Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: Kvj7PZ86ubywnx773uujaMvjH9KA1I6FO1jLBizX3Bc=
Subject key identifier: 28:83:C3:90:6C:84:C4:0D:53:49:8C:C1:01:F4:FD:F1:CD:47:BF:58
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019607F9B289897E47CE2BB7F598D9127AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 14D8
Signing time: Sat 05 Apr 2025 22:02:06 +0000
Manifest this update: Sat 05 Apr 2025 22:02:06 +0000
Manifest next update: Sun 06 Apr 2025 22:02:06 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: jZUo4dpVitmHY+zOQZa8vVtzRtiah/HLChoxlXk2YcY=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:f9:b2:89:89:7e:47:ce:2b:b7:f5:98:d9:12:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Apr 5 22:02:06 2025 GMT
Not After : Apr 6 22:02:06 2025 GMT
Subject: CN=2883c3906c84c40d53498cc101f4fdf1cd47bf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:76:08:7d:4f:4e:c1:97:c4:c9:01:fb:db:
df:e5:8b:a9:38:40:cd:77:78:92:98:ea:89:a9:70:
a8:a1:19:a3:90:12:b0:73:47:9f:6b:d5:7b:14:a2:
82:91:c7:de:ff:b7:a4:79:e2:18:df:70:ed:a6:96:
fa:3e:1c:6f:59:e0:e1:e9:b2:c9:5e:82:fd:1e:05:
5d:db:da:63:b7:d1:57:93:c2:59:57:db:f2:4c:dc:
08:68:c0:2f:13:f2:eb:7f:3c:77:06:8c:51:8d:90:
70:7a:a1:e6:3e:b0:27:7e:3f:4a:c5:75:c6:f9:60:
d8:6d:c5:2b:ec:8d:72:d3:18:6a:10:ad:fa:c5:1b:
80:1f:f6:be:1f:b7:e2:a4:d5:6f:5c:fd:df:22:11:
23:6d:aa:44:2b:8f:c4:dd:db:73:82:78:51:8a:97:
71:2e:aa:87:08:41:ab:19:3d:69:02:10:09:11:10:
aa:1c:8c:90:89:23:df:84:83:49:a2:a4:69:79:13:
04:cd:50:7b:3c:53:f1:97:b6:a4:e4:2d:c3:d9:81:
f1:2a:10:d4:9f:8c:4f:a1:01:f9:d4:38:63:c7:96:
78:65:56:53:9d:78:1c:72:cf:7d:d0:d6:66:de:d3:
13:7a:1b:5d:ad:d8:e1:f0:f8:b4:cd:1f:ad:db:81:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:C3:90:6C:84:C4:0D:53:49:8C:C1:01:F4:FD:F1:CD:47:BF:58
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:09:b5:dc:84:ad:10:a7:c7:f4:fa:82:57:cb:d7:3a:e5:7e:
fb:57:3d:62:bc:51:9a:90:a0:d7:15:02:f6:0d:e1:cf:19:97:
e7:ac:d3:5d:c4:db:87:b3:e3:12:db:0f:25:f2:8b:10:92:76:
bc:f3:02:bb:28:b8:2c:a3:69:e5:8f:97:e3:f0:b9:2e:2f:39:
fd:01:b2:fd:f1:fe:5b:8e:bd:82:46:a4:8a:18:ed:28:d7:29:
9e:e2:cf:33:94:2a:1b:05:67:29:53:cd:dc:4a:d1:a8:0e:9e:
d8:af:d1:8c:71:97:23:5c:85:de:1b:d9:56:77:51:76:48:c2:
5c:93:a5:b6:60:b0:cb:1c:24:e3:0f:e9:80:2f:1b:c6:4a:ec:
11:ea:64:a7:25:ed:f0:5b:37:f3:49:e7:91:c0:3a:3d:29:50:
84:9a:da:ba:48:73:f7:47:ca:5c:22:68:29:a8:01:82:2f:b9:
cc:1f:1e:b3:9b:8f:da:98:f2:b9:80:8f:64:7e:0b:fe:25:a9:
4b:a1:97:76:a0:6b:de:8e:ae:aa:9e:27:2d:11:0e:9c:53:7c:
5f:15:8a:52:0c:e2:a6:85:12:f7:74:2c:fc:bc:f3:2e:40:ed:
4d:20:ad:04:91:8b:aa:04:0f:2f:57:74:0a:b8:40:68:dd:9f:
16:41:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:34 2025 by rpki-client