Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: r2lIhdjhkXxOJj7K5zjrbmHSCJeLBcNMxAeZlIt8HSo=
Subject key identifier: 47:28:F7:08:E5:9F:DC:E5:51:EE:23:4F:93:50:09:61:19:59:18:93
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 01964FA34C92AC1F60C65121A89C03452C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0CE4
Signing time: Sat 19 Apr 2025 20:00:24 +0000
Manifest this update: Sat 19 Apr 2025 20:00:24 +0000
Manifest next update: Sun 20 Apr 2025 20:00:24 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: aRB2qQ0c6ekkLbFzCPxQegffxp46u6EfwW7oZiaMp/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:4c:92:ac:1f:60:c6:51:21:a8:9c:03:45:2c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Apr 19 20:00:24 2025 GMT
Not After : Apr 20 20:00:24 2025 GMT
Subject: CN=4728f708e59fdce551ee234f9350096119591893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:ba:01:cd:2d:3a:1f:ed:03:97:c7:f3:f1:
50:f3:e1:e9:e9:bc:20:f6:e0:ef:7b:24:35:68:e5:
af:94:06:c5:32:39:ad:43:de:9e:83:88:5b:da:30:
23:5b:c6:fa:58:2b:fd:e8:7b:19:ee:2d:eb:dc:5a:
65:c1:dd:18:63:02:41:1e:07:ed:f4:16:95:97:77:
ed:f2:d4:a5:da:0f:37:4d:59:e0:2d:26:e4:ff:7e:
71:48:d8:51:b0:27:28:ff:2f:67:bf:03:ce:94:b1:
15:bc:c3:2d:6e:cb:43:11:c2:08:4d:23:70:d0:0b:
f6:ee:70:3f:11:03:7d:5d:ab:3a:1d:39:04:4a:26:
7f:39:cf:cd:b9:84:f2:e6:0e:e2:69:72:fb:a8:28:
90:a6:51:2b:1a:aa:02:38:4d:81:50:fe:83:76:56:
18:2b:9f:11:79:c9:de:a8:f6:8d:25:28:24:e5:d5:
8b:83:94:86:ef:af:30:c1:01:e9:ca:3f:a4:de:20:
38:8b:8e:7d:7d:c6:d2:51:0d:cb:1d:f9:c8:04:ba:
b4:59:c9:2a:f3:af:73:ca:9b:f5:a5:8a:04:7c:32:
e5:0e:6f:b1:ec:8d:f5:4b:a0:c8:88:61:21:23:16:
60:2b:fd:8b:42:23:40:18:6c:fc:0f:8d:db:21:1c:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:F7:08:E5:9F:DC:E5:51:EE:23:4F:93:50:09:61:19:59:18:93
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:de:d4:ce:a2:c9:13:17:cf:6a:44:1c:aa:bb:68:1c:ed:
17:df:f0:56:24:61:16:aa:03:48:c5:35:88:6b:fe:a3:27:80:
73:9c:1a:30:23:68:03:b2:c3:d5:20:12:9d:d5:cb:98:a2:0b:
9b:4a:07:bd:4c:fd:7f:72:bf:dd:38:29:5c:f9:23:b6:4d:6e:
94:bf:b2:71:f8:41:d6:a8:ea:60:72:33:78:84:41:8d:07:61:
78:29:c3:04:94:bf:a7:b2:d6:b8:e2:21:ca:93:e1:36:a1:ba:
b1:7d:df:7d:15:42:3e:98:55:57:ee:80:a9:cc:90:fc:2a:8d:
20:28:81:a8:fa:ab:cb:f9:50:e8:6c:0e:75:74:1e:b6:a9:55:
7b:0d:19:4b:4f:20:03:fd:d0:c1:76:c9:75:71:d8:63:af:1e:
7f:29:71:71:1c:4a:5c:df:28:0f:77:e8:f4:72:42:54:07:92:
58:ca:5e:28:69:49:e3:3a:89:2f:7b:81:83:15:7b:33:94:33:
00:77:30:34:89:1d:31:27:8e:2f:62:30:6d:b3:c0:2e:ba:23:
49:1f:56:53:84:6f:ec:cc:b5:68:de:51:c8:ce:c8:f7:f2:b0:
85:fa:4a:47:9f:8c:e4:cc:b3:99:21:ba:6f:6c:75:9a:a8:97:
d0:0c:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:47 2025 by rpki-client