Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: j//EJ1he2O0STLXJVYhIIe+yax04YBQnVKY8OotaqpA=
Subject key identifier: 41:08:6C:7B:FC:65:2B:DE:F2:3F:0A:D7:08:CD:DD:4C:9B:AC:C4:32
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 01964B588E300FCB78677D80EDA9F1458016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 148B
Signing time: Sat 19 Apr 2025 00:00:16 +0000
Manifest this update: Sat 19 Apr 2025 00:00:16 +0000
Manifest next update: Sun 20 Apr 2025 00:00:16 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: u1TSOCGfRct9irsZod3lao55Uk85CxtpU7Gx715l89c=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:8e:30:0f:cb:78:67:7d:80:ed:a9:f1:45:80:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Apr 19 00:00:16 2025 GMT
Not After : Apr 20 00:00:16 2025 GMT
Subject: CN=41086c7bfc652bdef23f0ad708cddd4c9bacc432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:8b:63:d0:2e:da:9f:c0:29:64:f3:98:1a:
cd:d3:19:e8:dc:3c:32:7c:89:07:f9:15:16:35:c8:
f7:9e:f9:f1:04:06:9a:8d:ba:fa:95:1a:6f:bb:2d:
26:ba:db:36:26:2a:c3:88:02:45:9b:3e:13:bf:b6:
e4:1c:2b:ba:1f:e4:89:79:cc:a9:9e:a1:ce:22:39:
f6:33:0b:92:43:27:c5:66:35:15:a7:df:18:16:d7:
f8:dd:85:6f:f5:11:a8:77:e2:a9:87:04:0a:3b:f9:
15:88:d9:ac:0f:e8:52:85:d3:2a:06:84:a3:6b:0d:
bc:4b:a7:94:2d:73:19:23:c5:6c:9b:06:31:55:25:
8e:04:1f:05:5f:15:f7:01:dd:a6:39:bc:90:f8:e2:
ae:fa:dc:f7:a7:31:0e:c2:99:62:24:3a:7a:c0:ac:
16:45:14:e1:3d:08:63:32:7d:79:35:e4:fc:5b:c2:
b9:05:10:3f:65:e8:76:00:59:19:92:fb:4c:28:6f:
c3:d2:1e:19:73:12:f3:a0:82:82:52:3a:7c:60:86:
3b:17:fa:2d:c7:e0:0f:29:e9:6d:da:f9:9f:a9:fd:
b6:df:da:31:2b:36:6f:22:32:44:d0:ea:26:58:ad:
7d:d8:c2:6e:f2:2a:2f:5b:41:39:c2:f3:25:72:6a:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:08:6C:7B:FC:65:2B:DE:F2:3F:0A:D7:08:CD:DD:4C:9B:AC:C4:32
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:00:72:bd:6c:fe:61:8b:b3:af:04:88:8f:4b:6a:0a:51:64:
d9:c9:a0:48:b6:2b:84:a8:a6:8a:71:bf:0e:61:43:83:2a:68:
4b:ed:5f:93:a2:ec:46:f2:c5:fe:67:11:cf:55:ac:db:13:a6:
39:20:02:b3:18:0d:63:f8:47:a8:b7:86:7a:98:df:8a:46:8d:
76:3b:8b:fd:b3:d0:61:53:4d:e3:f3:1e:87:44:05:f2:94:50:
1b:3a:97:a0:13:71:a4:b4:92:e8:18:d8:0b:57:e0:8f:ec:ce:
2f:1e:40:4b:bd:da:2e:c5:a1:f8:4b:4d:0b:c4:ea:51:88:9f:
8b:25:d2:06:e5:5d:83:30:2c:e7:49:5b:a9:41:a5:d9:3e:b4:
58:07:0d:f7:f7:95:8e:f9:12:9f:d3:79:3f:70:2f:b6:f4:d7:
6d:9b:db:32:27:d4:0c:b7:0a:d7:ee:95:40:75:e1:29:ab:54:
38:0c:7a:4b:b7:c6:34:cd:48:41:1f:12:d0:43:3b:56:29:fa:
ab:e6:10:f2:23:cf:b6:9b:b7:f2:d0:9f:88:77:bf:7e:7c:b8:
d4:49:2c:59:3e:f1:94:93:9b:d0:b2:f7:6c:00:f5:65:a6:c9:
70:29:ea:7e:58:15:b7:77:99:6d:8e:35:7a:0e:95:c7:1e:97:
52:8c:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:53 2025 by rpki-client