b7:33:b6:72:6e:04:
94:5a:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:49 2025 by rpki-client