Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: gi5am/Kww06AGBFkNnC5kzVKGpQQANtc9s5k+NLP1NU=
Subject key identifier: 20:1A:1B:E9:B1:E2:F3:73:3E:9E:CA:85:C8:F3:20:AD:AF:97:66:36
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 0196138FE438DB06F612E6C3722DBAEC9B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 096D
Signing time: Tue 08 Apr 2025 04:01:59 +0000
Manifest this update: Tue 08 Apr 2025 04:01:59 +0000
Manifest next update: Wed 09 Apr 2025 04:01:59 +0000
Files and hashes: 1: bcgHeTecNhcHR9QWO6gmvpmmI5c.roa (hash: EV6/wlUYGCbS7xEazmx8eI5Bar/BgAFt51P9o3UlOuQ=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: QgTjiYUyj7qgMOiZFuP1Z40ibaefZt4meIPFvSg0TCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:e4:38:db:06:f6:12:e6:c3:72:2d:ba:ec:9b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Apr 8 04:01:59 2025 GMT
Not After : Apr 9 04:01:59 2025 GMT
Subject: CN=201a1be9b1e2f3733e9eca85c8f320adaf976636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:ca:0a:7d:43:e2:f8:0f:a8:3c:9d:9a:bd:
55:ca:52:8c:36:5a:c7:1a:98:81:4e:1f:bc:fc:70:
80:f1:97:3d:61:7d:6f:a6:99:c8:7e:5e:92:ed:f5:
26:32:3e:ea:ae:c0:43:15:99:1f:d1:aa:88:c1:4c:
08:1e:e4:e1:75:9f:2b:aa:a2:a5:4a:e8:22:a4:f2:
ff:36:c3:22:48:38:fa:17:d6:50:94:a0:3b:d6:cd:
c3:ba:db:37:7f:75:6c:ad:03:4e:1b:23:49:3b:bf:
b2:c2:db:11:ce:98:cb:f5:14:85:49:7f:5d:74:b0:
4e:ea:a6:0b:bd:c0:7c:43:66:3a:57:c8:09:15:91:
2b:7b:6c:dc:e2:e2:95:47:8d:ef:37:72:68:99:b5:
7e:4e:59:cf:90:25:56:35:2e:90:e8:d2:06:42:b5:
8b:50:4a:3d:63:30:4f:84:19:9e:88:59:92:24:81:
37:86:7e:14:d6:69:a3:28:b7:6d:c2:cf:fa:69:17:
40:b8:f0:42:28:cb:eb:4a:27:10:54:30:de:c8:3d:
98:b7:f0:86:75:ba:8e:d6:91:d7:ac:8b:ce:53:07:
e1:73:e3:02:9c:0b:93:ab:b0:9f:9b:eb:f8:6e:43:
fb:fb:29:aa:70:0c:7e:a0:27:5b:d3:3d:38:0c:78:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:1B:E9:B1:E2:F3:73:3E:9E:CA:85:C8:F3:20:AD:AF:97:66:36
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5f:7b:a3:48:fa:95:53:ba:3a:2a:9f:ae:c8:48:99:55:a2:
7c:18:11:ac:b4:92:6d:76:be:6a:2f:df:e2:f0:6a:1b:13:72:
c8:21:14:db:8e:9c:02:cc:32:59:d2:ae:c6:0b:0a:94:6b:66:
27:93:83:a5:46:03:cc:94:3c:02:09:05:40:f3:59:7d:1c:7e:
16:f7:19:66:41:cb:7a:5f:b9:22:13:17:6c:7a:86:b2:8d:7f:
5f:9c:ec:39:23:c8:79:df:eb:b9:18:9e:dd:3a:e8:64:ee:37:
a7:90:f8:93:82:e9:57:15:08:3d:d1:4e:0a:75:bb:9f:a9:89:
bc:f6:ff:78:0a:ad:52:d2:1a:79:6f:f0:a2:2f:fd:ab:35:1b:
5c:14:24:08:9e:17:48:23:6b:dc:9e:64:78:c2:e2:d5:ea:45:
67:07:6a:19:b5:79:26:0e:de:6f:88:f7:76:b1:d9:b0:c9:66:
64:6a:2a:32:e8:77:69:71:93:74:b9:84:33:76:62:c1:7d:f6:
2e:8e:3e:31:4f:28:a7:6d:e8:0c:81:93:ee:3c:16:27:6c:18:
af:de:55:ae:f2:9a:f7:c6:74:33:0a:f0:08:72:a2:3c:8e:a2:
e4:6a:8b:c8:8e:ac:44:d6:fe:fc:8c:f9:b0:14:83:99:21:10:
b9:e3:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:59 2025 by rpki-client