Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: fAw5kk08x3d9YKeFZxMT1CPa81hGmF7jGhf1Nz25r8M=
Subject key identifier: FC:5F:D6:AC:4E:7D:2D:A3:01:F3:E2:04:7C:55:87:A3:8F:BD:31:63
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019654C987F0D1E6045CD8A1366391EFDBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0D2C
Signing time: Sun 20 Apr 2025 20:00:15 +0000
Manifest this update: Sun 20 Apr 2025 20:00:15 +0000
Manifest next update: Mon 21 Apr 2025 20:00:15 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: 5DkDGh3iB/uYf/9qWpQZZ6zDOXqWH+R+aCEcQoGqHRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:87:f0:d1:e6:04:5c:d8:a1:36:63:91:ef:db:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Apr 20 20:00:15 2025 GMT
Not After : Apr 21 20:00:15 2025 GMT
Subject: CN=fc5fd6ac4e7d2da301f3e2047c5587a38fbd3163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:b8:5a:75:59:e3:c8:7b:ef:91:a9:af:85:
eb:80:b7:bd:29:9e:85:ce:ff:cb:4a:5d:90:6c:d8:
b8:6e:92:d3:c1:ca:ad:36:05:f8:b5:36:ea:37:98:
32:af:ba:14:75:ce:2e:45:b2:9f:59:57:c9:3d:8b:
02:7a:00:ff:1b:17:09:6b:77:c1:a8:cc:c6:24:0d:
18:2f:47:64:c0:48:e3:38:e8:80:88:3f:f4:70:6e:
bb:69:f6:cb:dd:33:27:62:5a:ec:d1:87:c0:52:5c:
be:cd:f7:89:23:82:2a:b5:bf:64:5e:bd:44:b0:22:
d0:b7:04:22:ae:65:cf:a9:7d:f9:c2:61:cd:5b:10:
79:34:26:7d:00:d1:4d:d2:4d:4b:f8:35:03:8d:a6:
2b:e0:7b:2a:c6:ba:40:13:2b:05:4d:d5:40:36:ef:
36:6e:1c:10:85:48:33:19:67:e1:37:e3:2d:7b:7c:
2f:2c:02:98:f3:21:d1:ab:01:fc:c1:88:23:03:a8:
1e:46:bc:f8:7d:10:0e:01:58:df:6c:0f:15:4b:9e:
40:7f:60:bb:57:5d:5e:10:be:e2:6c:84:c1:a6:ce:
bf:92:cf:b9:f4:b0:17:fc:cf:17:29:9e:ec:f6:2d:
50:c4:8f:8a:5b:4d:d4:44:d3:f8:60:97:6a:b7:29:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:D6:AC:4E:7D:2D:A3:01:F3:E2:04:7C:55:87:A3:8F:BD:31:63
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:1e:be:12:fc:b1:ba:f3:a7:87:a9:ab:ab:a3:66:c6:ae:
33:27:b8:bd:e8:9d:bf:99:02:9a:d9:86:de:50:66:4a:3b:ba:
3d:0d:fb:f0:c4:a7:8d:4c:bb:98:2f:88:ac:38:f6:bf:31:b6:
41:7b:38:ce:74:20:a1:51:d0:0b:40:57:07:c9:8b:0a:0b:ce:
4a:d8:79:99:15:91:c8:5b:91:22:51:7f:9c:c7:df:54:f5:f7:
79:51:63:b2:fe:23:f6:5c:2a:d5:f1:1d:63:7b:e9:2e:d3:04:
57:67:6a:34:fd:ef:6d:83:fc:92:1d:1e:28:a3:bc:cf:19:5c:
5a:16:85:41:da:5b:b4:48:56:2c:84:bf:2d:b5:ab:4c:48:46:
65:cd:42:ee:2a:3c:1e:77:43:94:51:42:ce:3b:a5:f3:7e:90:
05:df:a8:b3:64:62:46:cf:87:49:7c:28:bd:81:80:a4:12:5d:
68:6b:d9:c1:1a:1c:01:71:06:51:98:c6:5f:32:81:c0:25:f3:
ac:30:b8:7d:96:ed:57:1e:a7:e1:91:3c:93:20:37:86:4f:33:
6c:7f:c8:d7:26:57:23:1a:7a:40:50:44:80:a9:7a:92:0a:cb:
e6:c7:0b:b7:1b:ae:92:55:35:17:8f:ba:4c:91:2b:83:03:a0:
89:e1:be:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:49 2025 by rpki-client