Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier: Knxjl9u9XQwvKLXe2/FnDd8h9UwiBIRGLkuwKCXd2b8=
Subject key identifier: B2:EC:1F:93:5D:B0:E9:C9:04:60:51:FD:01:54:8A:16:79:E9:B6:53
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 0196523707D1B82D89A25E5931A7C9BC6DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 08:01:00 +0000
Manifest this update: Sun 20 Apr 2025 08:01:00 +0000
Manifest next update: Mon 21 Apr 2025 08:01:00 +0000
Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: HFmQ7tRg/XqFP1uNhY2I4HEpHSiHHF+TnqQproT/zM0=)
2: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (hash: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:07:d1:b8:2d:89:a2:5e:59:31:a7:c9:bc:6d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Apr 20 08:01:00 2025 GMT
Not After : Apr 21 08:01:00 2025 GMT
Subject: CN=b2ec1f935db0e9c9046051fd01548a1679e9b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:78:15:9b:bc:a6:8a:ad:0a:17:ae:cc:00:
6b:f0:df:46:61:32:5b:6e:f3:11:8d:7f:db:ea:d5:
b0:24:76:94:1a:7f:96:7c:89:88:7b:53:d3:1c:57:
ef:83:3c:cd:cf:1f:73:36:57:fb:55:87:d8:d0:f2:
ce:f3:d8:7e:72:4a:49:ca:f1:70:cd:58:de:84:b4:
f9:3e:cf:12:2e:2b:88:75:7f:49:2f:56:f5:ed:eb:
59:b4:2e:f0:38:2e:8e:e8:56:84:f7:3a:83:6a:d2:
84:95:46:77:5d:b5:21:bf:9c:7c:37:65:5a:a2:f3:
46:91:fb:6f:79:49:c9:18:e3:e1:a9:ae:b4:64:de:
a4:09:7b:1e:63:52:4c:41:d6:e3:87:1c:9a:12:dc:
6d:b2:55:d9:c6:47:99:a1:de:7d:a0:ef:29:a9:70:
93:66:db:74:5c:17:5d:17:ba:89:e8:ee:67:51:12:
63:80:f7:f7:e8:d6:7c:1e:1c:bf:c2:ab:e7:3e:e4:
ac:0f:8e:8f:bd:bc:ce:d6:eb:8b:a5:1d:fb:30:38:
14:94:6c:54:35:95:00:83:70:a8:f5:1b:1e:39:2a:
29:70:8e:94:90:87:c9:74:fc:05:b8:8b:f8:a3:b0:
d3:4b:e1:09:b1:e5:eb:3a:29:36:19:5c:d8:77:19:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:1F:93:5D:B0:E9:C9:04:60:51:FD:01:54:8A:16:79:E9:B6:53
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:fe:a3:72:b9:58:d6:f5:8f:73:d0:65:cd:b9:69:ed:42:61:
bb:89:af:ca:a6:f6:6d:ec:fd:d4:fc:61:80:36:f1:52:d6:7d:
89:8c:bc:ec:79:4b:41:f6:fd:7d:06:a9:52:b0:4b:45:a7:08:
b7:7b:56:21:d2:4e:60:f5:cf:04:83:f2:cc:5b:e8:fa:54:dc:
1d:d8:7a:02:cd:75:c0:24:f9:28:fd:54:51:d9:12:07:c4:9d:
a5:b3:7e:fb:20:7c:08:33:77:cd:ab:b0:39:2a:47:b6:c4:c6:
25:e8:5b:1f:e1:30:5b:e7:dd:e3:92:7a:f2:69:d2:fa:33:6a:
35:dd:06:a9:73:5d:c9:36:63:cb:84:8b:52:1e:fd:c9:3e:fb:
e6:a0:1b:50:c0:dc:92:fc:a3:3d:1b:a4:bf:88:38:08:6c:37:
4b:d2:6a:e8:26:15:5a:3b:54:c1:fb:81:66:33:9b:75:30:f2:
3d:b4:68:5b:ae:a1:d2:c8:43:ea:84:40:c7:19:02:02:45:d1:
c8:ae:10:d2:d7:cc:b7:9a:5f:3d:72:47:79:38:e1:55:72:31:
a3:1a:7b:5c:6e:25:0e:01:db:21:15:b0:41:c6:51:7f:d9:e7:
79:af:c9:20:83:bc:46:af:88:61:d6:72:a4:ab:04:54:a2:54:
35:5d:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:33:43 2025 by rpki-client