Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: FSDqOPNCudTCESkzejGZxIVcc7XlTxA0Zt7axON0K6M=
Subject key identifier: 43:34:45:80:90:92:CA:79:B3:78:D8:2B:CA:00:75:A1:E4:FA:EC:D5
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 01964D107B244A25F6EB3753A9DAB1B9F14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 05D2
Signing time: Sat 19 Apr 2025 08:00:47 +0000
Manifest this update: Sat 19 Apr 2025 08:00:47 +0000
Manifest next update: Sun 20 Apr 2025 08:00:47 +0000
Files and hashes: 1: hnLlF72Gey1RhDc5w20W5CDAULo.roa (hash: shW0FHDTxcWsn5y+FQlRP0Y7mcQwz41mLYft4nrAmSI=)
2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: T5LaEN/FdnoCVsOKYMY8wqR49Z7e7v20RHnygy9Gkz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:7b:24:4a:25:f6:eb:37:53:a9:da:b1:b9:f1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Apr 19 08:00:47 2025 GMT
Not After : Apr 20 08:00:47 2025 GMT
Subject: CN=433445809092ca79b378d82bca0075a1e4faecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:96:8a:55:d7:25:35:33:15:80:cf:1d:40:
c1:60:75:5e:1b:6f:73:bf:b0:0c:02:e0:fa:d7:34:
c9:11:ff:35:e9:9d:62:6b:1c:de:ad:68:2c:b4:e4:
ba:5d:72:be:e6:30:4f:cb:b8:eb:a6:b7:72:87:02:
b3:d1:72:4e:32:0b:db:89:ff:05:4d:14:91:9d:ee:
ab:5c:1a:bb:83:52:27:55:6e:b2:9f:4c:58:d3:24:
7e:54:57:e9:dd:57:de:fe:d0:c2:fe:ea:ad:fa:d1:
3c:0b:58:ec:c7:c6:c5:bf:33:01:d0:2d:53:1c:4e:
18:83:f9:bc:7b:aa:b8:fe:dd:61:d1:93:01:8f:8a:
1a:96:f8:83:99:bc:16:9a:eb:c5:a3:5a:0e:4a:86:
53:4d:be:75:74:ee:b3:27:43:70:ba:ca:96:c1:23:
e0:ad:de:d0:d2:78:e4:af:3d:b5:7e:e5:fa:83:04:
f9:31:a5:5c:ad:11:7c:8b:9b:9b:f6:51:85:88:a5:
74:c6:3d:e4:fb:2d:4f:2f:10:67:d9:df:c1:c2:07:
20:9f:34:34:af:30:59:c0:30:3a:a3:44:af:4d:3f:
71:94:2d:72:83:da:a8:b3:6c:c6:9f:c4:b0:2d:40:
8f:b5:b7:a7:0e:54:cf:64:17:8c:97:64:0d:20:92:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:45:80:90:92:CA:79:B3:78:D8:2B:CA:00:75:A1:E4:FA:EC:D5
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:20:c9:61:21:31:2c:7b:5a:9d:2f:af:0a:ad:9a:a1:6d:c1:
56:fa:d8:ac:dd:13:e2:83:b4:b1:12:77:ae:bd:a9:f8:23:e4:
7d:22:d3:13:8c:ce:8d:a1:e5:ce:cd:5c:0d:08:a7:13:0c:63:
64:69:01:ec:e1:e9:85:62:78:e2:fe:9b:80:0d:ba:b0:50:b9:
83:95:f6:c2:cb:0a:9f:fd:8c:5a:87:bf:c4:5a:cd:c9:cd:7d:
3d:85:d6:ee:1b:54:ec:f4:db:29:8a:a7:ec:6f:8e:44:46:69:
c0:46:80:ff:92:29:ed:2b:6e:65:e5:eb:64:89:c4:d0:17:46:
e1:ad:81:12:03:44:d9:45:28:1a:f5:3d:10:3f:ce:f8:27:e1:
2d:b9:c7:1c:31:33:a8:55:e9:9b:3e:1c:e2:57:27:46:d2:5d:
38:30:0d:20:28:00:f1:5a:94:4b:65:b9:34:a8:7b:8f:49:2b:
4b:9d:98:33:e8:71:aa:97:e5:83:1c:c4:57:74:76:14:2e:3a:
28:9e:a6:e1:b5:5e:b5:47:ea:dd:81:59:89:c3:1a:90:3a:0e:
77:58:32:b3:f5:f5:9f:ac:ab:83:8e:82:d7:59:b7:3c:10:78:
72:11:33:3b:d3:96:96:a2:d0:ff:68:36:06:30:79:e3:ce:4d:
84:ae:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:02 2025 by rpki-client