Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier: Z1snFzwr2iGVMYsZKDN4NzGAg5Tenc42D7GLAjifq0A=
Subject key identifier: 07:FC:39:B7:4A:8D:14:91:0C:D7:50:F2:11:81:D4:E6:99:4C:45:AA
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 019659F0393ECC5B48DD1FEEFD9B6573C17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number: 0C5D
Signing time: Mon 21 Apr 2025 20:00:37 +0000
Manifest this update: Mon 21 Apr 2025 20:00:37 +0000
Manifest next update: Tue 22 Apr 2025 20:00:37 +0000
Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: yJVpQg35Wx5FK0NW+kfT995it2F8xTyoy2Rp7T1snM4=)
2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:39:3e:cc:5b:48:dd:1f:ee:fd:9b:65:73:c1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Apr 21 20:00:37 2025 GMT
Not After : Apr 22 20:00:37 2025 GMT
Subject: CN=07fc39b74a8d14910cd750f21181d4e6994c45aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:75:21:c6:1d:a2:b3:0d:df:20:47:c0:a3:
f8:ee:bb:da:80:04:de:41:5a:85:ff:ee:79:a0:82:
5e:9c:c4:3c:f9:50:fc:21:96:43:11:e3:ba:81:d6:
d1:1e:3d:ab:cc:03:15:b9:d3:56:4b:56:47:65:31:
57:92:5d:f9:40:cd:de:53:58:68:5a:6f:35:c7:1e:
5a:f8:29:9d:25:f5:40:f7:10:c2:13:57:94:ad:b0:
8a:54:36:c1:8d:e0:e9:24:36:00:f8:1d:15:eb:70:
2d:52:9c:00:cd:3d:6b:36:85:46:24:19:19:1f:71:
d2:81:ab:40:c7:ff:31:33:30:be:09:88:90:b8:99:
4c:0f:c2:1c:48:26:1e:82:b3:f9:8d:02:78:de:67:
fe:1d:26:c9:a5:03:9d:a1:97:59:93:09:2b:4f:c0:
c7:59:3d:54:fe:1f:9f:b1:d1:99:b2:39:59:2b:b0:
12:d5:b0:69:d6:23:0f:06:86:87:ff:4c:32:9f:98:
85:99:4a:3c:ba:d8:76:e5:c7:35:aa:bd:24:c4:db:
58:5d:94:ae:ab:d2:5a:d6:dc:c2:77:98:dd:95:8d:
69:50:70:c9:8b:e2:06:d9:23:f2:3a:36:a6:49:68:
cd:47:df:29:fe:eb:75:37:c5:62:d5:92:b1:70:e2:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:39:B7:4A:8D:14:91:0C:D7:50:F2:11:81:D4:E6:99:4C:45:AA
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3a:44:a0:86:e4:c3:c7:2d:3e:92:e9:35:65:57:64:83:c8:
ae:15:2f:ca:4f:b9:24:dc:24:3e:0d:79:9a:db:d9:41:b9:79:
92:32:7c:d2:39:bb:2f:ec:af:05:09:01:09:2e:b7:b8:c9:ac:
04:0e:a8:35:7e:96:98:5d:72:0f:74:f4:34:8a:6c:04:69:32:
95:82:bc:5e:2f:b5:19:72:70:b3:21:b7:1e:48:47:2e:02:70:
ff:89:ac:67:55:a4:73:29:6a:fe:35:9d:33:88:04:54:22:b4:
1e:32:a0:12:1a:1e:6b:b8:2f:09:93:21:cd:24:c0:1a:49:fb:
a4:55:db:ac:b5:c7:77:8d:e4:c7:cc:e0:67:6d:13:2f:55:28:
95:9c:d2:79:56:d9:ac:5f:03:e3:99:e5:3f:c0:2f:64:87:71:
6d:8d:69:24:cc:34:b9:6d:26:dd:51:b1:2d:ee:11:01:d2:55:
a7:f9:63:f9:4c:d3:97:3e:d1:c5:38:24:ad:63:00:ec:6c:90:
20:df:f4:c3:9d:9f:62:f1:b6:b1:db:15:38:30:ae:fa:0e:1d:
36:fd:fb:fa:b3:56:67:f7:78:5c:72:d1:c2:d7:a4:d5:b5:6f:
64:64:2d:52:71:6c:43:ab:19:8b:04:6b:c4:a3:09:d9:69:ea:
7c:b1:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:37 2025 by rpki-client