Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File: Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier: kekIOwvTGmPmfZmrOWqKLE+vl6b4TO7NNBDRbjkbYbI=
Subject key identifier: 60:BD:4D:F0:34:18:B6:ED:22:28:71:A3:41:9B:47:D2:AE:BA:E4:B1
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 019658A69A22F3EDA87CE2E8EB1B040E3906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number: 0518
Signing time: Mon 21 Apr 2025 14:00:35 +0000
Manifest this update: Mon 21 Apr 2025 14:00:35 +0000
Manifest next update: Tue 22 Apr 2025 14:00:35 +0000
Files and hashes: 1: E1AA5wsyyXbus7X0Ft2PunWAAq0.roa (hash: 04bplHphn9AKJ942980VFz6Kft0zjBNhkRGsxlvrJbg=)
2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: BqeHMJfKTuFIPdT3IQKzU93s7XOokltdpQJt1zavhsA=)
3: anOrtlhwnnmjPAi8_6BJOHZxlL4.roa (hash: YCZfQBw4Fjx9AZOlBUf0daMhEFakgdsLR0V2NRN6new=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:9a:22:f3:ed:a8:7c:e2:e8:eb:1b:04:0e:39:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Apr 21 14:00:35 2025 GMT
Not After : Apr 22 14:00:35 2025 GMT
Subject: CN=60bd4df03418b6ed222871a3419b47d2aebae4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:62:8b:5b:23:e9:47:63:a7:7c:9e:5e:11:
c4:1b:0d:aa:c3:fa:e1:65:0a:f7:50:45:09:f2:c8:
15:2d:1c:14:12:65:a3:4f:b2:0e:24:c4:3e:a0:fd:
f6:04:8b:7c:31:2c:e5:01:41:66:04:25:56:27:7a:
9b:39:5d:77:da:6e:54:74:52:7d:90:5e:3b:ff:e9:
1c:d7:d2:f2:24:83:ff:4f:99:03:4a:e2:d9:6a:b7:
a6:69:11:c3:97:61:6a:37:c9:c2:1b:0d:c4:c1:a0:
a0:79:06:48:46:1a:55:c7:22:0b:c3:c4:1a:1f:33:
8e:7f:b1:d0:90:0b:96:34:dd:2b:ca:45:29:f7:cb:
f0:51:c4:c5:62:53:d8:70:fa:9e:89:92:80:8f:4f:
cc:c3:ce:96:0e:b9:4b:03:7d:5e:50:a9:f7:93:20:
42:41:6c:c8:8a:b5:6d:46:32:a7:63:02:6b:af:b7:
36:3d:73:57:68:65:fd:73:34:79:b5:ce:ab:39:09:
eb:7f:a8:f1:5a:8a:3f:c2:99:42:ff:21:c1:6d:f1:
7d:46:cd:d1:a3:d4:8b:86:0e:bd:c6:6d:6a:01:3c:
d2:5e:40:83:4e:71:40:8d:a1:c8:23:f3:20:f4:63:
44:e3:0c:ea:3f:5f:3d:98:66:0d:cf:77:00:6e:27:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BD:4D:F0:34:18:B6:ED:22:28:71:A3:41:9B:47:D2:AE:BA:E4:B1
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:bb:c0:0e:46:05:aa:e8:ef:98:28:55:58:34:db:87:d2:
89:a0:16:36:32:80:9d:3a:4e:95:3c:18:13:2d:82:42:3d:30:
1f:b4:33:b6:da:ce:40:ba:f8:60:9e:a5:32:41:a1:cd:fc:1d:
4c:05:8f:14:c8:ac:c9:15:11:e0:a0:6e:46:96:ef:c4:53:f2:
9b:c0:a6:3d:78:7b:ec:36:0e:85:bc:74:35:ce:14:c7:77:e6:
1a:09:b7:56:0e:5a:61:c4:b9:f7:bd:c7:69:b7:e1:60:63:82:
24:40:37:3d:24:cc:c8:bd:3a:7b:5d:bb:e5:8d:0c:a4:e4:87:
08:e5:f0:b9:80:b1:26:f0:77:18:0a:2e:09:14:bb:8e:9b:88:
6a:62:57:7c:10:7b:ca:eb:66:f3:cd:5f:3b:b8:26:fb:16:83:
f2:f6:1f:a9:fb:2c:6f:69:67:37:ef:5f:2f:6c:50:3f:78:f3:
eb:d2:af:75:7f:5d:68:de:53:08:b6:3b:98:ad:9c:b9:bd:2d:
4d:86:d1:58:3e:32:24:b5:9d:f2:0d:11:db:2a:51:8a:71:04:
d8:5e:39:f2:6a:3f:3f:81:fd:85:51:a6:58:ba:e2:4d:36:e5:
14:17:94:65:ad:d8:db:1c:48:31:d3:a2:eb:05:1f:c4:2c:eb:
70:ec:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:19:10 2025 by rpki-client